@vincemakes/kiso-core 0.1.15 → 0.1.17

package/dist/kernel/loop.js

@@ -592,6 +592,8 @@ async function* executeOne(call, registry, hooks, ctx, log, resolveApproval, res
     let chainVerdict;
     let deniedReason;
     let deniedBy;
+    let firstSpeaker; // the first non-abstain verdict's extension
+    let anySpoke = false;
     if (durable === undefined && approvalPolicies !== undefined && approvalPolicies.length > 0) {
         for (const { extension, policy } of approvalPolicies) {
             let v;
@@ -599,8 +601,12 @@ async function* executeOne(call, registry, hooks, ctx, log, resolveApproval, res
                 v = await raceAbort(Promise.resolve(policy.decide(payload, ctx)), signal);
             }
             catch {
-                v = { action: "ask" }; // 抛错 = 该扩展计为 ask
+                v = { action: "ask" }; // 抛错 = 该扩展计为 ask —— 发声,绝不静默
             }
+            if (v.action === "abstain")
+                continue; // no opinion — not a verdict
+            anySpoke = true;
+            firstSpeaker ??= extension;
             if (v.action === "deny") {
                 deniedBy ??= extension;
                 deniedReason ??= v.reason; // the FIRST denial's reason
@@ -612,19 +618,26 @@ async function* executeOne(call, registry, hooks, ctx, log, resolveApproval, res
         if (deniedBy !== undefined) {
             chainVerdict = { action: "deny", reason: deniedReason ?? "denied" };
         }
+        else if (chainVerdict === undefined && anySpoke) {
+            chainVerdict = { action: "allow" }; // 全发声者皆 allow
+        }
         else if (chainVerdict === undefined) {
-            chainVerdict = { action: "allow" };
+            // 全员 abstain (ADR-0042): NO policy speaks — the call falls to
+            // the ask flow below, never to a silent auto-approve. The human
+            // decides; absent a channel, awaitHumanApproval's honest denial.
+            chainVerdict = { action: "ask" };
         }
         if (chainVerdict.action !== "ask") {
-            // allow/deny are PERSISTED FACTS (decidedBy = the extension) —
-            // never a human pause.
+            // allow/deny are PERSISTED FACTS (decidedBy = a SPEAKING
+            // extension — never the chain head on behalf of a non-speaker)
+            // — never a human pause.
             yield log.append({
                 type: "permission_decided",
                 decisionId: `d-${log.lastSeq + 1}`,
                 callId: call.callId,
                 decision: chainVerdict.action === "allow" ? "approved" : "denied",
                 ...(chainVerdict.action === "deny" ? { reason: chainVerdict.reason } : {}),
-                decidedBy: deniedBy ?? approvalPolicies[0].extension,
+                decidedBy: deniedBy ?? firstSpeaker,
             });
         }
     }

package/dist/protocol/extension.d.ts

@@ -16,7 +16,13 @@ export interface PolicyCall {
 }
 /**
  * A policy's verdict. `ask` defers to the existing human approval flow;
- * `deny` carries the reason the model sees; `allow` auto-approves.
+ * `deny` carries the reason the model sees; `allow` auto-approves;
+ * `abstain` is NO opinion — the policy does not speak (it neither allows,
+ * denies, nor asks), and the chain composes only over the SPEAKING
+ * verdicts. An all-abstain chain falls to the ask flow (the human
+ * decides; absent a channel, an honest denial) — abstaining is never a
+ * silent allow (ADR-0042: `allow` as "no opinion" auto-approved tools no
+ * policy meant to approve and misattributed decidedBy to a non-speaker).
  */
 export type PolicyVerdict = {
     readonly action: "allow";
@@ -25,6 +31,8 @@ export type PolicyVerdict = {
     readonly reason: string;
 } | {
     readonly action: "ask";
+} | {
+    readonly action: "abstain";
 };
 /** One approval policy — a pure decide function over a tool call. */
 export interface ApprovalPolicy {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vincemakes/kiso-core",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "description": "kiso(基礎) core — protocol, event log, loop, hooks, modes, permissions, compaction, delivery truth. The 2,000-line kernel at the bottom of the kiso framework.",
   "type": "module",
   "license": "MIT",
@@ -33,7 +33,7 @@
     "openai"
   ],
   "devDependencies": {
-    "@vincemakes/kiso-evals": "0.1.15",
+    "@vincemakes/kiso-evals": "0.1.17",
     "@types/node": "^26.1.2",
     "typescript": "^5.7.2",
     "vitest": "^3.0.0"