patchwarden 0.6.4 → 1.1.0

package/dist/test/unit/release-gate.test.js

@@ -0,0 +1,242 @@
+import { describe, it } from "node:test";
+import { strict as assert } from "node:assert";
+import { runReleaseGateCheck, checkPublishedVerified, checkGitHubReleaseVerified, checkCiVerified, computeTokenDigest, } from "../../release/releaseGate.js";
+// ── Mock helpers ───────────────────────────────────────────────────
+/**
+ * Build a mock httpGet that responds based on the URL.
+ * Each responder returns an HttpResponse synchronously (wrapped in a Promise).
+ */
+function mockHttpGet(responder) {
+    return async (url) => responder(url);
+}
+/**
+ * Build a mock httpGet that captures headers (for token-leak assertions).
+ */
+function mockHttpGetCapture(responder, capture) {
+    return async (url, headers) => {
+        capture.headers = { ...(headers || {}) };
+        return responder(url);
+    };
+}
+/**
+ * Build a mock httpGet that always throws (simulates network error).
+ */
+function mockHttpGetError(error) {
+    return async () => {
+        throw error;
+    };
+}
+// ── 1. checkPublishedVerified ──────────────────────────────────────
+describe("checkPublishedVerified", () => {
+    it("version exists → passed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { versions: { "1.0.0": {}, "0.9.0": {} } },
+        }));
+        const result = await checkPublishedVerified("patchwarden", "1.0.0", httpGet);
+        assert.equal(result.status, "passed");
+    });
+    it("version does not exist → failed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { versions: { "0.9.0": {} } },
+        }));
+        const result = await checkPublishedVerified("patchwarden", "9.9.9", httpGet);
+        assert.equal(result.status, "failed");
+        assert.ok(result.reason?.includes("9.9.9"));
+    });
+    it("network error → not_checked", async () => {
+        const httpGet = mockHttpGetError(new Error("connect ECONNREFUSED"));
+        const result = await checkPublishedVerified("patchwarden", "1.0.0", httpGet);
+        assert.equal(result.status, "not_checked");
+        assert.ok(result.reason?.includes("Network error"));
+    });
+    it("package 404 → failed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 404,
+            data: { error: "Not found" },
+        }));
+        const result = await checkPublishedVerified("nonexistent-pkg", "1.0.0", httpGet);
+        assert.equal(result.status, "failed");
+    });
+});
+// ── 2. checkGitHubReleaseVerified ──────────────────────────────────
+describe("checkGitHubReleaseVerified", () => {
+    it("200 → passed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { tag_name: "v1.0.0" },
+        }));
+        const result = await checkGitHubReleaseVerified("user/repo", "v1.0.0", httpGet);
+        assert.equal(result.status, "passed");
+    });
+    it("404 → failed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 404,
+            data: { message: "Not Found" },
+        }));
+        const result = await checkGitHubReleaseVerified("user/repo", "v1.0.0", httpGet);
+        assert.equal(result.status, "failed");
+        assert.ok(result.reason?.includes("v1.0.0"));
+    });
+    it("network error → not_checked", async () => {
+        const httpGet = mockHttpGetError(new Error("connect ETIMEDOUT"));
+        const result = await checkGitHubReleaseVerified("user/repo", "v1.0.0", httpGet);
+        assert.equal(result.status, "not_checked");
+    });
+    it("token is used as Bearer but never appears in result", async () => {
+        const TOKEN = "test-token";
+        process.env.GITHUB_TOKEN = TOKEN;
+        const capture = {};
+        const httpGet = mockHttpGetCapture(() => ({ statusCode: 200, data: { tag_name: "v1.0.0" } }), capture);
+        try {
+            const result = await checkGitHubReleaseVerified("user/repo", "v1.0.0", httpGet);
+            assert.equal(result.status, "passed");
+            // Authorization header was set correctly (token used internally)
+            assert.equal(capture.headers?.["Authorization"], `Bearer ${TOKEN}`);
+            // Raw token must NOT appear anywhere in the serialized result
+            const resultStr = JSON.stringify(result);
+            assert.ok(!resultStr.includes(TOKEN), "raw GITHUB_TOKEN must not leak into the result object");
+            // The token digest is different from the raw token
+            const digest = computeTokenDigest(TOKEN);
+            assert.ok(digest !== TOKEN, "digest must differ from raw token");
+            assert.ok(digest.startsWith("sha256:"));
+        }
+        finally {
+            delete process.env.GITHUB_TOKEN;
+        }
+    });
+});
+// ── 3. checkCiVerified ─────────────────────────────────────────────
+describe("checkCiVerified", () => {
+    it("conclusion=success → passed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { workflow_runs: [{ conclusion: "success" }] },
+        }));
+        const result = await checkCiVerified("user/repo", "main", httpGet);
+        assert.equal(result.status, "passed");
+    });
+    it("conclusion=failure → failed", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { workflow_runs: [{ conclusion: "failure" }] },
+        }));
+        const result = await checkCiVerified("user/repo", "main", httpGet);
+        assert.equal(result.status, "failed");
+    });
+    it("conclusion=null → not_checked", async () => {
+        const httpGet = mockHttpGet(() => ({
+            statusCode: 200,
+            data: { workflow_runs: [{ conclusion: null }] },
+        }));
+        const result = await checkCiVerified("user/repo", "main", httpGet);
+        assert.equal(result.status, "not_checked");
+    });
+    it("network error → not_checked", async () => {
+        const httpGet = mockHttpGetError(new Error("connect ECONNREFUSED"));
+        const result = await checkCiVerified("user/repo", "main", httpGet);
+        assert.equal(result.status, "not_checked");
+    });
+});
+// ── 4. runReleaseGateCheck orchestration ───────────────────────────
+describe("runReleaseGateCheck", () => {
+    it("target=local_ready passed → local_ready=passed, rest not_checked, no blocked_reason", async () => {
+        const deps = {
+            checkLocalReady: () => ({ status: "passed" }),
+        };
+        const result = await runReleaseGateCheck("/fake/repo", "local_ready", {}, deps);
+        assert.equal(result.target_stage, "local_ready");
+        assert.equal(result.stages.local_ready, "passed");
+        assert.equal(result.stages.packed_ready, "not_checked");
+        assert.equal(result.stages.published_verified, "not_checked");
+        assert.equal(result.stages.github_release_verified, "not_checked");
+        assert.equal(result.stages.ci_verified, "not_checked");
+        assert.equal(result.blocked_reason, undefined);
+    });
+    it("local_ready failed → subsequent stages all not_checked, blocked_reason non-empty", async () => {
+        const deps = {
+            checkLocalReady: () => ({ status: "failed", reason: "build exited with code 1" }),
+        };
+        const result = await runReleaseGateCheck("/fake/repo", "ci_verified", {
+            packageName: "patchwarden",
+            version: "1.0.0",
+            githubRepo: "user/repo",
+            branch: "main",
+        }, deps);
+        assert.equal(result.stages.local_ready, "failed");
+        assert.equal(result.stages.packed_ready, "not_checked");
+        assert.equal(result.stages.published_verified, "not_checked");
+        assert.equal(result.stages.github_release_verified, "not_checked");
+        assert.equal(result.stages.ci_verified, "not_checked");
+        assert.ok(result.blocked_reason, "blocked_reason should be non-empty");
+        assert.ok(result.blocked_reason.includes("local_ready"), "blocked_reason should mention the failed stage");
+    });
+    it("full pass-through: all stages passed up to ci_verified", async () => {
+        const deps = {
+            checkLocalReady: () => ({ status: "passed" }),
+            checkPackedReady: () => ({ status: "passed", manifestPath: "/fake/release-artifact-manifest.json" }),
+            checkPublishedVerified: async () => ({ status: "passed" }),
+            checkGitHubReleaseVerified: async () => ({ status: "passed" }),
+            checkCiVerified: async () => ({ status: "passed" }),
+        };
+        const result = await runReleaseGateCheck("/fake/repo", "ci_verified", {
+            packageName: "patchwarden",
+            version: "1.0.0",
+            githubRepo: "user/repo",
+            branch: "main",
+        }, deps);
+        assert.equal(result.stages.local_ready, "passed");
+        assert.equal(result.stages.packed_ready, "passed");
+        assert.equal(result.stages.published_verified, "passed");
+        assert.equal(result.stages.github_release_verified, "passed");
+        assert.equal(result.stages.ci_verified, "passed");
+        assert.equal(result.blocked_reason, undefined);
+    });
+    it("missing options for a required stage → failed with clear reason", async () => {
+        const deps = {
+            checkLocalReady: () => ({ status: "passed" }),
+            checkPackedReady: () => ({ status: "passed" }),
+        };
+        // published_verified needs packageName + version, neither provided
+        const result = await runReleaseGateCheck("/fake/repo", "published_verified", {}, deps);
+        assert.equal(result.stages.local_ready, "passed");
+        assert.equal(result.stages.packed_ready, "passed");
+        assert.equal(result.stages.published_verified, "failed");
+        assert.ok(result.blocked_reason?.includes("published_verified"));
+    });
+});
+// ── 5. Function name spelling (Verified, not Verfied) ─────────────
+describe("function name spelling", () => {
+    it("checkPublishedVerified is a function (not Verfied)", () => {
+        assert.equal(typeof checkPublishedVerified, "function");
+    });
+    it("checkGitHubReleaseVerified is a function", () => {
+        assert.equal(typeof checkGitHubReleaseVerified, "function");
+    });
+    it("checkCiVerified is a function", () => {
+        assert.equal(typeof checkCiVerified, "function");
+    });
+    it("runReleaseGateCheck is a function", () => {
+        assert.equal(typeof runReleaseGateCheck, "function");
+    });
+});
+// ── 6. computeTokenDigest ──────────────────────────────────────────
+describe("computeTokenDigest", () => {
+    it("returns sha256: prefix with hex digest", () => {
+        const digest = computeTokenDigest("test-token");
+        assert.ok(digest.startsWith("sha256:"));
+        // sha256 hex is 64 chars + "sha256:" prefix = 71 chars
+        assert.equal(digest.length, 71);
+    });
+    it("does not contain the raw token", () => {
+        const TOKEN = "test-token";
+        const digest = computeTokenDigest(TOKEN);
+        assert.ok(!digest.includes(TOKEN), "digest must not contain the raw token");
+    });
+    it("is deterministic for the same input", () => {
+        const d1 = computeTokenDigest("abc");
+        const d2 = computeTokenDigest("abc");
+        assert.equal(d1, d2);
+    });
+});

package/dist/test/unit/safe-views.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/safe-views.test.js

@@ -0,0 +1,171 @@
+import { describe, it, beforeEach, afterEach } from "node:test";
+import { strict as assert } from "node:assert";
+import { mkdtempSync, rmSync, mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { reloadConfig } from "../../config.js";
+import { safeDirectSummary, safeAuditDirectSession, safeDiffSummary, safeResult, safeTestSummary } from "../../tools/safeViews.js";
+let tempDir;
+let prevConfigEnv;
+function writeConfig() {
+    const configPath = join(tempDir, "patchwarden.config.json");
+    writeFileSync(configPath, JSON.stringify({
+        workspaceRoot: tempDir,
+        tasksDir: ".patchwarden/tasks",
+        plansDir: ".patchwarden/plans",
+        assessmentsDir: ".patchwarden/assessments",
+        directSessionsDir: ".patchwarden/direct-sessions",
+        agents: {},
+        allowedTestCommands: ["npm test"],
+        directAllowedCommands: ["npm test"],
+        enableDirectProfile: true,
+    }), "utf-8");
+    prevConfigEnv = process.env.PATCHWARDEN_CONFIG;
+    process.env.PATCHWARDEN_CONFIG = configPath;
+    reloadConfig();
+}
+describe("safeViews", () => {
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), "pw-safeviews-"));
+        writeConfig();
+    });
+    afterEach(() => {
+        if (prevConfigEnv === undefined)
+            delete process.env.PATCHWARDEN_CONFIG;
+        else
+            process.env.PATCHWARDEN_CONFIG = prevConfigEnv;
+        reloadConfig();
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    it("returns bounded task summaries without log or diff content", () => {
+        const taskId = "task-safe-001";
+        const taskDir = join(tempDir, ".patchwarden", "tasks", taskId);
+        mkdirSync(taskDir, { recursive: true });
+        writeFileSync(join(taskDir, "status.json"), JSON.stringify({
+            task_id: taskId,
+            status: "done_by_agent",
+            phase: "done_by_agent",
+            repo_path: "repo",
+            resolved_repo_path: join(tempDir, "repo"),
+            verify_status: "passed",
+        }), "utf-8");
+        writeFileSync(join(taskDir, "result.json"), JSON.stringify({
+            task_id: taskId,
+            status: "done_by_agent",
+            summary: "Finished safely",
+            changed_files: [{ path: "src/index.ts", change: "modified" }],
+            verify_status: "passed",
+            warnings: [],
+        }), "utf-8");
+        writeFileSync(join(taskDir, "verify.json"), JSON.stringify({
+            status: "passed",
+            commands: [{ command: "npm test", status: "passed", exit_code: 0, stdout_tail: "SECRET_STDOUT", stderr_tail: "SECRET_STDERR" }],
+        }), "utf-8");
+        writeFileSync(join(taskDir, "changed-files.json"), JSON.stringify({
+            changed_files: [{ path: "src/index.ts", change: "modified", tracked: true, ignored: false, kind: "source" }],
+            additions: 1,
+            deletions: 0,
+            diff_available: true,
+            diff_truncated: false,
+            patch_mode: "textual",
+            artifact_hygiene: { counts: { source_changes: 1 }, source_changes: [], tracked_build_artifacts: [], ignored_untracked_artifacts: [], runtime_generated_files: [], suspicious_changes: [] },
+        }), "utf-8");
+        writeFileSync(join(taskDir, "git.diff"), "SECRET_DIFF", "utf-8");
+        writeFileSync(join(taskDir, "test.log"), "SECRET_TEST_LOG", "utf-8");
+        const payload = JSON.stringify({
+            result: safeResult(taskId),
+            tests: safeTestSummary(taskId),
+            diff: safeDiffSummary(taskId),
+        });
+        assert.ok(!payload.includes("SECRET_STDOUT"));
+        assert.ok(!payload.includes("SECRET_STDERR"));
+        assert.ok(!payload.includes("SECRET_DIFF"));
+        assert.ok(!payload.includes("SECRET_TEST_LOG"));
+        assert.ok(payload.includes("src/index.ts"));
+    });
+    it("treats corrupted safe-view JSON artifacts as empty summaries", () => {
+        const taskId = "task-safe-corrupt";
+        const taskDir = join(tempDir, ".patchwarden", "tasks", taskId);
+        mkdirSync(taskDir, { recursive: true });
+        writeFileSync(join(taskDir, "status.json"), JSON.stringify({
+            task_id: taskId,
+            status: "done_by_agent",
+            phase: "done_by_agent",
+            repo_path: "repo",
+            resolved_repo_path: join(tempDir, "repo"),
+            verify_status: "passed",
+        }), "utf-8");
+        writeFileSync(join(taskDir, "result.json"), JSON.stringify({
+            task_id: taskId,
+            status: "done_by_agent",
+            summary: "Finished safely",
+            changed_files: [],
+            verify_status: "passed",
+            warnings: [],
+        }), "utf-8");
+        writeFileSync(join(taskDir, "verify.json"), "\uFEFF{not json", "utf-8");
+        writeFileSync(join(taskDir, "changed-files.json"), "{not json", "utf-8");
+        const tests = safeTestSummary(taskId);
+        const diff = safeDiffSummary(taskId);
+        assert.equal(tests.command_count, 0);
+        assert.equal(diff.changed_files_total, 0);
+    });
+    it("returns Direct safe summaries without verification tails", () => {
+        const sessionId = "direct-safe-001";
+        const sessionDir = join(tempDir, ".patchwarden", "direct-sessions", sessionId);
+        mkdirSync(sessionDir, { recursive: true });
+        const session = {
+            session_id: sessionId,
+            title: "safe direct",
+            repo_path: "repo",
+            resolved_repo_path: join(tempDir, "repo"),
+            created_at: new Date().toISOString(),
+            expires_at: new Date(Date.now() + 60_000).toISOString(),
+            server_version: "1.0.0",
+            schema_epoch: "test",
+            tool_manifest_sha256: "x".repeat(64),
+            workspace_snapshot_before: { head: null, status: "", files: {}, workspace_dirty: false, warnings: [], is_git: false },
+            workspace_fingerprint_before: "fingerprint",
+            allowed_commands: ["npm test"],
+            operations: [],
+            verification_runs: [{
+                    command: "npm test",
+                    exit_code: 0,
+                    passed: true,
+                    timed_out: false,
+                    stdout_tail: "SECRET_DIRECT_STDOUT",
+                    stderr_tail: "SECRET_DIRECT_STDERR",
+                    started_at: new Date().toISOString(),
+                    finished_at: new Date().toISOString(),
+                    log_path: join(sessionDir, "verification.log"),
+                }],
+            finalized: true,
+            finalized_at: new Date().toISOString(),
+            audited: false,
+            change_artifacts: {
+                changed_files: [],
+                diff: "SECRET_DIRECT_DIFF",
+                diff_available: true,
+                diff_truncated: false,
+                diff_size_bytes: 18,
+                additions: 0,
+                deletions: 0,
+                file_stats: [],
+                workspace_dirty_before: false,
+                workspace_dirty_after: false,
+                patch_mode: "no_changes",
+                unavailable_reason: null,
+                artifact_hygiene: { counts: { source_changes: 0, tracked_build_artifacts: 0, ignored_untracked_artifacts: 0, runtime_generated_files: 0, suspicious_changes: 0 }, source_changes: [], tracked_build_artifacts: [], ignored_untracked_artifacts: [], runtime_generated_files: [], suspicious_changes: [] },
+            },
+        };
+        writeFileSync(join(sessionDir, "session.json"), JSON.stringify(session, null, 2), "utf-8");
+        const payload = JSON.stringify({
+            summary: safeDirectSummary(sessionId),
+            audit: safeAuditDirectSession(sessionId),
+        });
+        assert.ok(!payload.includes("SECRET_DIRECT_STDOUT"));
+        assert.ok(!payload.includes("SECRET_DIRECT_STDERR"));
+        assert.ok(!payload.includes("SECRET_DIRECT_DIFF"));
+        assert.ok(payload.includes("npm test"));
+    });
+});

package/dist/test/unit/schema-drift-check.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/schema-drift-check.test.js

@@ -0,0 +1,175 @@
+import { describe, it } from "node:test";
+import { strict as assert } from "node:assert";
+import { computeSchemaDigest } from "../../tools/toolRegistry.js";
+import { CHATGPT_CORE_TOOL_NAMES } from "../../tools/toolCatalog.js";
+import { checkRegistrySchemaDigest, checkChatgptCoreManifestStable, checkNewToolsProfileAppend, runAllSchemaDriftChecks, } from "../../tools/schemaDriftCheck.js";
+// ── 测试夹具构造工具 ─────────────────────────────────────────────
+const SAMPLE_SCHEMA = {
+    type: "object",
+    properties: {
+        task_id: { type: "string", description: "Task ID" },
+    },
+    required: ["task_id"],
+};
+const OTHER_SCHEMA = {
+    type: "object",
+    properties: {
+        plan_id: { type: "string", description: "Plan ID" },
+    },
+    required: ["plan_id"],
+};
+/** 构造一个满足 PatchWardenToolMeta 接口的元数据对象。 */
+function makeMeta(opts) {
+    const schema = opts.inputSchema ?? SAMPLE_SCHEMA;
+    return {
+        name: opts.name,
+        title: `Tool ${opts.name}`,
+        summary: `summary for ${opts.name}`,
+        description: `description for ${opts.name}`,
+        profiles: opts.profiles ?? ["full"],
+        modes: ["diagnostic"],
+        tags: [],
+        aliases: [],
+        risk: "readonly",
+        requiresConfirmation: false,
+        inputSchemaDigest: opts.inputSchemaDigest ?? computeSchemaDigest(schema),
+    };
+}
+/** 构造 toolDefs Map。 */
+function makeToolDefs(entries) {
+    const map = new Map();
+    for (const e of entries) {
+        map.set(e.name, {
+            inputSchema: e.inputSchema ?? SAMPLE_SCHEMA,
+        });
+    }
+    return map;
+}
+/** 构造包含全部 21 个 chatgpt_core 工具（顺序一致）的 toolDefs Map。 */
+function makeCoreToolDefs() {
+    return makeToolDefs([...CHATGPT_CORE_TOOL_NAMES].map((name) => ({ name })));
+}
+/** 构造一个 registry：所有工具都属于 chatgpt_core profile。 */
+function makeCoreRegistry(count) {
+    const names = [...CHATGPT_CORE_TOOL_NAMES].slice(0, count);
+    return names.map((name) => makeMeta({ name, profiles: ["chatgpt_core"] }));
+}
+// ── 1. checkRegistrySchemaDigest ─────────────────────────────────
+describe("checkRegistrySchemaDigest", () => {
+    it("digest 一致时 ok=true，warnings 为空", () => {
+        const schema = { type: "object", properties: { a: { type: "string" } } };
+        const registry = [makeMeta({ name: "tool_a", inputSchema: schema })];
+        const toolDefs = makeToolDefs([{ name: "tool_a", inputSchema: schema }]);
+        const result = checkRegistrySchemaDigest(registry, toolDefs);
+        assert.equal(result.ok, true);
+        assert.deepEqual(result.warnings, []);
+    });
+    it("digest 不一致时 ok=false，warnings 包含工具名和两个 digest", () => {
+        const registrySchema = SAMPLE_SCHEMA;
+        const actualSchema = OTHER_SCHEMA;
+        // registry 记录的是 registrySchema 的 digest，但实际 toolDef 用的是 actualSchema
+        const registry = [
+            makeMeta({ name: "tool_drift", inputSchema: registrySchema }),
+        ];
+        const toolDefs = makeToolDefs([{ name: "tool_drift", inputSchema: actualSchema }]);
+        const result = checkRegistrySchemaDigest(registry, toolDefs);
+        assert.equal(result.ok, false);
+        assert.equal(result.warnings.length, 1);
+        const warning = result.warnings[0];
+        const expectedRegistryDigest = computeSchemaDigest(registrySchema);
+        const expectedActualDigest = computeSchemaDigest(actualSchema);
+        assert.ok(warning.includes("tool_drift"), "warning 应包含工具名");
+        assert.ok(warning.includes(expectedRegistryDigest), "warning 应包含 registry digest");
+        assert.ok(warning.includes(expectedActualDigest), "warning 应包含 actual digest");
+    });
+    it("toolDefs 中找不到工具时跳过（不报 drift）", () => {
+        const registry = [makeMeta({ name: "missing_tool" })];
+        const toolDefs = makeToolDefs([]); // 空映射
+        const result = checkRegistrySchemaDigest(registry, toolDefs);
+        assert.equal(result.ok, true);
+        assert.deepEqual(result.warnings, []);
+    });
+});
+// ── 2. checkChatgptCoreManifestStable ────────────────────────────
+describe("checkChatgptCoreManifestStable", () => {
+    it("21 工具全部存在时 ok=true", () => {
+        const toolDefs = makeCoreToolDefs();
+        const result = checkChatgptCoreManifestStable(toolDefs);
+        assert.equal(result.ok, true);
+        assert.deepEqual(result.warnings, []);
+    });
+    it("缺少工具时 ok=false", () => {
+        // 移除最后一个工具，使 chatgpt_core 工具数为 20
+        const names = [...CHATGPT_CORE_TOOL_NAMES].slice(0, 20);
+        const toolDefs = makeToolDefs(names.map((name) => ({ name })));
+        const result = checkChatgptCoreManifestStable(toolDefs);
+        assert.equal(result.ok, false);
+        assert.equal(result.warnings.length, 1);
+        assert.ok(result.warnings[0].includes("missing tools"), "warning 应包含 missing tools");
+        assert.ok(result.warnings[0].includes(CHATGPT_CORE_TOOL_NAMES[20]), "warning 应包含缺失的工具名");
+    });
+});
+// ── 3. checkNewToolsProfileAppend ────────────────────────────────
+describe("checkNewToolsProfileAppend", () => {
+    it("chatgpt_core 21 工具时 ok=true", () => {
+        const registry = makeCoreRegistry(21);
+        const result = checkNewToolsProfileAppend(registry);
+        assert.equal(result.ok, true);
+        assert.deepEqual(result.warnings, []);
+    });
+    it("chatgpt_core 工具数不为 21 时 ok=false", () => {
+        // 22 个 chatgpt_core 工具：21 个标准工具 + 1 个重复名（模拟新工具追加）
+        const registry = makeCoreRegistry(21);
+        registry.push(makeMeta({ name: "extra_tool", profiles: ["chatgpt_core"] }));
+        const result = checkNewToolsProfileAppend(registry);
+        assert.equal(result.ok, false);
+        assert.equal(result.warnings.length, 1);
+        assert.ok(result.warnings[0].includes("expected 21"), "warning 应包含预期数量 21");
+        assert.ok(result.warnings[0].includes("got 22"), "warning 应包含实际数量 22");
+    });
+});
+// ── 4. runAllSchemaDriftChecks ───────────────────────────────────
+describe("runAllSchemaDriftChecks", () => {
+    it("无 drift 时 ok=true", () => {
+        // registry 与 toolDefs 完全一致，且 chatgpt_core 工具数为 21
+        const registry = makeCoreRegistry(21);
+        const toolDefs = makeCoreToolDefs();
+        const result = runAllSchemaDriftChecks(registry, toolDefs);
+        assert.equal(result.ok, true);
+        assert.deepEqual(result.warnings, []);
+    });
+    it("有 drift 时 ok=false，warnings 合并正确", () => {
+        // 构造同时触发三个检查的 drift：
+        // - check 1: 一个工具 digest 不一致
+        // - check 2: toolDefs 缺少一个 chatgpt_core 工具（数量 16）
+        // - check 3: registry 有 22 个 chatgpt_core 工具
+        const driftedSchema = OTHER_SCHEMA;
+        const registry = makeCoreRegistry(21);
+        // 第一个工具的 digest 指向 SAMPLE_SCHEMA，但 toolDefs 中该工具用 driftedSchema
+        registry[0] = makeMeta({
+            name: CHATGPT_CORE_TOOL_NAMES[0],
+            inputSchema: SAMPLE_SCHEMA,
+            profiles: ["chatgpt_core"],
+        });
+        // 追加一个额外的 chatgpt_core 工具，使 profile 工具数变为 22
+        registry.push(makeMeta({ name: "extra_tool", profiles: ["chatgpt_core"] }));
+        // toolDefs：第一个工具用 driftedSchema（触发 check 1），且移除最后一个核心工具（触发 check 2）
+        const coreNames = [...CHATGPT_CORE_TOOL_NAMES];
+        const toolDefEntries = coreNames.slice(0, 20).map((name) => ({
+            name,
+            inputSchema: name === CHATGPT_CORE_TOOL_NAMES[0] ? driftedSchema : SAMPLE_SCHEMA,
+        }));
+        const toolDefs = makeToolDefs(toolDefEntries);
+        const result = runAllSchemaDriftChecks(registry, toolDefs);
+        assert.equal(result.ok, false);
+        // 至少包含来自三个检查的警告
+        assert.ok(result.warnings.length >= 3, `应有至少 3 条警告，实际 ${result.warnings.length}`);
+        // 验证三类警告都存在
+        const hasDigestDrift = result.warnings.some((w) => w.startsWith("Schema drift for tool"));
+        const hasManifestMissing = result.warnings.some((w) => w.includes("missing tools"));
+        const hasProfileCount = result.warnings.some((w) => w.includes("profile tool count changed"));
+        assert.ok(hasDigestDrift, "应包含 registry digest drift 警告");
+        assert.ok(hasManifestMissing, "应包含 manifest 缺失工具警告");
+        assert.ok(hasProfileCount, "应包含 profile 数量变化警告");
+    });
+});

package/dist/test/unit/subgoal-sync.test.d.ts

@@ -0,0 +1 @@
+export {};