patchwarden 0.6.4 → 1.1.0

package/dist/tools/schemaDriftCheck.js

@@ -0,0 +1,80 @@
+/**
+ * v0.9.0: Schema 漂移检测模块。
+ *
+ * 检测 registry 元数据与实际工具 schema 是否漂移，
+ * 并聚合为可被 doctor 自检消费的 SchemaDriftResult。
+ *
+ * 本模块只做检测和报告，不做运行时阻断。
+ */
+import { computeSchemaDigest } from "./toolRegistry.js";
+import { CHATGPT_CORE_TOOL_NAMES } from "./toolCatalog.js";
+/** chatgpt_core profile 的预期工具数（来自 CHATGPT_CORE_TOOL_NAMES）。 */
+const EXPECTED_CORE_COUNT = CHATGPT_CORE_TOOL_NAMES.length;
+// ── 检查 1: registry schema digest 一致性 ─────────────────────────
+/**
+ * 检查 registry 中记录的 inputSchemaDigest 与实际 toolDef 的 inputSchema digest 是否一致。
+ * toolDefs 中找不到的工具会被跳过（不报 drift）。
+ */
+export function checkRegistrySchemaDigest(registry, toolDefs) {
+    const warnings = [];
+    for (const meta of registry) {
+        const toolDef = toolDefs.get(meta.name);
+        if (!toolDef)
+            continue; // toolDefs 中找不到该工具时跳过（不报 drift）
+        const actualDigest = computeSchemaDigest(toolDef.inputSchema);
+        if (actualDigest !== meta.inputSchemaDigest) {
+            warnings.push(`Schema drift for tool '${meta.name}': registry digest ${meta.inputSchemaDigest} != actual digest ${actualDigest}`);
+        }
+    }
+    return { ok: warnings.length === 0, warnings };
+}
+// ── 检查 2: chatgpt_core manifest 稳定性 ──────────────────────────
+/**
+ * 校验 chatgpt_core profile 的工具 manifest 是否稳定。
+ *
+ * toolCatalog.ts 未导出独立的 manifest hash 计算函数（stableJson 为私有），
+ * 因此采用 fallback 方案：校验 CHATGPT_CORE_TOOL_NAMES 中的工具名
+ * 全部存在于 toolDefs 中（集合比较，不比较顺序——Map 迭代顺序取决于构造
+ * 方式，不一定与 chatgpt_core profile 顺序一致）。
+ *
+ * 真正的顺序稳定性由 CHATGPT_CORE_TOOL_NAMES 常量本身保证（顺序固定），
+ * 如果常量被修改，这里的名称集合比较也会检测到变化。
+ */
+export function checkChatgptCoreManifestStable(toolDefs) {
+    const warnings = [];
+    const expected = [...CHATGPT_CORE_TOOL_NAMES];
+    // 检查 CHATGPT_CORE_TOOL_NAMES 中的每个工具是否都存在于 toolDefs
+    const missing = expected.filter((name) => !toolDefs.has(name));
+    if (missing.length > 0) {
+        warnings.push(`chatgpt_core manifest has missing tools: ${missing.join(", ")} (expected ${EXPECTED_CORE_COUNT}, got ${EXPECTED_CORE_COUNT - missing.length})`);
+    }
+    return { ok: warnings.length === 0, warnings };
+}
+// ── 检查 3: chatgpt_core profile 工具数未变 ───────────────────────
+/**
+ * 校验 chatgpt_core profile 的工具数仍与 CHATGPT_CORE_TOOL_NAMES 一致。
+ * 用于检测是否有新工具被意外追加到 chatgpt_core profile。
+ */
+export function checkNewToolsProfileAppend(registry) {
+    const warnings = [];
+    const coreCount = registry.filter((t) => t.profiles.includes("chatgpt_core")).length;
+    if (coreCount !== EXPECTED_CORE_COUNT) {
+        warnings.push(`chatgpt_core profile tool count changed: expected ${EXPECTED_CORE_COUNT}, got ${coreCount}`);
+    }
+    return { ok: warnings.length === 0, warnings };
+}
+// ── 聚合检查 ──────────────────────────────────────────────────────
+/**
+ * 聚合执行所有 schema drift 检查，合并 warnings。
+ * ok = warnings.length === 0
+ */
+export function runAllSchemaDriftChecks(registry, toolDefs) {
+    const warnings = [];
+    const r1 = checkRegistrySchemaDigest(registry, toolDefs);
+    warnings.push(...r1.warnings);
+    const r2 = checkChatgptCoreManifestStable(toolDefs);
+    warnings.push(...r2.warnings);
+    const r3 = checkNewToolsProfileAppend(registry);
+    warnings.push(...r3.warnings);
+    return { ok: warnings.length === 0, warnings };
+}

package/dist/tools/toolCatalog.d.ts

@@ -1,4 +1,4 @@
-export type ToolProfile = "full" | "chatgpt_core" | "chatgpt_direct";
+export type ToolProfile = "full" | "chatgpt_core" | "chatgpt_direct" | "chatgpt_search";
 export interface CatalogTool {
     name: string;
     description: string;
@@ -12,8 +12,9 @@ export interface ToolCatalogSnapshot {
     tool_names: string[];
     tool_manifest_sha256: string;
 }
-export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status"];
-export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "finalize_direct_session", "audit_session", "sync_file"];
+export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status", "safe_result", "safe_audit", "safe_test_summary", "safe_diff_summary"];
+export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "finalize_direct_session", "audit_session", "safe_direct_summary", "safe_finalize_direct_session", "safe_audit_direct_session", "sync_file"];
+export declare const CHATGPT_SEARCH_TOOL_NAMES: readonly ["health_check", "discover_tools", "explain_tool", "invoke_discovered_tool", "safe_status"];
 export declare function resolveToolProfile(configProfile?: string): ToolProfile;
 export declare function selectToolsForProfile<T extends CatalogTool>(tools: T[], profile: ToolProfile, enableDirectProfile?: boolean): T[];
 export declare function buildToolCatalogSnapshot(tools: CatalogTool[], profile: ToolProfile): ToolCatalogSnapshot;

package/dist/tools/toolCatalog.js

@@ -18,6 +18,10 @@ export const CHATGPT_CORE_TOOL_NAMES = [
     "cancel_task",
     "audit_task",
     "safe_status",
+    "safe_result",
+    "safe_audit",
+    "safe_test_summary",
+    "safe_diff_summary",
 ];
 export const CHATGPT_DIRECT_TOOL_NAMES = [
     "health_check",
@@ -29,13 +33,23 @@ export const CHATGPT_DIRECT_TOOL_NAMES = [
     "run_verification",
     "finalize_direct_session",
     "audit_session",
+    "safe_direct_summary",
+    "safe_finalize_direct_session",
+    "safe_audit_direct_session",
     "sync_file",
 ];
+export const CHATGPT_SEARCH_TOOL_NAMES = [
+    "health_check",
+    "discover_tools",
+    "explain_tool",
+    "invoke_discovered_tool",
+    "safe_status",
+];
 let lastSnapshot = null;
 export function resolveToolProfile(configProfile) {
     const raw = (process.env.PATCHWARDEN_TOOL_PROFILE || configProfile || "full").trim();
-    if (raw !== "full" && raw !== "chatgpt_core" && raw !== "chatgpt_direct") {
-        throw new Error(`Invalid tool profile "${raw}". Expected "full", "chatgpt_core", or "chatgpt_direct".`);
+    if (raw !== "full" && raw !== "chatgpt_core" && raw !== "chatgpt_direct" && raw !== "chatgpt_search") {
+        throw new Error(`Invalid tool profile "${raw}". Expected "full", "chatgpt_core", "chatgpt_direct", or "chatgpt_search".`);
     }
     return raw;
 }
@@ -51,18 +65,26 @@ export function selectToolsForProfile(tools, profile, enableDirectProfile) {
             return tool;
         });
     }
-    // chatgpt_direct
-    if (!enableDirectProfile) {
-        // Degraded mode: only expose health_check for diagnostics
-        const tool = byName.get("health_check");
-        if (!tool)
-            throw new Error(`chatgpt_direct degraded mode requires missing tool "health_check".`);
-        return [tool];
+    if (profile === "chatgpt_direct") {
+        if (!enableDirectProfile) {
+            // Degraded mode: only expose health_check for diagnostics
+            const tool = byName.get("health_check");
+            if (!tool)
+                throw new Error(`chatgpt_direct degraded mode requires missing tool "health_check".`);
+            return [tool];
+        }
+        return CHATGPT_DIRECT_TOOL_NAMES.map((name) => {
+            const tool = byName.get(name);
+            if (!tool)
+                throw new Error(`chatgpt_direct tool profile requires missing tool "${name}".`);
+            return tool;
+        });
     }
-    return CHATGPT_DIRECT_TOOL_NAMES.map((name) => {
+    // chatgpt_search: compact profile, 5 tools all required, no degraded mode
+    return CHATGPT_SEARCH_TOOL_NAMES.map((name) => {
         const tool = byName.get(name);
         if (!tool)
-            throw new Error(`chatgpt_direct tool profile requires missing tool "${name}".`);
+            throw new Error(`chatgpt_search tool profile requires missing tool "${name}".`);
         return tool;
     });
 }

package/dist/tools/toolRegistry.d.ts

@@ -0,0 +1,61 @@
+/**
+ * v0.7.1: 统一工具注册表 — SafeToolSearch 只读发现层的基础。
+ *
+ * 为每个 MCP 工具补全元数据：风险等级、模式、标签、别名、中文意图词。
+ * schema digest 使用稳定字段顺序的 canonical JSON → sha256 计算，
+ * 用于检测工具 schema 漂移、release check 校验、discover_tools 返回。
+ */
+import type { ToolProfile } from "./toolCatalog.js";
+import type { ToolDef } from "./registry.js";
+export type ToolRisk = "readonly" | "workspace_read_sensitive" | "workspace_write" | "command" | "release" | "credential_sensitive";
+export declare const TOOL_RISK_RANK: Record<ToolRisk, number>;
+export type ToolMode = "delegate" | "direct" | "audit" | "release" | "diagnostic";
+export interface PatchWardenToolMeta {
+    name: string;
+    title: string;
+    summary: string;
+    description: string;
+    profiles: ToolProfile[];
+    modes: ToolMode[];
+    tags: string[];
+    aliases: string[];
+    risk: ToolRisk;
+    requiresConfirmation: boolean;
+    /** sha256 of canonical-JSON(inputSchema)，用于检测 schema 漂移 */
+    inputSchemaDigest: string;
+    relatedTools?: string[];
+    examples?: string[];
+}
+export declare const INTENT_TERMS: Record<string, string[]>;
+interface StaticToolMeta {
+    title: string;
+    summary: string;
+    profiles: ToolProfile[];
+    modes: ToolMode[];
+    tags: string[];
+    aliases: string[];
+    risk: ToolRisk;
+    requiresConfirmation: boolean;
+    relatedTools?: string[];
+    examples?: string[];
+}
+/**
+ * 稳定 JSON 序列化：按字段名排序，避免 key 顺序导致 digest 漂移。
+ */
+export declare function stableJsonStringify(value: unknown): string;
+/**
+ * 计算 inputSchema 的 sha256 digest。
+ * 返回格式："sha256:<hex>"
+ */
+export declare function computeSchemaDigest(inputSchema: unknown): string;
+/**
+ * 从 ToolDef[] 构建带元数据的完整工具注册表。
+ * 静态元数据来自 STATIC_TOOL_META，schema digest 动态计算。
+ * 未在 STATIC_TOOL_META 中注册的工具会被跳过（不报错，保持前向兼容）。
+ */
+export declare function buildToolRegistry(tools: ToolDef[]): PatchWardenToolMeta[];
+/**
+ * 获取单个工具的元数据（不含 schema digest，digest 需从 registry 获取）。
+ */
+export declare function getStaticToolMeta(name: string): StaticToolMeta | undefined;
+export {};