kiokuko-dsh 0.1.29 → 0.1.31

package/PERMISSIONS.md

@@ -57,19 +57,23 @@ conflicts are reported as failures or unavailable states. They are never
 converted into normal success or silently redirected to another repository or
 run.
 
-## Optional Orca recordings
+## Orca recordings
 
-`orca.enabled` defaults to `false`. The runtime dependencies
+`orca.enabled` defaults to `true`, including in the installed bundle configuration.
+This enables the feature; a native question asks whether to record each session.
+Only affirmative choices or `/kioku-orca start` authorize capture. Choices are
+saved in SQLite; skip/cancel or unavailable UI continues without recording.
+Set it to `false` and reload to disable the feature. The runtime dependencies
 `@orcareplay/core`, `@orcareplay/schema`, and `@orcareplay/viewer` with range `>=0.2.1`
 are installed automatically by npm/pnpm with this package. No extra installer,
 startup subprocess, automatic package repair, or network transmission is added.
 The dependencies are Apache-2.0; the [upstream license](docs/ORCAREPLAY-LICENSE.txt)
 and viewer credit are retained. Disabled recording never initializes Orca or creates trace files.
 
-With explicit configuration, projected model content and tool final results are
+After an affirmative session choice or start command, projected model content and tool final results are
 written to `<verified workspace>/.orca/runs`, or under
 `<Kiokuko data directory>/traces/projects/<workspace hash>/.orca/runs`.
-The main database holds only the session/run index. `show` and `export` require
+For Orca, the main database holds the session/run index and recording choices, not log bodies. `show` and `export` require
 the exact native command agent/session; no Orca HTTP API or model tool exists.
 Offline HTML is written only to `.orca/exports/<run ID>.html`.
 

package/README.ja.md

@@ -3,11 +3,13 @@
 [English](README.md) | 日本語 | [简体中文](README.zh-CN.md) | [한국어](README.ko.md)
 
 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) に、プロジェクトの記憶・作業計画・検証支援を追加するプラグインです。
-任意の OrcaReplay 記録を有効にすると、モデル・ツールの動作確認と HTML 出力もできます。
+OrcaReplay でモデル・ツールの動作を記録し、内容の確認と HTML 出力もできます。
 
+
+新しい変更作業では、通常実行か役小角(enno-oduno)を選べます。役小角ではおすすめテンプレート、またはDSH設定済みモデルから役割ごとの構成を選択します。[モデル選択と接続上の制約](docs/model-selection.ja.md)
 ## 導入と使い方
 
-対応 DSH: `0.1.2-rc.1` / [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1)。
+対応 DSH: `0.1.2-rc.1` / [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1) / [v0.1.3-alpha.2](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.2)。
 Node.js **24.16.0 以上**と pnpm が必要です。
 インストール済みの `dsh` CLI で、公開済み npm パッケージを導入して起動します。
 
@@ -20,10 +22,14 @@ DSH の checkout から使う場合は、各 `dsh` コマンドの先頭に `pnp
 起動後は普通に依頼を入力します。Kiokuko 専用の setup 操作は不要です。
 GitHub・ローカルからの導入は [プラグインガイド](docs/dsh-plugin.md) を参照してください。
 
-Orca の依存パッケージは自動導入され、記録は **初期状態では無効**です。
-プラグイン設定の `orca.enabled` を `true` にして再読み込みすると記録を開始できます。
-`/kioku-orca list`、`/kioku-orca show <run ID>`、`/kioku-orca export <run ID>` で確認・出力できます。
-詳細は [記録設定とコマンド](docs/orca-recording.md) を参照してください。
+OrcaReplay の機能設定は自動導入され、**手動設定は不要**です。チャットの最初に詳細ログを「記録する／記録しない」を選びます。
+「記録する」を選ぶと、その後のモデル応答やツール実行結果を作業プロジェクトの `.orca/runs/` に保存します。選択はセッションごとに保持され、スキップ・取消時は記録せず続行します。
+
+- `/kioku-orca start`: 手動で記録を開始、または停止後に再開します。最初に「記録する」を選んだ場合は実行不要です。過去の動作は記録されません。
+- `/kioku-orca status`: 機能の有効・無効、セッションの記録選択、記録状態・エラーを確認します。
+
+`/kioku-orca stop` でログを確定後、`list` で run ID を確認し、`show <run ID>` で内容を表示、`export <run ID>` で HTML を出力できます（いずれも `/kioku-orca` に続けて入力）。
+無効にする場合は `orca.enabled: false` を設定して再読み込みします。詳細は [記録設定とコマンド](docs/orca-recording.md) を参照してください。
 
 ## 更新
 

package/README.ko.md

@@ -3,11 +3,13 @@
 [English](README.md) | [日本語](README.ja.md) | [简体中文](README.zh-CN.md) | 한국어
 
 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)에 프로젝트 기억, 작업 계획, 검증 지원을 추가합니다.
-선택 기능인 OrcaReplay 기록을 켜면 모델과 도구의 동작을 확인하고 HTML로 내보낼 수 있습니다.
+OrcaReplay로 모델과 도구의 동작을 기록하고, 기록을 확인하거나 HTML로 내보낼 수 있습니다.
 
+
+새 변경 작업에서는 일반 실행 또는 役小角(enno-oduno)를 선택할 수 있습니다. 역할별 모델은 추천 템플릿이나 DSH에 설정된 모델에서 선택합니다. [모델 선택과 연결 제한](docs/model-selection.md).
 ## 설치 및 사용
 
-DSH `0.1.2-rc.1`과 [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1)을 지원합니다.
+DSH `0.1.2-rc.1`, [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1), [v0.1.3-alpha.2](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.2)를 지원합니다.
 Node.js **24.16.0 이상**과 pnpm이 필요합니다.
 설치된 `dsh` CLI로 공개된 npm 패키지를 설치하고 시작합니다.
 
@@ -20,10 +22,14 @@ DSH 소스 디렉터리에서 실행한다면 각 `dsh` 명령 앞에 `pnpm`을
 시작 후 평소처럼 작업을 입력하면 됩니다. Kiokuko 전용 setup 작업은 필요하지 않습니다.
 GitHub 및 로컬 설치 방법은 [플러그인 안내](docs/dsh-plugin.md)를 참고하세요.
 
-Orca 의존 패키지는 자동 설치되며 기록은 **기본적으로 꺼져 있습니다**.
-플러그인 설정의 `orca.enabled`를 `true`로 바꾸고 다시 로드하면 활성화됩니다.
-`/kioku-orca list`, `/kioku-orca show <run ID>`, `/kioku-orca export <run ID>`로 기록을 확인하고 내보낼 수 있습니다.
-자세한 내용은 [기록 설정과 명령](docs/orca-recording.md)을 참고하세요.
+OrcaReplay 기능은 자동으로 설정되며 **수동 설정이 필요 없습니다**. 채팅 시작 시 상세 로그를 기록할지 선택합니다.
+기록을 선택하면 이후 모델 응답과 도구 실행 결과가 세션 작업 공간의 `.orca/runs/`에 저장됩니다. 선택은 세션별로 유지되며, 건너뛰거나 취소하면 기록 없이 채팅을 계속합니다.
+
+- `/kioku-orca start`: 기록을 수동으로 시작하거나 중지 후 다시 시작합니다. 시작 시 기록을 선택했다면 실행할 필요가 없습니다. 과거 동작은 기록되지 않습니다.
+- `/kioku-orca status`: 기능 활성화 여부, 세션의 기록 선택, 기록 상태와 오류를 확인합니다.
+
+`/kioku-orca stop`으로 로그를 확정한 뒤 `list`로 run ID를 확인하고, `show <run ID>`로 내용을 보거나 `export <run ID>`로 HTML을 내보낼 수 있습니다(모두 `/kioku-orca` 뒤에 입력).
+기록을 끄려면 `orca.enabled: false`를 설정하고 다시 로드하세요. 자세한 내용은 [기록 설정과 명령](docs/orca-recording.md)을 참고하세요.
 
 ## 업데이트
 

package/README.md

@@ -1,14 +1,16 @@
-# Kiokuko(記憶庫) DeepSeek Harness Plugin
 
+# Kiokuko(記憶庫) DeepSeek Harness Plugin
 [日本語](README.ja.md) | [简体中文](README.zh-CN.md) | [한국어](README.ko.md)
 
 Kiokuko adds project memory, planning, and verification support to
 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness).
-Optional OrcaReplay recording lets you inspect model/tool activity and export HTML.
+OrcaReplay records model/tool activity for inspection and HTML export.
+
 
+For new coding tasks, choose normal execution or 役小角(enno-oduno). Enno offers model templates and role assignments from configured DSH models. [Model selection and connection limits](docs/model-selection.md).
 ## Install and use
 
-Supports DSH `0.1.2-rc.1` and [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1).
+Supports DSH `0.1.2-rc.1`, [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1), and [v0.1.3-alpha.2](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.2).
 Requires Node.js **24.16.0+** and pnpm.
 With an installed `dsh` CLI, install the published npm package and start:
 
@@ -21,10 +23,14 @@ From a DSH checkout, prefix each `dsh` command with `pnpm`.
 Enter your task normally; no Kiokuko setup command is needed.
 For GitHub/local installation, see the [plugin guide](docs/dsh-plugin.md).
 
-Orca dependencies install automatically; recording is **off by default**.
-Set `orca.enabled: true` in the plugin configuration and reload to enable it.
-Use `/kioku-orca list`, `/kioku-orca show <run ID>`, or `/kioku-orca export <run ID>`.
-See [recording settings and commands](docs/orca-recording.md).
+OrcaReplay is configured automatically; **no manual setup is required**. At the start of a chat, choose whether to record detailed logs.
+Choosing to record saves subsequent model responses and tool results to `.orca/runs/` in the session workspace. The choice is remembered per session; skipped or cancelled questions continue without recording.
+
+- `/kioku-orca start`: start recording manually or resume after stopping. Not needed if you chose to record at the start; past activity is not captured.
+- `/kioku-orca status`: check feature availability, the session recording choice, recording state, and errors.
+
+Use `/kioku-orca stop` to finalize the log, `list` to find its run ID, `show <run ID>` to inspect it, and `export <run ID>` to create HTML (all under `/kioku-orca`).
+To disable recording, set `orca.enabled: false` and reload. See [recording settings and commands](docs/orca-recording.md).
 
 ## Update
 

package/README.zh-CN.md

@@ -3,11 +3,13 @@
 [English](README.md) | [日本語](README.ja.md) | 简体中文 | [한국어](README.ko.md)
 
 为 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 添加项目记忆、任务规划和验证支持。
-可选的 OrcaReplay 记录功能可用于查看模型和工具活动，并导出 HTML。
+OrcaReplay 可记录模型和工具活动，查看记录并导出 HTML。
 
+
+新的修改任务可以选择普通执行或役小角(enno-oduno)。役小角支持推荐模板，也可从DSH已配置的模型中为各角色选择模型。[模型选择与连接限制](docs/model-selection.md)。
 ## 安装与使用
 
-支持 DSH `0.1.2-rc.1` 和 [0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1)。
+支持 DSH `0.1.2-rc.1`、[0.1.3-alpha.1](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.1) 和 [v0.1.3-alpha.2](https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.3-alpha.2)。
 需要 Node.js **24.16.0 以上**和 pnpm。
 使用已安装的 `dsh` CLI 安装已发布的 npm 包并启动：
 
@@ -20,10 +22,14 @@ dsh web
 启动后直接输入任务，无需额外的 Kiokuko setup 操作。
 GitHub 和本地安装方式见[插件指南](docs/dsh-plugin.md)。
 
-Orca 依赖会自动安装，记录功能**默认关闭**。
-将插件配置中的 `orca.enabled` 设为 `true` 并重新加载即可启用。
-使用 `/kioku-orca list`、`/kioku-orca show <run ID>` 和 `/kioku-orca export <run ID>` 查看或导出记录。
-详见[记录设置与命令](docs/orca-recording.md)。
+OrcaReplay 的功能配置会自动安装，**无需手动设置**。聊天开始时，可选择是否记录详细日志。
+选择记录后，后续模型回复和工具执行结果将保存到会话工作目录的 `.orca/runs/`。选择按会话保存；跳过或取消时，不记录并继续聊天。
+
+- `/kioku-orca start`：手动开始记录，或在停止后重新开始。如果开始时已选择记录，则无需执行。不会补录过去的活动。
+- `/kioku-orca status`：查看功能是否启用、会话的记录选择、记录状态和错误。
+
+用 `/kioku-orca stop` 完成日志记录后，用 `list` 查看 run ID、`show <run ID>` 查看内容、`export <run ID>` 导出 HTML（均在 `/kioku-orca` 后输入）。
+要禁用记录，请设置 `orca.enabled: false` 并重新加载。详见[记录设置与命令](docs/orca-recording.md)。
 
 ## 更新
 

package/dist/client.cjs

@@ -257,15 +257,15 @@ window.__ModuleLoader__.load({
             setDraft(value);
             setError('');
         };
-        const settle = (cancel = false, skip = false) => {
+        const settle = (cancel = false) => {
             if (inFlight.current)
                 return;
             const custom = draft.custom.trim();
-            if (!cancel && !skip && draft.selected === null && custom === '') {
+            if (!cancel && draft.selected === null && custom === '') {
                 setError('選択肢を選ぶか、自由入力してください。');
                 return;
             }
-            if (!cancel && !skip && /^[0-9０-９]+$/u.test(custom)) {
+            if (!cancel && /^[0-9０-９]+$/u.test(custom)) {
                 const ordinal = Number(custom.normalize('NFKC'));
                 if (ordinal < 1 || ordinal > question.options.length) {
                     setError(`番号は1〜${question.options.length}で入力してください。`);
@@ -278,8 +278,8 @@ window.__ModuleLoader__.load({
             // Enter is a separate confirmation. Typing, key-repeat and IME cannot submit twice.
             void Promise.resolve().then(() => cancel ? pending.cancel() : pending.answer({ answers: [{
                         id: question.id,
-                        selected: skip || draft.selected === null ? [] : [question.options[draft.selected].label],
-                        ...(!skip && custom ? { custom } : {}),
+                        selected: draft.selected === null ? [] : [question.options[draft.selected].label],
+                        ...(custom ? { custom } : {}),
                     }] })).then(() => { intakeDrafts.delete(pending); }).catch(cause => {
                 if (!mounted.current)
                     return;
@@ -316,8 +316,8 @@ window.__ModuleLoader__.load({
                 jsxs('header', { children: [jsx('h2', { id: titleId, children: question.question }),
                         jsx('button', { type: 'button', disabled: busy, onClick: () => settle(true), 'aria-label': '質問を閉じる', children: '閉じる' })] }),
                 jsxs('div', { className: 'kiokuko-intake-body', children: [
-                        jsx('p', { children: question.detail }),
-                        jsx('p', { children: `1〜${question.options.length}キーで選択、Enterで確定。自由入力中の数字は文字として入力されます。` }),
+                        question.detail ? jsx('p', { children: question.detail }) : null,
+                        jsx('p', { children: `1〜${question.options.length}キーで選択、Enterで確定。` }),
                         jsx('div', { 'aria-label': '作業の選択肢', children: question.options.map((option, index) => jsxs('button', {
                                 key: option.label, type: 'button', className: 'kiokuko-intake-option', disabled: busy,
                                 ref: (element) => { optionElements.current[index] = element; },
@@ -330,16 +330,15 @@ window.__ModuleLoader__.load({
                                     event.stopPropagation();
                                     settle();
                                 },
-                                children: [jsx('strong', { children: `${index + 1}. ${option.label}` }), jsx('span', { children: option.description })],
+                                children: [jsx('strong', { children: `${index + 1}. ${option.label}` }), option.description ? jsx('span', { children: option.description }) : null],
                             })) }),
-                        jsx('label', { htmlFor: `${titleId}-custom`, children: '自由入力（番号でも回答できます）' }),
-                        jsx('textarea', { id: `${titleId}-custom`, rows: 2, disabled: busy, value: draft.custom,
+                        jsx('label', { htmlFor: `${titleId}-custom`, children: '自由入力（任意）' }),
+                        jsx('textarea', { id: `${titleId}-custom`, rows: 1, disabled: busy, value: draft.custom,
                             onChange: (event) => update({ selected: null, custom: event.target.value }),
                         }),
                     ] }),
                 jsxs('footer', { children: [
                         jsx('span', { role: 'status', 'aria-live': 'polite', children: error || (busy ? '送信中…' : draft.selected === null ? '' : `${draft.selected + 1}. ${question.options[draft.selected].label}を選択中`) }),
-                        jsx('button', { type: 'button', disabled: busy, onClick: () => settle(false, true), children: '作業を始めず会話する' }),
                         jsx('button', { type: 'button', disabled: busy || (draft.selected === null && !draft.custom.trim()), onClick: () => settle(), children: '確定（Enter）' }),
                     ] }),
             ],
@@ -349,7 +348,23 @@ window.__ModuleLoader__.load({
         if (typeof document === 'undefined')
             return undefined;
         const style = document.createElement('style');
-        style.textContent = '.kiokuko-intake{border:1px solid var(--dsw-alias-border-l4,#bbb);border-radius:16px;padding:16px;background:var(--dsw-alias-background-primary,Canvas);color:var(--dsw-alias-label-primary,CanvasText);display:flex;flex-direction:column;max-height:70dvh;gap:12px}.kiokuko-intake header,.kiokuko-intake footer{display:flex;gap:12px;align-items:center;flex-wrap:wrap}.kiokuko-intake h2{font-size:18px;margin:0;flex:1}.kiokuko-intake-body{overflow:auto;min-height:0}.kiokuko-intake p{white-space:pre-wrap;line-height:1.5}.kiokuko-intake button{font:inherit;color:inherit;background:transparent;border:1px solid var(--dsw-alias-border-l4,#bbb);border-radius:8px;padding:10px;min-height:44px;cursor:pointer}.kiokuko-intake button:disabled{cursor:default;opacity:.6}.kiokuko-intake-option{display:flex;width:100%;text-align:left;flex-direction:column;gap:4px;margin-bottom:8px;overflow-wrap:anywhere}.kiokuko-intake-option[aria-pressed=true]{border:2px solid var(--dsw-alias-label-primary,CanvasText);background:var(--dsw-alias-interactive-bg-hover,#eee)}.kiokuko-intake-option span{font-size:13px;line-height:1.5}.kiokuko-intake textarea{box-sizing:border-box;width:100%;font:inherit;color:inherit;background:transparent;border:1px solid var(--dsw-alias-border-l4,#bbb);padding:8px;border-radius:8px}.kiokuko-intake :focus-visible,.kiokuko-intake:focus-visible{outline:2px solid Highlight;outline-offset:3px}.kiokuko-intake footer [role=status]{flex:1;min-width:120px}';
+        style.textContent = `
+    .kiokuko-intake{box-sizing:border-box;width:100%;max-width:680px;align-self:center;margin-inline:auto;border:1px solid var(--dsw-alias-border-l4,#bbb);border-radius:12px;padding:12px;background:var(--dsw-alias-background-primary,Canvas);color:var(--dsw-alias-label-primary,CanvasText);display:flex;flex-direction:column;min-height:0;max-height:min(480px,70dvh);gap:8px;font-size:14px}
+    .kiokuko-intake header,.kiokuko-intake footer{display:flex;gap:8px;align-items:center;flex-wrap:wrap;flex-shrink:0}
+    .kiokuko-intake h2{font-size:16px;line-height:1.4;margin:0;flex:1}
+    .kiokuko-intake-body{overflow:auto;min-height:0;display:flex;flex-direction:column;gap:8px}
+    .kiokuko-intake p{margin:0;white-space:pre-wrap;line-height:1.4;font-size:12px}
+    .kiokuko-intake button{font:inherit;color:inherit;background:transparent;border:1px solid var(--dsw-alias-border-l4,#bbb);border-radius:8px;padding:8px 10px;min-height:40px;cursor:pointer}
+    .kiokuko-intake button:disabled{cursor:default;opacity:.6}
+    .kiokuko-intake-option{display:flex;width:100%;text-align:left;flex-direction:column;gap:4px;margin-bottom:6px;overflow-wrap:anywhere}
+    .kiokuko-intake-option:last-child{margin-bottom:0}
+    .kiokuko-intake-option[aria-pressed=true]{border-color:var(--dsw-alias-label-primary,CanvasText);box-shadow:inset 0 0 0 1px currentColor;background:var(--dsw-alias-interactive-bg-hover,#eee)}
+    .kiokuko-intake-option span{font-size:12px;line-height:1.4}
+    .kiokuko-intake label{font-size:12px}
+    .kiokuko-intake textarea{box-sizing:border-box;width:100%;min-height:36px;max-height:96px;resize:vertical;font:inherit;line-height:1.4;color:inherit;background:transparent;border:1px solid var(--dsw-alias-border-l4,#bbb);padding:8px;border-radius:8px}
+    .kiokuko-intake :focus-visible,.kiokuko-intake:focus-visible{outline:2px solid Highlight;outline-offset:2px}
+    .kiokuko-intake footer [role=status]{flex:1;min-width:0;font-size:12px;overflow-wrap:anywhere}
+    `;
         document.head.appendChild(style);
         return () => style.remove();
     }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAKA,UAAU,wBAAwB;IAChC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;KAAE,CAAC,CAAA;IAC7G,QAAQ,EAAE;QAAE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAC3C;AAYD,UAAU,gBAAgB;IACxB,QAAQ,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAA;SAAE,CAAA;KAAE,CAAA;IACxF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;KAC3F,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QACd,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,GAAG,OAAO,CAAA;QACtD,QAAQ,CACN,UAAU,EAAE;YACV,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;YACrB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;YACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;YACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;YAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAA;YAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;YACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAChD,EACD,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,GACrD,OAAO,CAAA;KACX,CAAA;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IAChF,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAA;CACtI;AA0ED,+EAA+E;AAC/E,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,GAAG,WAAW,CAAC,CAqBjH;AAuHD,eAAO,MAAM,MAAM,gDAAiD,CAAA;AAqKpE,mEAAmE;AACnE,wBAAgB,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CA0BjD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAKA,UAAU,wBAAwB;IAChC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAA;KAAE,CAAC,CAAA;IAC7G,QAAQ,EAAE;QAAE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAC3C;AAYD,UAAU,gBAAgB;IACxB,QAAQ,CAAC,cAAc,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAA;SAAE,CAAA;KAAE,CAAA;IACxF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,OAAO,CAAA;KAC3F,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QACd,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,GAAG,OAAO,CAAA;QACtD,QAAQ,CACN,UAAU,EAAE;YACV,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;YACrB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;YACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;YACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;YAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAA;YAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;YACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAChD,EACD,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,GACrD,OAAO,CAAA;KACX,CAAA;IACD,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;IAChF,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAA;CACtI;AA0ED,+EAA+E;AAC/E,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,UAAU,GAAG,WAAW,CAAC,CAqBjH;AAuHD,eAAO,MAAM,MAAM,gDAAiD,CAAA;AAoLpE,mEAAmE;AACnE,wBAAgB,KAAK,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CA0BjD"}

package/dist/dsh/config.d.ts

@@ -29,6 +29,28 @@ export type OrcaConfig = z.infer<typeof OrcaConfig>;
 /** Runtime configuration accepted by the dsh bundle entrypoint. */
 export declare const Config: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
+    modelRoutes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        provider: z.ZodString;
+        family: z.ZodEnum<{
+            openai: "openai";
+            "opencode-go": "opencode-go";
+            "opencode-zen": "opencode-zen";
+            openrouter: "openrouter";
+            ollama: "ollama";
+            other: "other";
+        }>;
+        connection: z.ZodDefault<z.ZodEnum<{
+            api: "api";
+            codex: "codex";
+            local: "local";
+        }>>;
+        protocol: z.ZodDefault<z.ZodEnum<{
+            responses: "responses";
+            "chat-completions": "chat-completions";
+            messages: "messages";
+            unknown: "unknown";
+        }>>;
+    }, z.core.$strict>>>;
     orca: z.ZodPrefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         storage: z.ZodDefault<z.ZodEnum<{

package/dist/dsh/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/dsh/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBrB,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AACnD,mEAAmE;AACnE,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGjB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/dsh/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBrB,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AACnD,mEAAmE;AACnE,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIjB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAA"}

package/dist/dsh/config.js

@@ -1,7 +1,8 @@
 import { z } from 'zod';
+import { ModelRouteSchema } from './model-configuration.js';
 const limit = (value) => z.number().int().positive().max(Number.MAX_SAFE_INTEGER).default(value);
 export const OrcaConfig = z.object({
-    enabled: z.boolean().default(false),
+    enabled: z.boolean().default(true),
     storage: z.enum(['project', 'data-dir']).default('project'),
     includeAuxiliary: z.boolean().default(false),
     capture: z.object({
@@ -23,6 +24,7 @@ export const OrcaConfig = z.object({
 /** Runtime configuration accepted by the dsh bundle entrypoint. */
 export const Config = z.object({
     enabled: z.boolean().default(true),
+    modelRoutes: z.array(ModelRouteSchema).max(128).default([]).refine(routes => new Set(routes.map(r => r.provider)).size === routes.length, 'Each DSH provider must have one route declaration'),
     orca: OrcaConfig.prefault({}),
 });
 //# sourceMappingURL=config.js.map

package/dist/dsh/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/dsh/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3D,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACtC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IACf,sBAAsB,EAAE,KAAK,CAAC,SAAS,CAAC;IACxC,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC;IACtC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC;IACjC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;IACxB,wBAAwB,EAAE,KAAK,CAAC,GAAG,CAAC;IACpC,2BAA2B,EAAE,KAAK,CAAC,SAAS,CAAC;IAC7C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtF,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC;IACzC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;IAClC,0BAA0B,EAAE,KAAK,CAAC,MAAM,CAAC;IACzC,wBAAwB,EAAE,KAAK,CAAC,UAAU,CAAC;CAC5C,CAAC,CAAA;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9B,CAAC,CAAA"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/dsh/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAE3D,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3D,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACtC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IACf,sBAAsB,EAAE,KAAK,CAAC,SAAS,CAAC;IACxC,mBAAmB,EAAE,KAAK,CAAC,UAAU,CAAC;IACtC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC;IACjC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;IACxB,wBAAwB,EAAE,KAAK,CAAC,GAAG,CAAC;IACpC,2BAA2B,EAAE,KAAK,CAAC,SAAS,CAAC;IAC7C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtF,uBAAuB,EAAE,KAAK,CAAC,SAAS,CAAC;IACzC,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC;IAClC,0BAA0B,EAAE,KAAK,CAAC,MAAM,CAAC;IACzC,wBAAwB,EAAE,KAAK,CAAC,UAAU,CAAC;CAC5C,CAAC,CAAA;AAEF,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,mDAAmD,CAAC;IAC9L,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9B,CAAC,CAAA"}

package/dist/dsh/enno-delegation.d.ts

@@ -0,0 +1,52 @@
+import { type ModelBinding } from './model-configuration.js';
+import type { RoutableAgent } from './model-routing.js';
+import type { DshRuntime } from './runtime.js';
+import type { DshToolHostBinding } from './tools.js';
+export interface DshSpawnBackend {
+    start(name: 'spawn', request: {
+        parent: RoutableAgent;
+        prompt: {
+            type: 'text';
+            text: string;
+        }[];
+        signal: AbortSignal;
+        agentOptions: ModelBinding;
+        maxDepth: number;
+        toolFilter: {
+            allow: readonly string[];
+        };
+        label: string;
+    }): Promise<{
+        readonly id: string;
+        readonly localAgent?: RoutableAgent;
+        result: Promise<{
+            output: unknown;
+            stopReason: string;
+        }>;
+        dispose(): Promise<void>;
+    }>;
+}
+/** Child shells/custom execution tools cannot enforce a WorkUnit file boundary.
+ * The Goki head owns commands and final focused verification in this version. */
+export declare function childFileScopeDenial(root: string, scope: readonly string[], name: string, args: unknown): string | undefined;
+export declare class DshEnnoDelegation {
+    #private;
+    private readonly runtime;
+    private readonly backend;
+    constructor(runtime: Pick<DshRuntime, 'withDatabase'>, backend: DshSpawnBackend | undefined);
+    /** Called synchronously at agent/created, before session-start and followup. */
+    created(agent: RoutableAgent): void;
+    model(agent: object): ModelBinding | undefined;
+    isChild(agent: object): boolean;
+    parent(agent: object): RoutableAgent | undefined;
+    allows(agent: object, tool: string): boolean;
+    toolDenial(agent: object, name: string, args: unknown): string | undefined;
+    /** Durable ownership is checked again before every child request and tool,
+     * including after reload. Completing or replacing a lease revokes the child. */
+    assertCurrent(agent: object): Promise<void>;
+    /** Persist the created binding before the child's first request; restore only
+     * by its exact durable child id, never by origin/parent metadata alone. */
+    restoreOrPersist(agent: RoutableAgent): Promise<ModelBinding | undefined>;
+    execute(parent: RoutableAgent, args: unknown, binding: DshToolHostBinding, toolNames: readonly string[], signal: AbortSignal): Promise<unknown>;
+}
+//# sourceMappingURL=enno-delegation.d.ts.map

package/dist/dsh/enno-delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enno-delegation.d.ts","sourceRoot":"","sources":["../../src/dsh/enno-delegation.ts"],"names":[],"mappings":"AAOA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAKpD,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;QAC5B,MAAM,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;QACrF,YAAY,EAAE,YAAY,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE;YAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;SAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;KACvG,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAAA;CAC9J;AAGD;iFACiF;AACjF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAmB5H;AAMD,qBAAa,iBAAiB;;IAGhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAoC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAnE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAmB,OAAO,EAAE,eAAe,GAAG,SAAS;IAC7H,gFAAgF;IAChF,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAMnC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAC9C,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAC/B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAChD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAC5C,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS;IAM1E;oFACgF;IAC1E,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAajD;+EAC2E;IACrE,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAezE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAuDtJ"}

package/dist/dsh/enno-delegation.js

@@ -0,0 +1,194 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { realpathSync } from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+import { canonicalContentHash } from '../serialization/validate.js';
+import { KiokukoError } from '../errors.js';
+import { findSecretInValue } from '../memory/secrets.js';
+import { ModelBindingSchema } from './model-configuration.js';
+import { assertExecutionLeaseInTransaction, readEnnoSnapshot } from '../enno-oduno/store.js';
+import { readExecutionSelection } from './execution-selection.js';
+import { withImmediateTransaction } from '../db/transaction.js';
+const CHILD_FILE_TOOLS = new Set(['read', 'write', 'edit', 'multiedit', 'str_replace_editor', 'glob', 'grep', 'skill']);
+/** Child shells/custom execution tools cannot enforce a WorkUnit file boundary.
+ * The Goki head owns commands and final focused verification in this version. */
+export function childFileScopeDenial(root, scope, name, args) {
+    if (!CHILD_FILE_TOOLS.has(name))
+        return 'Goki children use scoped file tools; the head runs commands and verifiers';
+    if (!args || typeof args !== 'object' || Array.isArray(args))
+        return 'Invalid child tool arguments';
+    const fields = args;
+    const supplied = fields.file_path ?? fields.filePath ?? fields.path;
+    if (name === 'skill')
+        return undefined;
+    if (typeof supplied !== 'string')
+        return ['glob', 'grep'].includes(name) ? undefined : 'A child file operation requires an explicit repository path';
+    const absolute = path.resolve(root, supplied);
+    let ancestor = absolute;
+    let canonicalTarget = absolute;
+    while (true) {
+        try {
+            const canonical = realpathSync(ancestor);
+            const relative = path.relative(root, canonical);
+            if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))
+                return 'Child path leaves the canonical repository';
+            canonicalTarget = path.resolve(canonical, path.relative(ancestor, absolute));
+            break;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                return 'Cannot verify the child path';
+            const parent = path.dirname(ancestor);
+            if (parent === ancestor)
+                return 'Cannot verify the child path';
+            ancestor = parent;
+        }
+    }
+    const relative = path.relative(root, absolute);
+    if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative))
+        return 'Child path leaves the canonical repository';
+    const mutating = ['write', 'edit', 'multiedit'].includes(name) || name === 'str_replace_editor' && fields.command !== 'view';
+    if (mutating && ![relative, path.relative(root, canonicalTarget)].every(target => scope.some(entry => entry === '.' || target === entry || target.startsWith(`${entry}${path.sep}`) || path.matchesGlob(target, entry))))
+        return 'Child mutation is outside the approved WorkUnit scope';
+    return undefined;
+}
+const instructionSchema = z.object({ instruction: z.string().trim().min(1).max(16_384) }).strict();
+const authoritySchema = z.object({
+    runId: z.string(), workspace: z.string(), orchestrationId: z.string(),
+    revision: z.number().int(), routeEpoch: z.number().int(), leaseToken: z.string(), workUnitId: z.string(),
+}).strict();
+export class DshEnnoDelegation {
+    runtime;
+    backend;
+    #pending = new AsyncLocalStorage();
+    #children = new WeakMap();
+    constructor(runtime, backend) {
+        this.runtime = runtime;
+        this.backend = backend;
+    }
+    /** Called synchronously at agent/created, before session-start and followup. */
+    created(agent) {
+        const binding = this.#pending.getStore();
+        if (!binding || binding.child)
+            return;
+        binding.child = agent;
+        this.#children.set(agent, binding);
+    }
+    model(agent) { return this.#children.get(agent)?.model; }
+    isChild(agent) { return this.#children.has(agent); }
+    parent(agent) { return this.#children.get(agent)?.parent; }
+    allows(agent, tool) { return this.#children.get(agent)?.toolNames.includes(tool) ?? true; }
+    toolDenial(agent, name, args) {
+        const binding = this.#children.get(agent);
+        if (!binding)
+            return undefined;
+        if (!binding.toolNames.includes(name))
+            return 'Tool is outside the delegated scope';
+        return childFileScopeDenial(binding.root, binding.scope, name, args);
+    }
+    /** Durable ownership is checked again before every child request and tool,
+     * including after reload. Completing or replacing a lease revokes the child. */
+    async assertCurrent(agent) {
+        const binding = this.#children.get(agent);
+        if (!binding)
+            return;
+        await this.runtime.withDatabase(db => {
+            const row = db.prepare('SELECT authority_json, status FROM dsh_enno_delegations WHERE delegation_id = ?')
+                .get(binding.delegationId);
+            if (!row || row.status !== 'started')
+                throw new KiokukoError('CONFLICT', 'The delegated execution is no longer active');
+            const authority = authoritySchema.parse(JSON.parse(row.authority_json));
+            const snapshot = readEnnoSnapshot(db, authority);
+            if (snapshot.status !== 'goki_executing' || snapshot.revision !== authority.revision || snapshot.dshSessionId !== binding.parentSessionId)
+                throw new KiokukoError('CONFLICT', 'The delegated WorkUnit authority is stale');
+            assertExecutionLeaseInTransaction(db, snapshot, authority);
+        });
+    }
+    /** Persist the created binding before the child's first request; restore only
+     * by its exact durable child id, never by origin/parent metadata alone. */
+    async restoreOrPersist(agent) {
+        const live = this.#children.get(agent);
+        if (live) {
+            await this.runtime.withDatabase(db => db.prepare('UPDATE dsh_enno_delegations SET child_session_id = ? WHERE delegation_id = ? AND (child_session_id IS NULL OR child_session_id = ?)')
+                .run(agent.session?.id ?? agent.id, live.delegationId, agent.session?.id ?? agent.id));
+            return live.model;
+        }
+        const stored = await this.runtime.withDatabase(db => db.prepare('SELECT delegation_id, parent_session_id, model_json, tools_json, repository_root, scope_json FROM dsh_enno_delegations WHERE child_session_id = ?')
+            .get(agent.session?.id ?? agent.id));
+        if (!stored)
+            return undefined;
+        const model = ModelBindingSchema.parse(JSON.parse(stored.model_json));
+        const toolNames = z.array(z.string()).parse(JSON.parse(stored.tools_json));
+        this.#children.set(agent, { model, toolNames, root: stored.repository_root, scope: z.array(z.string()).parse(JSON.parse(stored.scope_json)), delegationId: stored.delegation_id, parentSessionId: stored.parent_session_id, child: agent });
+        return model;
+    }
+    async execute(parent, args, binding, toolNames, signal) {
+        const input = instructionSchema.parse(args);
+        const allowedTools = toolNames.filter(name => CHILD_FILE_TOOLS.has(name));
+        if (this.isChild(parent) || !this.backend)
+            throw new KiokukoError('SERVICE_UNAVAILABLE', 'Native spawn delegation is unavailable; grandchildren are prohibited');
+        const admitted = await this.runtime.withDatabase(db => withImmediateTransaction(db, () => {
+            const snapshot = readEnnoSnapshot(db, binding);
+            if (snapshot.status !== 'goki_executing' || snapshot.revision !== binding.revision || snapshot.dshSessionId !== parent.session?.id || !binding.workUnitId || !binding.leaseToken)
+                throw new KiokukoError('CONFLICT', 'Delegation requires the current approved WorkUnit');
+            assertExecutionLeaseInTransaction(db, snapshot, { workUnitId: binding.workUnitId, leaseToken: binding.leaseToken, routeEpoch: binding.routeEpoch });
+            const selection = readExecutionSelection(db, binding.runId)?.value;
+            if (selection?.mode !== 'enno' || selection.status !== 'ready' || !selection.configuration)
+                throw new KiokukoError('CONFLICT', 'Choose the worker model before delegation');
+            const unit = snapshot.workUnits.find(u => u.workUnit.id === binding.workUnitId)?.workUnit;
+            if (!unit)
+                throw new KiokukoError('CONFLICT', 'WorkUnit is unavailable');
+            const digest = canonicalContentHash({ input, revision: binding.revision, workUnit: unit, model: selection.configuration.roles.worker });
+            const previous = db.prepare('SELECT input_digest, status, result_json FROM dsh_enno_delegations WHERE delegation_id = ?')
+                .get(binding.idempotencyKey);
+            if (previous) {
+                if (previous.input_digest !== digest)
+                    throw new KiokukoError('CONFLICT', 'Delegation input changed under the same call identity');
+                if (previous.status === 'completed' && previous.result_json)
+                    return { replay: JSON.parse(previous.result_json) };
+                throw new KiokukoError('CONFLICT', 'A previous delegation may have executed; inspect its child evidence before issuing new work');
+            }
+            const active = db.prepare("SELECT COUNT(*) AS count FROM dsh_enno_delegations WHERE run_id = ? AND status = 'started'").get(binding.runId)?.count ?? 0;
+            if (active >= selection.configuration.maxConcurrentChildren)
+                throw new KiokukoError('CONFLICT', 'Child concurrency limit reached; wait for or inspect the existing child');
+            const authority = authoritySchema.parse({ runId: binding.runId, workspace: binding.workspace, orchestrationId: binding.orchestrationId, revision: binding.revision, routeEpoch: binding.routeEpoch, leaseToken: binding.leaseToken, workUnitId: binding.workUnitId });
+            db.prepare("INSERT INTO dsh_enno_delegations (delegation_id, run_id, input_digest, status, parent_session_id, model_json, tools_json, repository_root, scope_json, authority_json) VALUES (?, ?, ?, 'started', ?, ?, ?, ?, ?, ?)")
+                .run(binding.idempotencyKey, binding.runId, digest, parent.session.id, JSON.stringify(selection.configuration.roles.worker), JSON.stringify(allowedTools), snapshot.repositoryRoot, JSON.stringify(unit.scope), JSON.stringify(authority));
+            return { model: selection.configuration.roles.worker, unit, root: snapshot.repositoryRoot };
+        }));
+        if ('replay' in admitted)
+            return admitted.replay;
+        const childBinding = { parent, parentSessionId: parent.session.id, toolNames: allowedTools, root: admitted.root, scope: admitted.unit.scope, model: admitted.model, delegationId: binding.idempotencyKey };
+        let run;
+        try {
+            run = await this.#pending.run(childBinding, () => this.backend.start('spawn', {
+                parent, signal, agentOptions: { ...admitted.model }, maxDepth: 1, label: 'Goki worker',
+                toolFilter: { allow: allowedTools },
+                prompt: [{ type: 'text', text: [
+                            'You are the Goki worker for one approved WorkUnit. Do not start Kiokuko intake, ask for orchestration selection, delegate, or report acceptance. You have no parent run or lease authority. Preserve other work. Stay within the declared scope. Return changed paths, verification evidence and unresolved issues to Goki.',
+                            JSON.stringify({ objective: admitted.unit.objective, scope: admitted.unit.scope, acceptanceCriteria: admitted.unit.acceptanceCriteria, instruction: input.instruction }),
+                        ].join('\n') }],
+            }));
+            if (!run.localAgent || childBinding.child !== run.localAgent || !this.isChild(run.localAgent))
+                throw new KiokukoError('INTEGRITY_ERROR', 'Spawn did not establish the exact managed child before first execution');
+            const child = await run.result;
+            if (findSecretInValue(child.output) !== undefined)
+                throw new KiokukoError('SECURITY_REJECTION', 'Child output contains secret-shaped content and was not persisted or forwarded');
+            const result = { childSessionId: run.id, stopReason: child.stopReason, output: child.output, accepted: false,
+                instruction: 'Goki must review this evidence and run the WorkUnit verifier before enno_work_report.' };
+            const json = JSON.stringify(result);
+            if (Buffer.byteLength(json) > 256 * 1024)
+                throw new KiokukoError('VALIDATION_ERROR', 'Child output exceeds the delegation result limit; inspect the native child session');
+            await this.runtime.withDatabase(db => db.prepare("UPDATE dsh_enno_delegations SET status = 'completed', result_json = ? WHERE delegation_id = ?").run(json, binding.idempotencyKey));
+            return result;
+        }
+        catch (error) {
+            await this.runtime.withDatabase(db => db.prepare("UPDATE dsh_enno_delegations SET status = 'uncertain' WHERE delegation_id = ? AND status = 'started'").run(binding.idempotencyKey));
+            throw error;
+        }
+        finally {
+            await run?.dispose();
+        }
+    }
+}
+//# sourceMappingURL=enno-delegation.js.map