odai-dsh-agent 0.2.5 → 0.2.7

package/preset/odai/runtime/context-capability.mjs

@@ -1,86 +1,91 @@
+import { isUnknownRecord } from "./runtime-types.mjs";
 export const ODAI_CONTEXT_CAPABILITIES = Object.freeze([
-  "routing-config",
-  "human-care",
-  "human-safety",
-  "skill-source",
-  "skill-evolution",
-  "output-config",
-  "compaction-config",
-  "memory",
-  "safety-continuity",
+    "routing-config",
+    "human-care",
+    "human-safety",
+    "skill-source",
+    "skill-evolution",
+    "output-config",
+    "compaction-config",
+    "memory",
+    "safety-continuity",
 ]);
-
 const CAPABILITY_FIELDS = Object.freeze({
-  "routing-config": "routingConfig",
-  "human-care": "care",
-  "human-safety": "safety",
-  "skill-source": "skillSource",
-  "skill-evolution": "skillEvolution",
-  "output-config": "outputConfig",
-  "compaction-config": "compactionConfig",
-  memory: "memory",
-  "safety-continuity": "continuity",
+    "routing-config": "routingConfig",
+    "human-care": "care",
+    "human-safety": "safety",
+    "skill-source": "skillSource",
+    "skill-evolution": "skillEvolution",
+    "output-config": "outputConfig",
+    "compaction-config": "compactionConfig",
+    memory: "memory",
+    "safety-continuity": "continuity",
 });
-
+function isContextCapability(value) {
+    return typeof value === "string" && ODAI_CONTEXT_CAPABILITIES.includes(value);
+}
 export function requestedContextCapabilities(events, turn) {
-  if (!Number.isSafeInteger(turn)) return Object.freeze([]);
-  const capabilities = new Set();
-  for (const event of Array.isArray(events) ? events : []) {
-    if (event?.type === "odai/context-capability-requested"
-      && event.data?.turn === turn
-      && ODAI_CONTEXT_CAPABILITIES.includes(event.data.capability)) {
-      capabilities.add(event.data.capability);
+    if (!Number.isSafeInteger(turn))
+        return Object.freeze([]);
+    const capabilities = new Set();
+    for (const event of Array.isArray(events) ? events : []) {
+        const capability = event.data?.capability;
+        if (event.type === "odai/context-capability-requested"
+            && event.data?.turn === turn
+            && isContextCapability(capability)) {
+            capabilities.add(capability);
+        }
     }
-  }
-  return Object.freeze([...capabilities]);
+    return Object.freeze([...capabilities]);
 }
-
 export function activateRequestedCapabilities(activation, capabilities) {
-  const merged = { ...activation };
-  for (const capability of capabilities) {
-    const field = CAPABILITY_FIELDS[capability];
-    if (field) merged[field] = true;
-  }
-  if (merged.safety) merged.care = false;
-  return Object.freeze(merged);
+    const merged = { ...activation };
+    for (const capability of capabilities) {
+        merged[CAPABILITY_FIELDS[capability]] = true;
+    }
+    if (merged.safety)
+        merged.care = false;
+    return Object.freeze(merged);
 }
-
 export function createContextCapabilityTool(options = {}) {
-  const isChild = typeof options.isChild === "function" ? options.isChild : () => false;
-  const onRequested = typeof options.onRequested === "function" ? options.onRequested : () => {};
-  return {
-    name: "odai_context_capability",
-    description: "Request one Odai capability when its specialized tool is not currently visible. Use this only as a discovery fallback for routing configuration, non-crisis care, crisis safety, skill source/evolution, output, compaction, memory, or safety continuity. The real tool and its complete constraints appear on the next step; this request performs no configuration, persistence, diagnosis, or model switch.",
-    parameters: {
-      type: "object",
-      additionalProperties: false,
-      required: ["capability"],
-      properties: {
-        capability: { type: "string", enum: ODAI_CONTEXT_CAPABILITIES },
-      },
-    },
-    output: {
-      schema: {
-        type: "object",
-        additionalProperties: false,
-        required: ["capability", "status"],
-        properties: {
-          capability: { type: "string", enum: ODAI_CONTEXT_CAPABILITIES },
-          status: { type: "string", enum: ["available-next-step"] },
+    const isChild = typeof options.isChild === "function" ? options.isChild : () => false;
+    const onRequested = typeof options.onRequested === "function" ? options.onRequested : () => { };
+    return {
+        name: "odai_context_capability",
+        description: "Request one Odai capability when its specialized tool is not currently visible. Use this only as a discovery fallback for routing configuration, non-crisis care, crisis safety, skill source/evolution, output, compaction, memory, or safety continuity. The real tool and its complete constraints appear on the next step; this request performs no configuration, persistence, diagnosis, or model switch.",
+        parameters: {
+            type: "object",
+            additionalProperties: false,
+            required: ["capability"],
+            properties: {
+                capability: { type: "string", enum: ODAI_CONTEXT_CAPABILITIES },
+            },
+        },
+        output: {
+            schema: {
+                type: "object",
+                additionalProperties: false,
+                required: ["capability", "status"],
+                properties: {
+                    capability: { type: "string", enum: ODAI_CONTEXT_CAPABILITIES },
+                    status: { type: "string", enum: ["available-next-step"] },
+                },
+            },
+            render(_arguments, value) {
+                return [{ type: "text", text: `Odai ${value.capability} capability is available on the next step.` }];
+            },
+        },
+        execute(arguments_, execution) {
+            if (!execution.agent)
+                throw new Error("odai_context_capability requires an owning agent session");
+            if (isChild(execution.agent))
+                throw new Error("child agents may not request Odai controller capabilities");
+            if (!isUnknownRecord(arguments_) || !isContextCapability(arguments_.capability)) {
+                throw new TypeError(`capability must be ${ODAI_CONTEXT_CAPABILITIES.join(", ")}`);
+            }
+            onRequested(execution.agent, arguments_.capability, execution);
+            return Promise.resolve({ capability: arguments_.capability, status: "available-next-step" });
         },
-      },
-      render(_args, value) {
-        return [{ type: "text", text: `Odai ${value.capability} capability is available on the next step.` }];
-      },
-    },
-    execute(args, execution) {
-      if (!execution.agent) throw new Error("odai_context_capability requires an owning agent session");
-      if (isChild(execution.agent)) throw new Error("child agents may not request Odai controller capabilities");
-      if (!args || typeof args !== "object" || Array.isArray(args) || !ODAI_CONTEXT_CAPABILITIES.includes(args.capability)) {
-        throw new TypeError(`capability must be ${ODAI_CONTEXT_CAPABILITIES.join(", ")}`);
-      }
-      onRequested(execution.agent, args.capability, execution);
-      return Promise.resolve({ capability: args.capability, status: "available-next-step" });
-    },
-  };
+    };
 }
+//# sourceMappingURL=context-capability.mjs.map

package/preset/odai/runtime/context-capability.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-capability.mjs","sourceRoot":"","sources":["../src/context-capability.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,QAAQ;IACR,mBAAmB;CACX,CAAC,CAAC;AAMZ,MAAM,iBAAiB,GAAgE,MAAM,CAAC,MAAM,CAAC;IACnG,gBAAgB,EAAE,eAAe;IACjC,YAAY,EAAE,MAAM;IACpB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,aAAa;IAC7B,iBAAiB,EAAE,gBAAgB;IACnC,eAAe,EAAE,cAAc;IAC/B,mBAAmB,EAAE,kBAAkB;IACvC,MAAM,EAAE,QAAQ;IAChB,mBAAmB,EAAE,YAAY;CAClC,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,yBAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAuC,EAAE,IAAwB;IAC5G,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC;eACjD,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI;eACzB,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,UAA6B,EAC7B,YAAyC;IAEzC,MAAM,MAAM,GAA6B,EAAE,GAAG,UAAU,EAAE,CAAC;IAC3D,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAYD,MAAM,UAAU,2BAA2B,CACzC,OAAO,GAAiC,EAAE;IAE1C,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;IAC/F,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,iZAAiZ;QAC9Z,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,UAAU,EAAE;gBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;aAChE;SACF;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC;gBAClC,UAAU,EAAE;oBACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;oBAC/D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE;iBAC1D;aACF;YACD,MAAM,CAAC,UAAU,EAAE,KAAK;gBACtB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,KAAK,CAAC,UAAU,4CAA4C,EAAE,CAAC,CAAC;YACxG,CAAC;SACF;QACD,OAAO,CAAC,UAAU,EAAE,SAAS;YAC3B,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClG,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC3G,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,SAAS,CAAC,sBAAsB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC/D,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC/F,CAAC;KACF,CAAC;AACJ,CAAC"}

package/preset/odai/runtime/governance.d.mts

@@ -0,0 +1,30 @@
+import type { DshAgent, DshEvent, ToolExecution, ToolResult } from "./runtime-types.mjs";
+export declare const DEFAULT_CHILD_DENIED_TOOLS: readonly ["write", "edit", "str_replace_editor", "bash", "pwsh", "ask_user_question", "subagent", "subagent_fork", "subagent_codex", "subagent_claude_code", "send_message", "interrupt_agent", "list_agents", "workflow", "ralph", "job_output", "job_list", "job_kill"];
+export declare const DEFAULT_PROTECTED_CONTROLLER_ALLOWED_TOOLS: readonly ["read", "read_image", "glob", "grep", "web_search", "web_fetch", "ask_user_question", "get_goal", "list_agents", "job_output", "job_list", "skill", "odai_route_card"];
+export interface ToolGuardOptions {
+    additionalDeniedTools?: readonly string[];
+    onDenied?(execution: ToolExecution, reason: string): void;
+}
+export interface RouteProtection {
+    readonly turn?: number;
+    readonly mode?: "read-only";
+    readonly scopeId?: string;
+    readonly reasonCode?: string;
+}
+export interface RouteProtectionGuardOptions extends ToolGuardOptions {
+    protectionFor?(agent: DshAgent | undefined): RouteProtection | undefined;
+}
+export interface ToolResultSummary {
+    callId: string;
+    rootCallId: string;
+    tool: string;
+    child: boolean;
+    isError: boolean;
+    errorCode?: string;
+}
+export declare function isSubagent(agent: DshAgent | null | undefined): boolean;
+export declare function createChildToolGuard(options?: ToolGuardOptions): (execution: ToolExecution) => string | undefined;
+export declare function activeRouteProtection(agent: DshAgent | null | undefined, recordedEvents?: readonly DshEvent[] | undefined): RouteProtection | undefined;
+export declare function createRouteProtectionGuard(options?: RouteProtectionGuardOptions): (execution: ToolExecution) => string | undefined;
+export declare function summarizeToolResult(execution: ToolExecution, result: ToolResult): ToolResultSummary;
+//# sourceMappingURL=governance.d.mts.map

package/preset/odai/runtime/governance.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.mts","sourceRoot":"","sources":["../src/governance.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEzF,eAAO,MAAM,0BAA0B,2QAmB5B,CAAC;AAEZ,eAAO,MAAM,0CAA0C,kLAc5C,CAAC;AAEZ,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,aAAa,CAAC,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAAC;CAC1E;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAItE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,gBAAqB,GAAG,CAAC,SAAS,EAAE,aAAa,KAAK,MAAM,GAAG,SAAS,CAerH;AAaD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,EAClC,cAAc,GAAE,SAAS,QAAQ,EAAE,GAAG,SAAkC,GACvE,eAAe,GAAG,SAAS,CA6B7B;AAED,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,2BAAgC,GACxC,CAAC,SAAS,EAAE,aAAa,KAAK,MAAM,GAAG,SAAS,CAqBlD;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,GAAG,iBAAiB,CAcnG"}

package/preset/odai/runtime/governance.mjs

@@ -1,128 +1,141 @@
 export const DEFAULT_CHILD_DENIED_TOOLS = Object.freeze([
-  "write",
-  "edit",
-  "str_replace_editor",
-  "bash",
-  "pwsh",
-  "ask_user_question",
-  "subagent",
-  "subagent_fork",
-  "subagent_codex",
-  "subagent_claude_code",
-  "send_message",
-  "interrupt_agent",
-  "list_agents",
-  "workflow",
-  "ralph",
-  "job_output",
-  "job_list",
-  "job_kill",
+    "write",
+    "edit",
+    "str_replace_editor",
+    "bash",
+    "pwsh",
+    "ask_user_question",
+    "subagent",
+    "subagent_fork",
+    "subagent_codex",
+    "subagent_claude_code",
+    "send_message",
+    "interrupt_agent",
+    "list_agents",
+    "workflow",
+    "ralph",
+    "job_output",
+    "job_list",
+    "job_kill",
 ]);
-
 export const DEFAULT_PROTECTED_CONTROLLER_ALLOWED_TOOLS = Object.freeze([
-  "read",
-  "read_image",
-  "glob",
-  "grep",
-  "web_search",
-  "web_fetch",
-  "ask_user_question",
-  "get_goal",
-  "list_agents",
-  "job_output",
-  "job_list",
-  "skill",
-  "odai_route_card",
+    "read",
+    "read_image",
+    "glob",
+    "grep",
+    "web_search",
+    "web_fetch",
+    "ask_user_question",
+    "get_goal",
+    "list_agents",
+    "job_output",
+    "job_list",
+    "skill",
+    "odai_route_card",
 ]);
-
 export function isSubagent(agent) {
-  const header = agent?.session?.header;
-  return header?.origin === "subagent"
-    || (Number.isSafeInteger(header?.delegationDepth) && header.delegationDepth > 0);
+    const header = agent?.session?.header;
+    return header?.origin === "subagent"
+        || (Number.isSafeInteger(header?.delegationDepth) && (header?.delegationDepth ?? 0) > 0);
 }
-
 export function createChildToolGuard(options = {}) {
-  const denied = new Set([
-    ...DEFAULT_CHILD_DENIED_TOOLS,
-    ...(Array.isArray(options.additionalDeniedTools) ? options.additionalDeniedTools : []),
-  ]);
-  const onDenied = typeof options.onDenied === "function" ? options.onDenied : () => {};
-
-  return (execution) => {
-    if (!isSubagent(execution?.agent)) return undefined;
-    if (!denied.has(execution?.name)) return undefined;
-
-    const reason = `ODAI_SUBAGENT_BOUNDARY: child agents may not execute ${execution.name}; return evidence to the controller instead.`;
-    onDenied(execution, reason);
-    return reason;
-  };
+    const denied = new Set([
+        ...DEFAULT_CHILD_DENIED_TOOLS,
+        ...(Array.isArray(options.additionalDeniedTools) ? options.additionalDeniedTools : []),
+    ]);
+    const onDenied = typeof options.onDenied === "function" ? options.onDenied : () => { };
+    return (execution) => {
+        if (!isSubagent(execution?.agent))
+            return undefined;
+        if (!denied.has(execution?.name))
+            return undefined;
+        const reason = `ODAI_SUBAGENT_BOUNDARY: child agents may not execute ${execution.name}; return evidence to the controller instead.`;
+        onDenied(execution, reason);
+        return reason;
+    };
+}
+function asRouteProtection(event, turn) {
+    const { data } = event;
+    if (data.turn !== turn || data.mode !== "read-only")
+        return undefined;
+    return {
+        turn,
+        mode: "read-only",
+        ...(typeof data.scopeId === "string" ? { scopeId: data.scopeId } : {}),
+        ...(typeof data.reasonCode === "string" ? { reasonCode: data.reasonCode } : {}),
+    };
 }
-
 export function activeRouteProtection(agent, recordedEvents = agent?.session?.events) {
-  if (isSubagent(agent)) return undefined;
-  const events = recordedEvents;
-  if (!Array.isArray(events)) return undefined;
-
-  let currentTurn;
-  for (let index = events.length - 1; index >= 0; index -= 1) {
-    const event = events[index];
-    if (event?.type !== "odai/route-decided") continue;
-    if (!Number.isSafeInteger(event.data?.turn)) return undefined;
-    currentTurn = event.data.turn;
-    break;
-  }
-  if (currentTurn === undefined) return undefined;
-
-  const releasedScopes = new Set();
-  for (let index = events.length - 1; index >= 0; index -= 1) {
-    const event = events[index];
-    if (event?.type === "odai/route-protection-released" && event.data?.turn === currentTurn) {
-      if (typeof event.data?.scopeId === "string") releasedScopes.add(event.data.scopeId);
-      continue;
+    if (isSubagent(agent))
+        return undefined;
+    const events = recordedEvents;
+    if (!Array.isArray(events))
+        return undefined;
+    let currentTurn;
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event?.type !== "odai/route-decided")
+            continue;
+        if (!Number.isSafeInteger(event.data?.turn))
+            return undefined;
+        currentTurn = event.data.turn;
+        break;
+    }
+    if (currentTurn === undefined)
+        return undefined;
+    const releasedScopes = new Set();
+    for (let index = events.length - 1; index >= 0; index -= 1) {
+        const event = events[index];
+        if (event?.type === "odai/route-protection-released" && event.data?.turn === currentTurn) {
+            if (typeof event.data?.scopeId === "string")
+                releasedScopes.add(event.data.scopeId);
+            continue;
+        }
+        if (event?.type !== "odai/route-protection")
+            continue;
+        const protection = asRouteProtection(event, currentTurn);
+        if (!protection)
+            continue;
+        if (protection.scopeId && releasedScopes.has(protection.scopeId))
+            continue;
+        return protection;
     }
-    if (event?.type !== "odai/route-protection") continue;
-    if (event.data?.turn !== currentTurn || event.data?.mode !== "read-only") continue;
-    if (event.data?.scopeId && releasedScopes.has(event.data.scopeId)) continue;
-    return event.data;
-  }
-  return undefined;
+    return undefined;
 }
-
 export function createRouteProtectionGuard(options = {}) {
-  const allowed = new Set(DEFAULT_PROTECTED_CONTROLLER_ALLOWED_TOOLS);
-  for (const name of Array.isArray(options.additionalDeniedTools) ? options.additionalDeniedTools : []) {
-    allowed.delete(name);
-  }
-  const onDenied = typeof options.onDenied === "function" ? options.onDenied : () => {};
-  const protectionFor = typeof options.protectionFor === "function"
-    ? options.protectionFor
-    : activeRouteProtection;
-
-  return (execution) => {
-    if (isSubagent(execution?.agent)) return undefined;
-    if (allowed.has(execution?.name)) return undefined;
-    const protection = protectionFor(execution?.agent);
-    if (!protection) return undefined;
-
-    const reasonCode = protection.reasonCode ?? "unresolved-high-impact-route";
-    const reason = `ODAI_HIGH_IMPACT_ROUTE_BLOCKED: controller may not execute ${execution.name} while ${reasonCode} remains unresolved; use read-only evidence and provide an actionable decision path.`;
-    onDenied(execution, reason);
-    return reason;
-  };
+    const allowed = new Set(DEFAULT_PROTECTED_CONTROLLER_ALLOWED_TOOLS);
+    for (const name of Array.isArray(options.additionalDeniedTools) ? options.additionalDeniedTools : []) {
+        allowed.delete(name);
+    }
+    const onDenied = typeof options.onDenied === "function" ? options.onDenied : () => { };
+    const protectionFor = typeof options.protectionFor === "function"
+        ? options.protectionFor
+        : activeRouteProtection;
+    return (execution) => {
+        if (isSubagent(execution?.agent))
+            return undefined;
+        if (allowed.has(execution?.name))
+            return undefined;
+        const protection = protectionFor(execution?.agent);
+        if (!protection)
+            return undefined;
+        const reasonCode = protection.reasonCode ?? "unresolved-high-impact-route";
+        const reason = `ODAI_HIGH_IMPACT_ROUTE_BLOCKED: controller may not execute ${execution.name} while ${reasonCode} remains unresolved; use read-only evidence and provide an actionable decision path.`;
+        onDenied(execution, reason);
+        return reason;
+    };
 }
-
 export function summarizeToolResult(execution, result) {
-  const summary = {
-    callId: String(execution.callId),
-    rootCallId: String(execution.rootCallId),
-    tool: execution.name,
-    child: isSubagent(execution.agent),
-    isError: result.isError === true,
-  };
-
-  if (result.isError === true && result.error?.code) {
-    summary.errorCode = String(result.error.code);
-  }
-
-  return summary;
+    const summary = {
+        callId: String(execution.callId),
+        rootCallId: String(execution.rootCallId),
+        tool: execution.name,
+        child: isSubagent(execution.agent),
+        isError: result.isError === true,
+    };
+    if (result.isError === true && result.error?.code) {
+        summary.errorCode = String(result.error.code);
+    }
+    return summary;
 }
+//# sourceMappingURL=governance.mjs.map

package/preset/odai/runtime/governance.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.mjs","sourceRoot":"","sources":["../src/governance.mts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,OAAO;IACP,MAAM;IACN,oBAAoB;IACpB,MAAM;IACN,MAAM;IACN,mBAAmB;IACnB,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,UAAU;IACV,OAAO;IACP,YAAY;IACZ,UAAU;IACV,UAAU;CACF,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,0CAA0C,GAAG,MAAM,CAAC,MAAM,CAAC;IACtE,MAAM;IACN,YAAY;IACZ,MAAM;IACN,MAAM;IACN,YAAY;IACZ,WAAW;IACX,mBAAmB;IACnB,UAAU;IACV,aAAa;IACb,YAAY;IACZ,UAAU;IACV,OAAO;IACP,iBAAiB;CACT,CAAC,CAAC;AA2BZ,MAAM,UAAU,UAAU,CAAC,KAAkC;IAC3D,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC;IACtC,OAAO,MAAM,EAAE,MAAM,KAAK,UAAU;WAC/B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAO,GAAqB,EAAE;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS;QAC7B,GAAG,0BAA0B;QAC7B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;IAEtF,OAAO,CAAC,SAAS,EAAE,EAAE;QACnB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAEnD,MAAM,MAAM,GAAG,wDAAwD,SAAS,CAAC,IAAI,8CAA8C,CAAC;QACpI,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe,EAAE,IAAY;IACtD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAkC,EAClC,cAAc,GAAoC,KAAK,EAAE,OAAO,EAAE,MAAM;IAExE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAE7C,IAAI,WAA+B,CAAC;IACpC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,oBAAoB;YAAE,SAAS;QACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,MAAM;IACR,CAAC;IACD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,gCAAgC,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YACzF,IAAI,OAAO,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ;gBAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,IAAI,KAAK,EAAE,IAAI,KAAK,uBAAuB;YAAE,SAAS;QACtD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,UAAU,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAO,GAAgC,EAAE;IAEzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,0CAA0C,CAAC,CAAC;IAC5E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;IACtF,MAAM,aAAa,GAAG,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;QAC/D,CAAC,CAAC,OAAO,CAAC,aAAa;QACvB,CAAC,CAAC,qBAAqB,CAAC;IAE1B,OAAO,CAAC,SAAS,EAAE,EAAE;QACnB,IAAI,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAElC,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,8BAA8B,CAAC;QAC3E,MAAM,MAAM,GAAG,8DAA8D,SAAS,CAAC,IAAI,UAAU,UAAU,sFAAsF,CAAC;QACtM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAwB,EAAE,MAAkB;IAC9E,MAAM,OAAO,GAAsB;QACjC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QACxC,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;KACjC,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/preset/odai/runtime/human-care.d.mts

@@ -0,0 +1,13 @@
+import type { DshAgent, RuntimeTool } from "./runtime-types.mjs";
+export declare const HUMAN_CARE_REFERENCE_PATH = "references/care.md";
+export interface HumanCareToolOptions {
+    contractFor(agent: DshAgent): string;
+    isChild?(agent: DshAgent): boolean;
+}
+export interface HumanCareResult {
+    scope: "non-crisis-care";
+    userChannelOwner: "current-controller" | "controller";
+    contract: string;
+}
+export declare function createHumanCareTool(options: HumanCareToolOptions): RuntimeTool<unknown, HumanCareResult>;
+//# sourceMappingURL=human-care.d.mts.map

package/preset/odai/runtime/human-care.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-care.d.mts","sourceRoot":"","sources":["../src/human-care.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEjE,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAE9D,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC;IACrC,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,iBAAiB,CAAC;IACzB,gBAAgB,EAAE,oBAAoB,GAAG,YAAY,CAAC;IACtD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CA0CxG"}

package/preset/odai/runtime/human-care.mjs

@@ -1,45 +1,48 @@
 export const HUMAN_CARE_REFERENCE_PATH = "references/care.md";
-
-export function createHumanCareTool(options = {}) {
-  if (typeof options.contractFor !== "function") throw new TypeError("createHumanCareTool requires contractFor");
-  return {
-    name: "odai_human_care",
-    description: "Load Odai's non-crisis care and user-controlled interaction-style contract when the current message shows fatigue, anxiety, self-doubt, rumination, shame, fear of mistakes, negativity, or reduced agency. This does not diagnose, score, persist state, or change model routing.",
-    parameters: {
-      type: "object",
-      additionalProperties: false,
-      properties: {},
-    },
-    output: {
-      schema: {
-        type: "object",
-        additionalProperties: false,
-        required: ["scope", "userChannelOwner", "contract"],
-        properties: {
-          scope: { type: "string", enum: ["non-crisis-care"] },
-          userChannelOwner: { type: "string", enum: ["current-controller", "controller"] },
-          contract: { type: "string" },
+export function createHumanCareTool(options) {
+    if (typeof options.contractFor !== "function")
+        throw new TypeError("createHumanCareTool requires contractFor");
+    return {
+        name: "odai_human_care",
+        description: "Load Odai's non-crisis care and user-controlled interaction-style contract when the current message shows fatigue, anxiety, self-doubt, rumination, shame, fear of mistakes, negativity, or reduced agency. This does not diagnose, score, persist state, or change model routing.",
+        parameters: {
+            type: "object",
+            additionalProperties: false,
+            properties: {},
         },
-      },
-      render(_args, value) {
-        return [{
-          type: "text",
-          text: `Non-crisis care contract loaded; the ${value.userChannelOwner} owns the response.\n\n${value.contract}`,
-        }];
-      },
-    },
-    execute(args, execution) {
-      if (args === null || typeof args !== "object" || Array.isArray(args) || Object.keys(args).length > 0) {
-        throw new TypeError("odai_human_care accepts no arguments");
-      }
-      if (!execution.agent) throw new Error("odai_human_care requires an owning agent session");
-      const contract = options.contractFor(execution.agent);
-      if (typeof contract !== "string" || contract.trim() === "") throw new Error("Odai human-care contract is unavailable");
-      return Promise.resolve({
-        scope: "non-crisis-care",
-        userChannelOwner: options.isChild?.(execution.agent) ? "controller" : "current-controller",
-        contract: contract.trim(),
-      });
-    },
-  };
+        output: {
+            schema: {
+                type: "object",
+                additionalProperties: false,
+                required: ["scope", "userChannelOwner", "contract"],
+                properties: {
+                    scope: { type: "string", enum: ["non-crisis-care"] },
+                    userChannelOwner: { type: "string", enum: ["current-controller", "controller"] },
+                    contract: { type: "string" },
+                },
+            },
+            render(_arguments, value) {
+                return [{
+                        type: "text",
+                        text: `Non-crisis care contract loaded; the ${value.userChannelOwner} owns the response.\n\n${value.contract}`,
+                    }];
+            },
+        },
+        execute(arguments_, execution) {
+            if (arguments_ === null || typeof arguments_ !== "object" || Array.isArray(arguments_) || Object.keys(arguments_).length > 0) {
+                throw new TypeError("odai_human_care accepts no arguments");
+            }
+            if (!execution.agent)
+                throw new Error("odai_human_care requires an owning agent session");
+            const contract = options.contractFor(execution.agent);
+            if (typeof contract !== "string" || contract.trim() === "")
+                throw new Error("Odai human-care contract is unavailable");
+            return Promise.resolve({
+                scope: "non-crisis-care",
+                userChannelOwner: options.isChild?.(execution.agent) ? "controller" : "current-controller",
+                contract: contract.trim(),
+            });
+        },
+    };
 }
+//# sourceMappingURL=human-care.mjs.map

package/preset/odai/runtime/human-care.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-care.mjs","sourceRoot":"","sources":["../src/human-care.mts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC;AAa9D,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAC/G,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,oRAAoR;QACjS,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE,EAAE;SACf;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC;gBACnD,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE;oBACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE;oBAChF,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC7B;aACF;YACD,MAAM,CAAC,UAAU,EAAE,KAAK;gBACtB,OAAO,CAAC;wBACN,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wCAAwC,KAAK,CAAC,gBAAgB,0BAA0B,KAAK,CAAC,QAAQ,EAAE;qBAC/G,CAAC,CAAC;YACL,CAAC;SACF;QACD,OAAO,CAAC,UAAU,EAAE,SAAS;YAC3B,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7H,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC1F,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACvH,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,KAAK,EAAE,iBAAiB;gBACxB,gBAAgB,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB;gBAC1F,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}