@try-works/dsh-righthand 0.1.2 → 0.1.4

package/README.md

@@ -6,6 +6,8 @@ tool guard. Every tool is built on the harness's own services
 (`storageDomain`, `credentials`, `settings`, `subprocess`, `jobs`, `tools`),
 not hand-rolled primitives.
 
+The plugin also ships **blueprint guidance** — ten named recipes for the agent-built tools this plugin exists to compose (see [Blueprints](#blueprints) below) — plus a packaged skill, a settings namespace, and an optional tool guard.
+
 ## Install
 
 ```bash
@@ -23,6 +25,7 @@ dsh --profile <profile> --patch ./cordis.patch.yml
 | Tool | Family | Backing service |
 |---|---|---|
 | `rh_store_put` / `rh_store_get` / `rh_store_delete` / `rh_store_list` | store | `ctx.storageDomain` (domain KV) |
+| `rh_task_create` / `rh_task_list` / `rh_task_next` / `rh_task_update` / `rh_task_delete` | tasks | `ctx.storageDomain` (typed `righthand_tasks` domain; state machine open → done/failed) |
 | `rh_credential_describe` / `rh_credential_set` / `rh_credential_unset` | secrets | `ctx.credentials` (values never echoed) |
 | `rh_settings_get` / `rh_settings_set` | secrets | `ctx.settings` (namespace `righthand`) |
 | `rh_run` | exec | `ctx.subprocess` (collect mode, bounded output) |
@@ -46,6 +49,13 @@ dsh --profile <profile> --patch ./cordis.patch.yml
 Guard modes: `allow` (pass through), `deny` (block with an error), `ask`
 (defer to the policy function). Omitted rules leave the guard inert.
 
+Rules may also declare `destructive: true` — a documentation flag for
+irreversible effects (deploy, delete, DNS change). It does not change
+enforcement; it records *why* the prefix is gated, and
+`tests/permissions.golden` records every `rh_*` tool's derived guard facts so
+guard changes are never silent (run `UPDATE_GOLDEN=1 pnpm test` to
+re-baseline deliberately).
+
 ## Settings
 
 Namespace "righthand" (registered by the secrets family):
@@ -59,12 +69,79 @@ Namespace "righthand" (registered by the secrets family):
 `rh_settings_get` returns the resolved values; `rh_settings_set` merges a
 partial patch (persisted by the harness settings provider).
 
+## Blueprints
+
+Blueprint guidance lives under `experiments/<blueprint>/` — each a
+`blueprint.json` spec plus a runnable template kit (`run.ts` + `test.ts`,
+`LEARNINGS.md`, and for the cloud-tested ones a `cloud/` Worker). They
+describe the tools this plugin composes; the daily-digest kit is the
+canonical example of the current DSH-native form (tool-to-tool via
+`ctx.tools.execute`, synthesis via `ctx.llm`, deliverables via `ctx.fs`).
+
+| Blueprint | What it builds |
+|---|---|
+| `blueprint/daily-digest` | Collect sources, summarize, send on a schedule — extractive locally, LLM synthesis as escalation |
+| `blueprint/research-radar` | Multi-source research over a rolling window (Reddit, X, YouTube, HN, Polymarket, web): score, dedupe, synthesize with citations |
+| `blueprint/web-scraper` | Fetch a page, extract title/headings/links/text, make it searchable — static HTML first, render/vision as escalation |
+| `blueprint/vision-worker` | Cloudflare Worker exposing kimi-k2.6 vision: route image requests for text-only models, return a versioned `VisionEnvelope` |
+| `blueprint/vision-qa-assistant` | Answer questions about images for a text-only model — hash-cache locally, Workers AI vision as the semantic path |
+| `blueprint/inbound-webhook-pipeline` | Receive → validate → run job → store → notify, with idempotency-key dedupe as the load-bearing invariant |
+| `blueprint/event-sourced-store` | Tool store where every mutation is an event: govern, checksum, append offset-addressable events, catch up by version |
+| `blueprint/governed-registry` | Register a tool format; every write runs the governed flow: validate → normalize → checksum → index → summarize |
+| `blueprint/mcp-tool-surface` | Deterministic + AI-backed tools behind a stateless MCP surface with normalized LLM output |
+| `blueprint/session-watcher` | Poll DSH sessions, evaluate a condition (new publish / builder idle / cadence), message a target session |
+
+Analyses of the [micro.mu](https://github.com/micro/mu) project this plugin
+learns from: [`docs/agent-tool-catalog.md`](docs/agent-tool-catalog.md) (tool
+families worth adding, from the tools catalogue + permission commit) and
+[`docs/mu-repo-analysis.md`](docs/mu-repo-analysis.md) (architecture lessons
+from the whole repo — single-source specs, golden permissions, layering,
+held-state gates, SSRF guarding).
+
+## Packaged skill
+
+The plugin ships the `dsh-righthand` skill
+(`skills/dsh-righthand/SKILL.md`, the dsh-plugin packaged-skill standard):
+tool-reference tables, store/credential/settings semantics, guard modes, and
+service availability. It registers via `ctx.skills` on mount, so the agent's
+skill catalog lists it automatically.
+
+## Use cases
+
+Everything below runs through the harness's own services; nothing is
+hand-rolled.
+
+**Durable agent memory / task board.** Store task cards under `task:<slug>`
+and let `rh_store_list` enumerate them across restarts and context
+compaction — no project files touched. Complete by overwriting, clean up
+with `rh_store_delete`.
+
+**Pre-deploy gate.** Before any deploy: `rh_credential_describe` asserts the
+API token exists, `rh_settings_get` asserts the account/zone, `rh_run` runs
+tests + build, `rh_store_put` records a deploy receipt, and a guard rule
+gates the actual deploy tool behind `mode: 'ask'`.
+
+**Secret onboarding.** `rh_credential_set` stores a key through the
+credential provider (the value is never echoed back); `rh_credential_describe`
+reports configured state + source; rotation is unset-then-set.
+
+**Daily digests.** The agent fetches sources and stores them under
+`digest:<date>` (see `blueprint/daily-digest`), diffing days with
+`rh_store_get` and rendering MDX deliverables through `ctx.fs`.
+
+**CI-lite.** `rh_run_bg` starts a long build as an owner-scoped background
+job; its id + status live in the store so a later turn can poll and collect.
+
+**Governed exec.** Any high-impact command can be fronted by a guard rule
+(`deny` to block a prefix, `ask` to require a policy function's approval),
+so the agent cannot deploy or destroy without the gate.
+
 ## Service availability
 
-The store family needs `ctx.storageDomain`, which the web profile provides
-(`storage` + `storage-json` + `storage-domain` rows). In a profile without
-it — e.g. the headless bundle — the store tools stay dormant and the other
-seven tools still register; the plugin never fails the boot.
+The store and task families need `ctx.storageDomain`, which the web profile
+provides (`storage` + `storage-json` + `storage-domain` rows). In a profile
+without it — e.g. the headless bundle — those nine tools stay dormant and the
+other seven tools still register; the plugin never fails the boot.
 
 ## Development
 

package/lib/guard-tools.d.ts

@@ -3,6 +3,14 @@
  * Demonstrates the §4.4 allow/deny/ask gate the righthand plugin uses to
  * gate high-impact deploy/invoke tools. Built on ctx.on('tools/pre-execute'),
  * not a hand-rolled wrapper.
+ *
+ * Rules are prefix-based. A rule may also declare `destructive: true` — a
+ * pure documentation flag saying the gated tools have irreversible effects
+ * (deploy, delete, DNS change): the kind of surface a tool *description*
+ * (attacker-controlled text) could talk the agent into. The flag does not
+ * change enforcement — `mode` does — it records WHY the prefix is guarded,
+ * and `tests/permissions.golden` records it so guard changes are never
+ * silent.
  * @module dsh-righthand/guard-tools
  */
 import type { Context } from '@deepseek-ai/cordis';
@@ -13,9 +21,30 @@ export interface GuardRule {
     toolPrefix: string;
     /** 'allow' passes through; 'deny' blocks; 'ask' defers to a policy function. */
     mode: 'allow' | 'deny' | 'ask';
+    /**
+     * Documentation flag: the gated tools have irreversible effects nobody
+     * asked for (a deploy, a delete, a DNS change). Declarative only —
+     * enforcement is the rule's `mode`. Default false.
+     */
+    destructive?: boolean;
     /** Only consulted when mode is 'ask'. Return true to allow. */
     ask?: (args: unknown) => boolean;
 }
+/**
+ * The guard facts a tool name resolves to: the mode the first matching rule
+ * enforces (or 'none' when no rule matches) and whether that rule marks the
+ * prefix destructive. This is the SINGLE lookup both the enforcement hook
+ * and the permissions golden use, so the recorded facts cannot drift from
+ * what the gate actually does.
+ */
+export interface GuardFacts {
+    mode: 'allow' | 'deny' | 'ask' | 'none';
+    destructive: boolean;
+    /** The matched rule, when one matched — the enforcement hook's ask path needs it. */
+    rule: GuardRule | undefined;
+}
+/** Resolve one tool name to its guard facts. Rules match in order, first wins. */
+export declare function guardFactsFor(toolName: string, rules: readonly GuardRule[]): GuardFacts;
 /** Apply a guard over a set of tool-name prefixes. */
 export declare function apply(ctx: Context, config?: {
     rules?: GuardRule[];

package/lib/guard-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard-tools.d.ts","sourceRoot":"","sources":["../src/guard-tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,eAAO,MAAM,IAAI,oBAAoB,CAAA;AACrC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,MAAM,WAAW,SAAS;IACxB,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;IAC9B,+DAA+D;IAC/D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;CACjC;AAED,sDAAsD;AACtD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CAAO,GAAG,IAAI,CAgB9E"}
+{"version":3,"file":"guard-tools.d.ts","sourceRoot":"","sources":["../src/guard-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,eAAO,MAAM,IAAI,oBAAoB,CAAA;AACrC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,MAAM,WAAW,SAAS;IACxB,wEAAwE;IACxE,UAAU,EAAE,MAAM,CAAA;IAClB,gFAAgF;IAChF,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAA;IACvC,WAAW,EAAE,OAAO,CAAA;IACpB,qFAAqF;IACrF,IAAI,EAAE,SAAS,GAAG,SAAS,CAAA;CAC5B;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,SAAS,EAAE,GAAG,UAAU,CAIvF;AAED,sDAAsD;AACtD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CAAO,GAAG,IAAI,CAa9E"}

package/lib/guard-tools.js

@@ -3,26 +3,38 @@
  * Demonstrates the §4.4 allow/deny/ask gate the righthand plugin uses to
  * gate high-impact deploy/invoke tools. Built on ctx.on('tools/pre-execute'),
  * not a hand-rolled wrapper.
+ *
+ * Rules are prefix-based. A rule may also declare `destructive: true` — a
+ * pure documentation flag saying the gated tools have irreversible effects
+ * (deploy, delete, DNS change): the kind of surface a tool *description*
+ * (attacker-controlled text) could talk the agent into. The flag does not
+ * change enforcement — `mode` does — it records WHY the prefix is guarded,
+ * and `tests/permissions.golden` records it so guard changes are never
+ * silent.
  * @module dsh-righthand/guard-tools
  */
 export const name = 'righthand-guard';
 export const inject = ['tools'];
+/** Resolve one tool name to its guard facts. Rules match in order, first wins. */
+export function guardFactsFor(toolName, rules) {
+    const rule = rules.find(r => toolName.startsWith(r.toolPrefix));
+    if (rule === undefined)
+        return { mode: 'none', destructive: false, rule: undefined };
+    return { mode: rule.mode, destructive: rule.destructive === true, rule };
+}
 /** Apply a guard over a set of tool-name prefixes. */
 export function apply(ctx, config = {}) {
     const rules = config.rules ?? [];
     ctx.on('tools/pre-execute', (exec, next) => {
-        const rule = rules.find(r => exec.name.startsWith(r.toolPrefix));
-        if (rule === undefined)
+        const facts = guardFactsFor(exec.name, rules);
+        if (facts.mode === 'none' || facts.mode === 'allow')
             return next();
-        if (rule.mode === 'deny') {
+        if (facts.mode === 'deny') {
             throw new Error(`tool ${exec.name} is denied by righthand guard`);
         }
-        if (rule.mode === 'ask') {
-            const allowed = rule.ask?.(exec.arguments) ?? false;
-            if (!allowed)
-                throw new Error(`tool ${exec.name} requires approval (ask returned false)`);
-            return next();
-        }
+        const allowed = facts.rule?.ask?.(exec.arguments) ?? false;
+        if (!allowed)
+            throw new Error(`tool ${exec.name} requires approval (ask returned false)`);
         return next();
     }, { prepend: true });
 }

package/lib/guard-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard-tools.js","sourceRoot":"","sources":["../src/guard-tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAA;AACrC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AAW/B,sDAAsD;AACtD,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAkC,EAAE;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAA;IAEhC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QAChE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAA;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,+BAA+B,CAAC,CAAA;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAA;YACnD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,yCAAyC,CAAC,CAAA;YACzF,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACvB,CAAC"}
+{"version":3,"file":"guard-tools.js","sourceRoot":"","sources":["../src/guard-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAA;AACrC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAA;AA+B/B,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,KAA2B;IACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC/D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IACpF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,IAAI,EAAE,CAAA;AAC1E,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAAkC,EAAE;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAA;IAEhC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,EAAE,CAAA;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,+BAA+B,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAA;QAC1D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,yCAAyC,CAAC,CAAA;QACzF,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;AACvB,CAAC"}

package/lib/index.d.ts

@@ -14,6 +14,7 @@
  * Modules (each individually mountable via `export * as ...`):
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
+ * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -25,6 +26,7 @@ import * as storeTools from './store-tools.ts';
 import * as secretsTools from './secrets-tools.ts';
 import * as execTools from './exec-tools.ts';
 import * as guardTools from './guard-tools.ts';
+import * as taskTools from './task-tools.ts';
 import * as righthandSkills from './skills.ts';
 import type { GuardRule } from './guard-tools.ts';
 export declare const name = "dsh-righthand";
@@ -42,7 +44,9 @@ export interface RighthandConfig {
  * instead of failing the whole plugin.
  */
 export declare function apply(ctx: Context, config?: RighthandConfig): void;
-export { storeTools, secretsTools, execTools, guardTools, righthandSkills };
+export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills };
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from './skills.ts';
 export type { GuardRule } from './guard-tools.ts';
+export { guardFactsFor } from './guard-tools.ts';
+export type { GuardFacts } from './guard-tools.ts';
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,iFAAiF;AACjF,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAElC,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CAMtE;AAGD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEjD,eAAO,MAAM,IAAI,kBAAkB,CAAA;AAEnC,iFAAiF;AACjF,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAElC,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CAOtE;AAGD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACtF,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA"}

package/lib/index.js

@@ -14,6 +14,7 @@
  * Modules (each individually mountable via `export * as ...`):
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
+ * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -24,6 +25,7 @@ import * as storeTools from "./store-tools.js";
 import * as secretsTools from "./secrets-tools.js";
 import * as execTools from "./exec-tools.js";
 import * as guardTools from "./guard-tools.js";
+import * as taskTools from "./task-tools.js";
 import * as righthandSkills from "./skills.js";
 export const name = 'dsh-righthand';
 /** The combined plugin needs no services itself; each child waits on its own. */
@@ -38,10 +40,12 @@ export function apply(ctx, config = {}) {
     ctx.plugin(storeTools);
     ctx.plugin(secretsTools);
     ctx.plugin(execTools);
+    ctx.plugin(taskTools);
     ctx.plugin(guardTools, { rules: config.rules ?? [] });
     ctx.plugin(righthandSkills);
 }
 // Individual modules stay importable for selective mounting.
-export { storeTools, secretsTools, execTools, guardTools, righthandSkills };
+export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills };
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from "./skills.js";
+export { guardFactsFor } from "./guard-tools.js";
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAG9C,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAQlC;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA0B,EAAE;IAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;IACrD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;AAC7B,CAAC;AAED,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,eAAe,MAAM,aAAa,CAAA;AAG9C,MAAM,CAAC,MAAM,IAAI,GAAG,eAAe,CAAA;AAEnC,iFAAiF;AACjF,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAQlC;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,SAA0B,EAAE;IAC9D,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IACxB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACrB,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;IACrD,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;AAC7B,CAAC;AAED,6DAA6D;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACtF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEtF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA"}

package/lib/task-tools.d.ts

@@ -0,0 +1,44 @@
+/**
+ * task-tools — rh_task_* over ctx.storageDomain.
+ * A typed task board with a state machine: open → done | failed.
+ * `rh_task_next` is the queue discipline — the oldest open task is what to
+ * work on now. Descriptions carry the rule that a task's failure is recorded
+ * like an answer: a run that could not happen is news the owner needs.
+ * @module dsh-righthand/task-tools
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { Domain } from '@deepseek-ai/dsh-storage-domain';
+export declare const name = "righthand-task";
+export declare const inject: string[];
+export type TaskState = 'open' | 'done' | 'failed';
+export interface Task {
+    id: string;
+    title: string;
+    detail: string;
+    due: string;
+    state: TaskState;
+    result: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Domain spec: the typed task table. */
+export declare const taskDomain: {
+    name: string;
+    version: number;
+    tables: {
+        tasks: import("@deepseek-ai/dsh-storage-domain").DomainTableSpec<string, {
+            id: string;
+            title: string;
+            detail: string;
+            due: string;
+            state: "failed" | "open" | "done";
+            result: string;
+            createdAt: string;
+            updatedAt: string;
+        }>;
+    };
+};
+export type TaskDomain = Domain<typeof taskDomain>;
+/** Open the task domain and register the model-facing tools. */
+export declare function apply(ctx: Context): void;
+//# sourceMappingURL=task-tools.d.ts.map

package/lib/task-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-tools.d.ts","sourceRoot":"","sources":["../src/task-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AAG7D,eAAO,MAAM,IAAI,mBAAmB,CAAA;AACpC,eAAO,MAAM,MAAM,UAA6B,CAAA;AAEhD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAA;AAElD,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,SAAS,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,yCAAyC;AACzC,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;CAerB,CAAA;AAEF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,UAAU,CAAC,CAAA;AAMlD,gEAAgE;AAChE,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAgLxC"}

package/lib/task-tools.js

@@ -0,0 +1,212 @@
+/**
+ * task-tools — rh_task_* over ctx.storageDomain.
+ * A typed task board with a state machine: open → done | failed.
+ * `rh_task_next` is the queue discipline — the oldest open task is what to
+ * work on now. Descriptions carry the rule that a task's failure is recorded
+ * like an answer: a run that could not happen is news the owner needs.
+ * @module dsh-righthand/task-tools
+ */
+import { defineTool } from '@deepseek-ai/dsh-tools';
+import { defineDomain, domainTable } from '@deepseek-ai/dsh-storage-domain';
+import { z } from 'zod';
+export const name = 'righthand-task';
+export const inject = ['tools', 'storageDomain'];
+/** Domain spec: the typed task table. */
+export const taskDomain = defineDomain({
+    name: 'righthand_tasks',
+    version: 1,
+    tables: {
+        tasks: domainTable(z.object({
+            id: z.string(),
+            title: z.string(),
+            detail: z.string(),
+            due: z.string(),
+            state: z.enum(['open', 'done', 'failed']),
+            result: z.string(),
+            createdAt: z.string(),
+            updatedAt: z.string(),
+        })),
+    },
+});
+function newId() {
+    return 't-' + Date.now().toString(36) + '-' + Math.random().toString(36).slice(2, 6);
+}
+/** Open the task domain and register the model-facing tools. */
+export function apply(ctx) {
+    let domain;
+    let ready;
+    ctx.effect(() => {
+        ready = (async () => {
+            domain = await ctx.storageDomain.open(taskDomain);
+        })();
+        return () => { };
+    });
+    const ensure = async () => {
+        if (domain === undefined) {
+            await ready;
+        }
+        if (domain === undefined)
+            throw new Error('righthand tasks are not open (storageDomain not mounted)');
+        return domain;
+    };
+    const all = async () => {
+        const d = await ensure();
+        return [...d.table('tasks').entries()].map(([, t]) => t);
+    };
+    ctx.tools.register(defineTool({
+        name: 'rh_task_create',
+        description: 'Add a task with a title, optional detail and due date. Returns the created task with a generated id and state open. A task the agent cannot run is still recorded — its failure is delivered like an answer.',
+        parameters: {
+            title: { type: 'string', required: true, description: 'What the task is, e.g. "deploy vision-worker".' },
+            detail: { type: 'string', description: 'Optional longer description of what done means.' },
+            due: { type: 'string', description: 'Optional due date, YYYY-MM-DD.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    id: { type: 'string', required: true },
+                    title: { type: 'string', required: true },
+                    state: { type: 'string', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: 'task ' + value.id + ' created: ' + value.title + ' (open)' }],
+        },
+        async execute(args) {
+            const d = await ensure();
+            const now = new Date().toISOString();
+            const task = {
+                id: newId(),
+                title: args.title.trim(),
+                detail: args.detail ?? '',
+                due: args.due ?? '',
+                state: 'open',
+                result: '',
+                createdAt: now,
+                updatedAt: now,
+            };
+            if (task.title === '')
+                throw new Error('a task needs a title');
+            await d.table('tasks').put(task.id, task);
+            return { id: task.id, title: task.title, state: task.state };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_task_list',
+        description: 'List tasks, open ones first (oldest open first). Optionally filter by state.',
+        parameters: {
+            state: { type: 'string', description: 'Filter: open | done | failed. Omit for all tasks.' },
+        },
+        output: {
+            schema: {
+                type: 'array',
+                items: {
+                    type: 'object',
+                    additionalProperties: false,
+                    properties: {
+                        id: { type: 'string', required: true },
+                        title: { type: 'string', required: true },
+                        state: { type: 'string', required: true },
+                        due: { type: 'string' },
+                    },
+                },
+            },
+            render: (_args, tasks) => [{ type: 'text', text: tasks.length === 0 ? '(no tasks)' : tasks.map((t) => '[' + t.state + '] ' + t.title).join(' / ') }],
+        },
+        async execute(args) {
+            const tasks = await all();
+            const wanted = args.state ?? null;
+            const filtered = wanted ? tasks.filter(t => t.state === wanted) : tasks;
+            const rank = { open: 0, done: 1, failed: 2 };
+            filtered.sort((a, b) => (rank[a.state] - rank[b.state]) || a.createdAt.localeCompare(b.createdAt));
+            return filtered.map(t => ({ id: t.id, title: t.title, state: t.state, ...t.due ? { due: t.due } : {} }));
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_task_next',
+        description: 'The next open task — what to work on now. Oldest open task first. Returns found: false when nothing is open.',
+        parameters: {},
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    found: { type: 'boolean', required: true },
+                    id: { type: 'string' },
+                    title: { type: 'string' },
+                    detail: { type: 'string' },
+                    due: { type: 'string' },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: value.found ? 'next: ' + value.title : '(nothing open)' }],
+        },
+        async execute() {
+            const tasks = await all();
+            const open = tasks.filter(t => t.state === 'open').sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+            const t = open[0];
+            if (t === undefined)
+                return { found: false };
+            return { found: true, id: t.id, title: t.title, ...t.detail ? { detail: t.detail } : {}, ...t.due ? { due: t.due } : {} };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_task_update',
+        description: 'Change a task: its state (open | done | failed) and/or its result. A failed task should carry its result — what was tried and what went wrong — so the record says what happened, not just that something did.',
+        parameters: {
+            id: { type: 'string', required: true, description: 'The task id from rh_task_create or rh_task_list.' },
+            state: { type: 'string', description: 'New state: open | done | failed.' },
+            result: { type: 'string', description: 'What happened — the outcome, or the failure reason.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    found: { type: 'boolean', required: true },
+                    id: { type: 'string', required: true },
+                    state: { type: 'string', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: value.found ? 'task ' + value.id + ' -> ' + value.state : 'task ' + value.id + ' not found' }],
+        },
+        async execute(args) {
+            const d = await ensure();
+            const task = d.table('tasks').get(args.id);
+            if (task === undefined)
+                return { found: false, id: args.id, state: 'open' };
+            const next = {
+                ...task,
+                ...args.state !== undefined ? { state: args.state } : {},
+                ...args.result !== undefined ? { result: args.result } : {},
+                updatedAt: new Date().toISOString(),
+            };
+            await d.table('tasks').put(args.id, next);
+            return { found: true, id: args.id, state: next.state };
+        },
+    }));
+    ctx.tools.register(defineTool({
+        name: 'rh_task_delete',
+        description: 'Remove a task by id. Returns whether it existed.',
+        parameters: {
+            id: { type: 'string', required: true, description: 'The task id to remove.' },
+        },
+        output: {
+            schema: {
+                type: 'object',
+                additionalProperties: false,
+                properties: {
+                    id: { type: 'string', required: true },
+                    existed: { type: 'boolean', required: true },
+                },
+            },
+            render: (_args, value) => [{ type: 'text', text: 'deleted ' + value.id + ': ' + value.existed }],
+        },
+        async execute(args) {
+            const d = await ensure();
+            const existed = await d.table('tasks').delete(args.id);
+            return { id: args.id, existed };
+        },
+    }));
+}
+//# sourceMappingURL=task-tools.js.map

package/lib/task-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-tools.js","sourceRoot":"","sources":["../src/task-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAE3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,IAAI,GAAG,gBAAgB,CAAA;AACpC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;AAehD,yCAAyC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;IACrC,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC;IACV,MAAM,EAAE;QACN,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;YACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB,CAAC,CAAC;KACJ;CACF,CAAC,CAAA;AAIF,SAAS,KAAK;IACZ,OAAO,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,IAAI,MAA8B,CAAA;IAClC,IAAI,KAAgC,CAAA;IAEpC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;YAClB,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnD,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,GAAG,EAAE,GAAyC,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,KAAK,IAAyB,EAAE;QAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QACrG,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IAED,MAAM,GAAG,GAAG,KAAK,IAAqB,EAAE;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAA;QACxB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1D,CAAC,CAAA;IAED,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,8MAA8M;QAC3N,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gDAAgD,EAAE;YACxG,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE;YAC1F,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;SACvE;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACzC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC1C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,CAAC,EAAE,GAAG,YAAY,GAAG,KAAK,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;SAChH;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAA;YACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YACpC,MAAM,IAAI,GAAS;gBACjB,EAAE,EAAE,KAAK,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;gBACnB,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAA;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;YAC9D,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YACzC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;QAC9D,CAAC;KACF,CAAC,CAAC,CAAA;IACL,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,8EAA8E;QAC3F,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;SAC5F;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,oBAAoB,EAAE,KAAK;oBAC3B,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;wBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;wBACzC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;wBACzC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACxB;iBACF;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SAC1J;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,KAAK,GAAG,MAAM,GAAG,EAAE,CAAA;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAA;YACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;YACvE,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAA4B,CAAA;YACtE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YAClG,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1G,CAAC;KACF,CAAC,CAAC,CAAA;IAEH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,8GAA8G;QAC3H,UAAU,EAAE,EAAE;QACd,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC1C,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACxB;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;SAC5G;QACD,KAAK,CAAC,OAAO;YACX,MAAM,KAAK,GAAG,MAAM,GAAG,EAAE,CAAA;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;YACzG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;YAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAC3H,CAAC;KACF,CAAC,CAAC,CAAA;IACL,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,gNAAgN;QAC7N,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kDAAkD,EAAE;YACvG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kCAAkC,EAAE;YAC1E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;SAC/F;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC1C,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACtC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC1C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC;SAChJ;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAA;YACxB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC1C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;YAC3E,MAAM,IAAI,GAAS;gBACjB,GAAG,IAAI;gBACP,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAkB,EAAE,CAAC,CAAC,CAAC,EAAE;gBACrE,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC3D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAA;YACD,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;QACxD,CAAC;KACF,CAAC,CAAC,CAAA;IAEH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kDAAkD;QAC/D,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;SAC9E;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;oBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;iBAC7C;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACjG;QACD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,CAAC,GAAG,MAAM,MAAM,EAAE,CAAA;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAA;QACjC,CAAC;KACF,CAAC,CAAC,CAAA;AACL,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@try-works/dsh-righthand",
   "description": "DeepSeek Harness plugin: DSH-native righthand tools — durable KV store, credential/settings management, governed exec, and a tool guard",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

package/skills/dsh-righthand/SKILL.md

@@ -12,6 +12,7 @@ The righthand toolkit: DSH-native tools over the harness's own services. Use thi
 | Family | Tools | Backing service | Use when |
 |--------|-------|-----------------|----------|
 | store | `rh_store_put` / `rh_store_get` / `rh_store_delete` / `rh_store_list` | `ctx.storageDomain` (domain KV) | The task needs durable state across turns: a catalog, counter, cache, or note. Prefer this over files for structured JSON records. |
+| tasks | `rh_task_create` / `rh_task_list` / `rh_task_next` / `rh_task_update` / `rh_task_delete` | `ctx.storageDomain` (typed `righthand_tasks` domain) | A task board with a state machine (open → done/failed). `rh_task_next` is the oldest open task — what to work on now. A failed task's `result` records what went wrong: a task that cannot run is still recorded, never silently dropped. |
 | secrets | `rh_credential_describe` / `rh_credential_set` / `rh_credential_unset` | `ctx.credentials` | The task must check, store, or remove a credential reference (e.g. `CLOUDFLARE_API_TOKEN`). Values are written durably and **never echoed back**. |
 | settings | `rh_settings_get` / `rh_settings_set` | `ctx.settings` (namespace `righthand`) | Reading or patching righthand settings (`accountId`, `defaultZone`, `defaultScriptPrefix`). |
 | exec | `rh_run` / `rh_run_bg` | `ctx.subprocess` + `ctx.jobs` | Running one command (argv array, no shell interpretation). `rh_run` collects bounded output; `rh_run_bg` starts an owner-scoped background job and returns its id. |
@@ -23,6 +24,13 @@ The righthand toolkit: DSH-native tools over the harness's own services. Use thi
 - `rh_store_get` returns `{ found, key, value?, updatedAt? }` — `found: false` means the key is absent, not an error.
 - Writes are durable (backend flush before commit) and serialized on one write chain; values must be JSON-serializable.
 
+## Task semantics
+
+- One domain `righthand_tasks`: a `tasks` table keyed by generated task id (`t-...`).
+- States: `open` → `done` | `failed`. `rh_task_next` returns the oldest open task; nothing open returns `{ found: false }`.
+- `rh_task_update` takes a state and/or a `result` — a failed task should carry what was tried and what went wrong, so the record says what happened.
+- `rh_task_list` sorts open first (oldest first), then done, then failed; `state` filters.
+
 ## Credential semantics
 
 - `rh_credential_describe` reports `configured`, `source`, `writable` — never the value.
@@ -39,9 +47,11 @@ The righthand toolkit: DSH-native tools over the harness's own services. Use thi
 
 ## Guard policy
 
-Rules come from the plugin config (`rules: [{ toolPrefix, mode, ask? }]`). `deny` throws before dispatch; `ask` defers to the policy function (return true to allow); `allow` passes through. Tools matching no rule are unaffected.
+Rules come from the plugin config (`rules: [{ toolPrefix, mode, ask?, destructive? }]`). `deny` throws before dispatch; `ask` defers to the policy function (return true to allow); `allow` passes through. Tools matching no rule are unaffected. Prefixes match by prefix — `rh_run` also covers `rh_run_bg`.
+
+`destructive: true` is a documentation flag for irreversible effects (deploy, delete, DNS change); it never changes enforcement, only records why a prefix is gated. `tests/permissions.golden` records every tool's derived guard facts; a guard change that moves a fact fails the test until re-baselined (`UPDATE_GOLDEN=1 pnpm test`).
 
 ## Service availability
 
-- **web profile**: all twelve tools register (`storageDomain` is provided by the web app rows).
-- **other profiles** (e.g. headless): the store family stays dormant; the other seven tools still register. The plugin never fails the boot.
+- **web profile**: all sixteen tools register (`storageDomain` is provided by the web app rows).
+- **other profiles** (e.g. headless): the store and task families stay dormant; the other seven tools still register. The plugin never fails the boot.

package/src/guard-tools.ts

@@ -3,6 +3,14 @@
  * Demonstrates the §4.4 allow/deny/ask gate the righthand plugin uses to
  * gate high-impact deploy/invoke tools. Built on ctx.on('tools/pre-execute'),
  * not a hand-rolled wrapper.
+ *
+ * Rules are prefix-based. A rule may also declare `destructive: true` — a
+ * pure documentation flag saying the gated tools have irreversible effects
+ * (deploy, delete, DNS change): the kind of surface a tool *description*
+ * (attacker-controlled text) could talk the agent into. The flag does not
+ * change enforcement — `mode` does — it records WHY the prefix is guarded,
+ * and `tests/permissions.golden` records it so guard changes are never
+ * silent.
  * @module dsh-righthand/guard-tools
  */
 
@@ -16,25 +24,49 @@ export interface GuardRule {
   toolPrefix: string
   /** 'allow' passes through; 'deny' blocks; 'ask' defers to a policy function. */
   mode: 'allow' | 'deny' | 'ask'
+  /**
+   * Documentation flag: the gated tools have irreversible effects nobody
+   * asked for (a deploy, a delete, a DNS change). Declarative only —
+   * enforcement is the rule's `mode`. Default false.
+   */
+  destructive?: boolean
   /** Only consulted when mode is 'ask'. Return true to allow. */
   ask?: (args: unknown) => boolean
 }
 
+/**
+ * The guard facts a tool name resolves to: the mode the first matching rule
+ * enforces (or 'none' when no rule matches) and whether that rule marks the
+ * prefix destructive. This is the SINGLE lookup both the enforcement hook
+ * and the permissions golden use, so the recorded facts cannot drift from
+ * what the gate actually does.
+ */
+export interface GuardFacts {
+  mode: 'allow' | 'deny' | 'ask' | 'none'
+  destructive: boolean
+  /** The matched rule, when one matched — the enforcement hook's ask path needs it. */
+  rule: GuardRule | undefined
+}
+
+/** Resolve one tool name to its guard facts. Rules match in order, first wins. */
+export function guardFactsFor(toolName: string, rules: readonly GuardRule[]): GuardFacts {
+  const rule = rules.find(r => toolName.startsWith(r.toolPrefix))
+  if (rule === undefined) return { mode: 'none', destructive: false, rule: undefined }
+  return { mode: rule.mode, destructive: rule.destructive === true, rule }
+}
+
 /** Apply a guard over a set of tool-name prefixes. */
 export function apply(ctx: Context, config: { rules?: GuardRule[] } = {}): void {
   const rules = config.rules ?? []
 
   ctx.on('tools/pre-execute', (exec, next) => {
-    const rule = rules.find(r => exec.name.startsWith(r.toolPrefix))
-    if (rule === undefined) return next()
-    if (rule.mode === 'deny') {
+    const facts = guardFactsFor(exec.name, rules)
+    if (facts.mode === 'none' || facts.mode === 'allow') return next()
+    if (facts.mode === 'deny') {
       throw new Error(`tool ${exec.name} is denied by righthand guard`)
     }
-    if (rule.mode === 'ask') {
-      const allowed = rule.ask?.(exec.arguments) ?? false
-      if (!allowed) throw new Error(`tool ${exec.name} requires approval (ask returned false)`)
-      return next()
-    }
+    const allowed = facts.rule?.ask?.(exec.arguments) ?? false
+    if (!allowed) throw new Error(`tool ${exec.name} requires approval (ask returned false)`)
     return next()
   }, { prepend: true })
-}
+}

package/src/index.ts

@@ -14,6 +14,7 @@
  * Modules (each individually mountable via `export * as ...`):
  * - store-tools:     rh_store_put/get/delete/list over ctx.storageDomain
  * - secrets-tools:   rh_credential_describe/set/unset + rh_settings_get/set
+ * - task-tools:      rh_task_create/list/next/update/delete over ctx.storageDomain
  * - exec-tools:      rh_run / rh_run_bg over ctx.subprocess + ctx.jobs
  * - guard-tools:     tools/pre-execute policy (config.rules)
  * - skills:          the packaged dsh-righthand skill (ctx.skills)
@@ -26,6 +27,7 @@ import * as storeTools from './store-tools.ts'
 import * as secretsTools from './secrets-tools.ts'
 import * as execTools from './exec-tools.ts'
 import * as guardTools from './guard-tools.ts'
+import * as taskTools from './task-tools.ts'
 import * as righthandSkills from './skills.ts'
 import type { GuardRule } from './guard-tools.ts'
 
@@ -50,12 +52,15 @@ export function apply(ctx: Context, config: RighthandConfig = {}): void {
   ctx.plugin(storeTools)
   ctx.plugin(secretsTools)
   ctx.plugin(execTools)
+  ctx.plugin(taskTools)
   ctx.plugin(guardTools, { rules: config.rules ?? [] })
   ctx.plugin(righthandSkills)
 }
 
 // Individual modules stay importable for selective mounting.
-export { storeTools, secretsTools, execTools, guardTools, righthandSkills }
+export { storeTools, secretsTools, execTools, taskTools, guardTools, righthandSkills }
 export { SKILL_NAME, SKILL_DESCRIPTION, skillDirectory, skillBody } from './skills.ts'
 export type { GuardRule } from './guard-tools.ts'
+export { guardFactsFor } from './guard-tools.ts'
+export type { GuardFacts } from './guard-tools.ts'
 

package/src/task-tools.ts

@@ -0,0 +1,236 @@
+/**
+ * task-tools — rh_task_* over ctx.storageDomain.
+ * A typed task board with a state machine: open → done | failed.
+ * `rh_task_next` is the queue discipline — the oldest open task is what to
+ * work on now. Descriptions carry the rule that a task's failure is recorded
+ * like an answer: a run that could not happen is news the owner needs.
+ * @module dsh-righthand/task-tools
+ */
+
+import type { Context } from '@deepseek-ai/cordis'
+import { defineTool } from '@deepseek-ai/dsh-tools'
+import { defineDomain, domainTable } from '@deepseek-ai/dsh-storage-domain'
+import type { Domain } from '@deepseek-ai/dsh-storage-domain'
+import { z } from 'zod'
+
+export const name = 'righthand-task'
+export const inject = ['tools', 'storageDomain']
+
+export type TaskState = 'open' | 'done' | 'failed'
+
+export interface Task {
+  id: string
+  title: string
+  detail: string
+  due: string
+  state: TaskState
+  result: string
+  createdAt: string
+  updatedAt: string
+}
+
+/** Domain spec: the typed task table. */
+export const taskDomain = defineDomain({
+  name: 'righthand_tasks',
+  version: 1,
+  tables: {
+    tasks: domainTable(z.object({
+      id: z.string(),
+      title: z.string(),
+      detail: z.string(),
+      due: z.string(),
+      state: z.enum(['open', 'done', 'failed']),
+      result: z.string(),
+      createdAt: z.string(),
+      updatedAt: z.string(),
+    })),
+  },
+})
+
+export type TaskDomain = Domain<typeof taskDomain>
+
+function newId(): string {
+  return 't-' + Date.now().toString(36) + '-' + Math.random().toString(36).slice(2, 6)
+}
+
+/** Open the task domain and register the model-facing tools. */
+export function apply(ctx: Context): void {
+  let domain: TaskDomain | undefined
+  let ready: Promise<void> | undefined
+
+  ctx.effect(() => {
+    ready = (async () => {
+      domain = await ctx.storageDomain.open(taskDomain)
+    })()
+    return () => { /* domain facility owns the domain */ }
+  })
+
+  const ensure = async (): Promise<TaskDomain> => {
+    if (domain === undefined) { await ready; }
+    if (domain === undefined) throw new Error('righthand tasks are not open (storageDomain not mounted)')
+    return domain
+  }
+
+  const all = async (): Promise<Task[]> => {
+    const d = await ensure()
+    return [...d.table('tasks').entries()].map(([, t]) => t)
+  }
+
+  ctx.tools.register(defineTool({
+    name: 'rh_task_create',
+    description: 'Add a task with a title, optional detail and due date. Returns the created task with a generated id and state open. A task the agent cannot run is still recorded — its failure is delivered like an answer.',
+    parameters: {
+      title: { type: 'string', required: true, description: 'What the task is, e.g. "deploy vision-worker".' },
+      detail: { type: 'string', description: 'Optional longer description of what done means.' },
+      due: { type: 'string', description: 'Optional due date, YYYY-MM-DD.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          id: { type: 'string', required: true },
+          title: { type: 'string', required: true },
+          state: { type: 'string', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: 'task ' + value.id + ' created: ' + value.title + ' (open)' }],
+    },
+    async execute(args) {
+      const d = await ensure()
+      const now = new Date().toISOString()
+      const task: Task = {
+        id: newId(),
+        title: args.title.trim(),
+        detail: args.detail ?? '',
+        due: args.due ?? '',
+        state: 'open',
+        result: '',
+        createdAt: now,
+        updatedAt: now,
+      }
+      if (task.title === '') throw new Error('a task needs a title')
+      await d.table('tasks').put(task.id, task)
+      return { id: task.id, title: task.title, state: task.state }
+    },
+  }))
+ctx.tools.register(defineTool({
+    name: 'rh_task_list',
+    description: 'List tasks, open ones first (oldest open first). Optionally filter by state.',
+    parameters: {
+      state: { type: 'string', description: 'Filter: open | done | failed. Omit for all tasks.' },
+    },
+    output: {
+      schema: {
+        type: 'array',
+        items: {
+          type: 'object',
+          additionalProperties: false,
+          properties: {
+            id: { type: 'string', required: true },
+            title: { type: 'string', required: true },
+            state: { type: 'string', required: true },
+            due: { type: 'string' },
+          },
+        },
+      },
+      render: (_args, tasks) => [{ type: 'text', text: tasks.length === 0 ? '(no tasks)' : tasks.map((t: any) => '[' + t.state + '] ' + t.title).join(' / ') }],
+    },
+    async execute(args) {
+      const tasks = await all()
+      const wanted = args.state ?? null
+      const filtered = wanted ? tasks.filter(t => t.state === wanted) : tasks
+      const rank = { open: 0, done: 1, failed: 2 } as Record<string, number>
+      filtered.sort((a, b) => (rank[a.state] - rank[b.state]) || a.createdAt.localeCompare(b.createdAt))
+      return filtered.map(t => ({ id: t.id, title: t.title, state: t.state, ...t.due ? { due: t.due } : {} }))
+    },
+  }))
+
+  ctx.tools.register(defineTool({
+    name: 'rh_task_next',
+    description: 'The next open task — what to work on now. Oldest open task first. Returns found: false when nothing is open.',
+    parameters: {},
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          found: { type: 'boolean', required: true },
+          id: { type: 'string' },
+          title: { type: 'string' },
+          detail: { type: 'string' },
+          due: { type: 'string' },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: value.found ? 'next: ' + value.title : '(nothing open)' }],
+    },
+    async execute() {
+      const tasks = await all()
+      const open = tasks.filter(t => t.state === 'open').sort((a, b) => a.createdAt.localeCompare(b.createdAt))
+      const t = open[0]
+      if (t === undefined) return { found: false }
+      return { found: true, id: t.id, title: t.title, ...t.detail ? { detail: t.detail } : {}, ...t.due ? { due: t.due } : {} }
+    },
+  }))
+ctx.tools.register(defineTool({
+    name: 'rh_task_update',
+    description: 'Change a task: its state (open | done | failed) and/or its result. A failed task should carry its result — what was tried and what went wrong — so the record says what happened, not just that something did.',
+    parameters: {
+      id: { type: 'string', required: true, description: 'The task id from rh_task_create or rh_task_list.' },
+      state: { type: 'string', description: 'New state: open | done | failed.' },
+      result: { type: 'string', description: 'What happened — the outcome, or the failure reason.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          found: { type: 'boolean', required: true },
+          id: { type: 'string', required: true },
+          state: { type: 'string', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: value.found ? 'task ' + value.id + ' -> ' + value.state : 'task ' + value.id + ' not found' }],
+    },
+    async execute(args) {
+      const d = await ensure()
+      const task = d.table('tasks').get(args.id)
+      if (task === undefined) return { found: false, id: args.id, state: 'open' }
+      const next: Task = {
+        ...task,
+        ...args.state !== undefined ? { state: args.state as TaskState } : {},
+        ...args.result !== undefined ? { result: args.result } : {},
+        updatedAt: new Date().toISOString(),
+      }
+      await d.table('tasks').put(args.id, next)
+      return { found: true, id: args.id, state: next.state }
+    },
+  }))
+
+  ctx.tools.register(defineTool({
+    name: 'rh_task_delete',
+    description: 'Remove a task by id. Returns whether it existed.',
+    parameters: {
+      id: { type: 'string', required: true, description: 'The task id to remove.' },
+    },
+    output: {
+      schema: {
+        type: 'object',
+        additionalProperties: false,
+        properties: {
+          id: { type: 'string', required: true },
+          existed: { type: 'boolean', required: true },
+        },
+      },
+      render: (_args, value) => [{ type: 'text', text: 'deleted ' + value.id + ': ' + value.existed }],
+    },
+    async execute(args) {
+      const d = await ensure()
+      const existed = await d.table('tasks').delete(args.id)
+      return { id: args.id, existed }
+    },
+  }))
+}
+
+
+