patchwarden 0.6.4 → 1.5.0

package/dist/tools/toolRegistry.js

@@ -0,0 +1,834 @@
+/**
+ * v0.7.1: 统一工具注册表 — SafeToolSearch 只读发现层的基础。
+ *
+ * 为每个 MCP 工具补全元数据：风险等级、模式、标签、别名、中文意图词。
+ * schema digest 使用稳定字段顺序的 canonical JSON → sha256 计算，
+ * 用于检测工具 schema 漂移、release check 校验、discover_tools 返回。
+ */
+import { createHash } from "node:crypto";
+export const TOOL_RISK_RANK = {
+    readonly: 0,
+    workspace_read_sensitive: 1,
+    workspace_write: 2,
+    command: 3,
+    release: 4,
+    credential_sensitive: 5,
+};
+// ── 中文意图映射 ──────────────────────────────────────────────────
+export const INTENT_TERMS = {
+    "验收": ["status", "result", "diff", "test", "artifact", "audit", "verify", "verification"],
+    "改文件": ["read_file", "sync_file", "apply_patch", "workspace_write", "patch", "write"],
+    "发布": ["release", "manifest", "pack", "changelog", "tag", "publish"],
+    "安卓": ["android", "gradle", "sdk", "diagnostic"],
+    "状态": ["safe_status", "list_tasks", "task", "status", "health"],
+    "差异": ["diff", "git", "changes", "patch"],
+    "卡住": ["diagnose_task", "reconcile_tasks", "stale", "running", "heartbeat", "stuck"],
+    "旧任务": ["diagnose_task", "reconcile_tasks", "orphaned", "stale", "old"],
+    "搜索": ["search", "discover", "find", "list", "workspace"],
+    "计划": ["plan", "save_plan", "create_task", "goal"],
+    "等待": ["wait", "wait_for_task", "progress"],
+    "取消": ["cancel", "kill", "stop", "terminate"],
+    "重试": ["retry", "restart", "rerun"],
+    "工具": ["tool", "discover", "explain", "registry", "search"],
+    "诊断": ["diagnose", "health", "doctor", "diagnostic", "status"],
+    "会话": ["session", "direct", "create_direct_session", "finalize"],
+    "审计": ["audit", "audit_task", "audit_session", "verify"],
+    "读取": ["read", "read_workspace_file", "get", "list"],
+    "创建": ["create", "create_task", "create_direct_session", "save"],
+    "查看": ["list", "get", "read", "status", "summary"],
+    "清理": ["reconcile", "kill", "cancel", "cleanup"],
+};
+const STATIC_TOOL_META = {
+    // ── readonly ──────────────────────────────────────────────────
+    health_check: {
+        title: "Health Check",
+        summary: "检查 PatchWarden 服务健康状态、watcher、MCP 就绪情况",
+        profiles: ["full", "chatgpt_core", "chatgpt_direct"],
+        modes: ["diagnostic"],
+        tags: ["health", "status", "diagnostic", "ready", "watcher"],
+        aliases: ["health", "status", "ready", "ping"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["safe_status", "list_agents"],
+    },
+    list_agents: {
+        title: "List Agents",
+        summary: "列出已配置的本地 agent 及其可用性",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["agent", "list", "config", "codex", "opencode"],
+        aliases: ["agents", "list_agent"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["health_check", "create_task"],
+    },
+    list_workspace: {
+        title: "List Workspace",
+        summary: "列出工作区内的文件和目录",
+        profiles: ["full", "chatgpt_core", "chatgpt_direct"],
+        modes: ["delegate", "direct"],
+        tags: ["workspace", "list", "files", "directory"],
+        aliases: ["ls", "files", "list_files"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["read_workspace_file", "search_workspace"],
+    },
+    list_tasks: {
+        title: "List Tasks",
+        summary: "列出任务列表，可按仓库过滤、只看活跃任务",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["task", "list", "status", "running", "pending"],
+        aliases: ["tasks", "list_task"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_status", "safe_status", "get_task_summary"],
+    },
+    get_task_status: {
+        title: "Get Task Status",
+        summary: "获取任务当前状态（pending/running/done/failed 等）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["task", "status", "state"],
+        aliases: ["task_status", "status"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["safe_status", "list_tasks", "get_task_summary"],
+    },
+    get_diff: {
+        title: "Get Diff",
+        summary: "获取任务的 git diff 内容",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["diff", "git", "changes", "patch"],
+        aliases: ["diff", "git_diff"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result", "get_test_log", "get_task_summary"],
+    },
+    get_result: {
+        title: "Get Result",
+        summary: "获取任务的 result.md 内容（自动脱敏）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["result", "output", "summary", "markdown"],
+        aliases: ["result", "result_md"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result_json", "get_diff", "get_test_log"],
+    },
+    get_result_json: {
+        title: "Get Result JSON",
+        summary: "获取任务的结构化 result.json 结果",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["result", "json", "structured", "output"],
+        aliases: ["result_json", "json_result"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result", "get_diff"],
+    },
+    get_test_log: {
+        title: "Get Test Log",
+        summary: "获取任务的测试日志 test.log",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["test", "log", "verify", "verification"],
+        aliases: ["test_log", "log"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result", "get_diff"],
+    },
+    get_task_log_tail: {
+        title: "Get Task Log Tail",
+        summary: "获取任务日志尾部内容",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["log", "tail", "task", "output"],
+        aliases: ["log_tail", "tail"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_stdout_tail", "get_test_log"],
+    },
+    get_task_progress: {
+        title: "Get Task Progress",
+        summary: "获取任务执行进度和阶段信息",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["progress", "task", "phase", "status"],
+        aliases: ["progress", "task_progress"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["wait_for_task", "get_task_status"],
+    },
+    get_task_summary: {
+        title: "Get Task Summary",
+        summary: "获取任务综合摘要（状态、差异、文件统计、日志尾部）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["summary", "task", "overview", "compact"],
+        aliases: ["summary", "task_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result", "get_diff", "safe_status"],
+    },
+    safe_status: {
+        title: "Safe Status",
+        summary: "安全状态查询（不含 diff/log 内容，仅任务状态）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["status", "safe", "task", "minimal", "health"],
+        aliases: ["safe", "safe_status"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_status", "diagnose_task", "list_tasks"],
+    },
+    safe_result: {
+        title: "Safe Result",
+        summary: "安全任务结果摘要（不含完整日志、完整 diff 或长 markdown）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["safe", "result", "summary", "task", "redacted"],
+        aliases: ["safe_result", "result_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_result", "get_task_summary", "safe_status"],
+    },
+    safe_audit: {
+        title: "Safe Audit",
+        summary: "安全审计摘要（仅返回检查状态、计数和下一步建议）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["safe", "audit", "checks", "acceptance", "task"],
+        aliases: ["safe_audit", "audit_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["audit_task", "safe_result"],
+    },
+    safe_test_summary: {
+        title: "Safe Test Summary",
+        summary: "安全验证摘要（仅返回验证命令状态和计数）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["safe", "test", "verification", "summary"],
+        aliases: ["safe_tests", "test_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_test_log", "safe_result"],
+    },
+    safe_diff_summary: {
+        title: "Safe Diff Summary",
+        summary: "安全差异摘要（仅返回文件列表和统计，不返回完整 diff）",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["safe", "diff", "summary", "files", "changes"],
+        aliases: ["safe_diff", "diff_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_diff", "safe_result"],
+    },
+    diagnose_task: {
+        title: "Diagnose Task",
+        summary: "v0.7.0: 多信号诊断 running/collecting_artifacts 任务真实状态",
+        profiles: ["full"],
+        modes: ["diagnostic"],
+        tags: ["diagnose", "stale", "running", "heartbeat", "pid", "watcher", "stuck"],
+        aliases: ["diagnose", "diagnostic"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["reconcile_tasks", "safe_status", "get_task_status"],
+    },
+    reconcile_tasks: {
+        title: "Reconcile Tasks",
+        summary: "v0.7.0: 扫描旧 running 任务并报告或安全修复",
+        profiles: ["full"],
+        modes: ["diagnostic"],
+        tags: ["reconcile", "stale", "cleanup", "failed_stale", "orphaned"],
+        aliases: ["reconcile", "cleanup", "fix_stale"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["diagnose_task", "safe_status"],
+    },
+    wait_for_task: {
+        title: "Wait For Task",
+        summary: "等待任务完成并返回下一步工具调用建议",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate"],
+        tags: ["wait", "task", "complete", "terminal", "block"],
+        aliases: ["wait", "wait_task"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_progress", "get_task_summary", "audit_task"],
+    },
+    get_plan: {
+        title: "Get Plan",
+        summary: "读取已保存的执行计划",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["plan", "read", "get", "save_plan"],
+        aliases: ["plan", "read_plan"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["save_plan", "create_task"],
+    },
+    get_task_stdout_tail: {
+        title: "Get Task Stdout Tail",
+        summary: "获取任务标准输出尾部内容",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["stdout", "tail", "log", "output", "task"],
+        aliases: ["stdout_tail", "stdout"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_log_tail", "get_test_log"],
+    },
+    discover_tools: {
+        title: "Discover Tools",
+        summary: "v0.7.1: 搜索候选工具，返回压缩摘要和风险等级",
+        profiles: ["full"],
+        modes: ["diagnostic"],
+        tags: ["discover", "search", "tool", "registry", "find"],
+        aliases: ["discover", "tool_search", "find_tool"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["explain_tool"],
+    },
+    explain_tool: {
+        title: "Explain Tool",
+        summary: "v0.7.1: 展开单个工具详情，可选包含完整 inputSchema",
+        profiles: ["full"],
+        modes: ["diagnostic"],
+        tags: ["explain", "tool", "detail", "schema", "describe"],
+        aliases: ["explain", "tool_info", "describe_tool"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["discover_tools"],
+    },
+    // ── workspace_read_sensitive ──────────────────────────────────
+    read_workspace_file: {
+        title: "Read Workspace File",
+        summary: "读取工作区文件内容（自动脱敏敏感路径）",
+        profiles: ["full", "chatgpt_core", "chatgpt_direct"],
+        modes: ["delegate", "direct", "audit"],
+        tags: ["read", "file", "workspace", "content", "sensitive"],
+        aliases: ["read_file", "cat", "file"],
+        risk: "workspace_read_sensitive",
+        requiresConfirmation: false,
+        relatedTools: ["list_workspace", "search_workspace"],
+    },
+    search_workspace: {
+        title: "Search Workspace",
+        summary: "在 Direct 会话仓库中搜索文件内容（grep-like）",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct"],
+        tags: ["search", "grep", "workspace", "content", "find"],
+        aliases: ["search", "grep", "find_in_files"],
+        risk: "workspace_read_sensitive",
+        requiresConfirmation: false,
+        relatedTools: ["read_workspace_file", "list_workspace"],
+    },
+    // ── workspace_write ────────────────────────────────────────────
+    save_plan: {
+        title: "Save Plan",
+        summary: "保存执行计划到工作区",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate"],
+        tags: ["plan", "save", "create", "write"],
+        aliases: ["save_plan", "create_plan"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["get_plan", "create_task"],
+    },
+    create_task: {
+        title: "Create Task",
+        summary: "创建任务并返回 watcher 交接指令",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate"],
+        tags: ["task", "create", "run", "plan", "agent"],
+        aliases: ["create_task", "new_task", "start_task"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["save_plan", "wait_for_task", "get_task_status"],
+    },
+    run_task_loop: {
+        title: "Run Task Loop",
+        summary: "运行受保护的任务循环：创建任务、等待、验证、审计，并在低风险测试失败时创建 fix_tests 后续任务",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["loop", "task", "lineage", "verify", "audit", "fix"],
+        aliases: ["task_loop", "run_loop", "guarded_loop"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_task", "wait_for_task", "safe_result", "safe_audit", "get_task_lineage"],
+    },
+    recommend_agent_for_task: {
+        title: "Recommend Agent For Task",
+        summary: "Return bounded agent routing guidance without starting an agent or creating a task",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["agent", "routing", "recommend", "task", "safe"],
+        aliases: ["recommend_agent", "route_agent", "agent_routing"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["list_agents", "create_task", "run_task_loop"],
+    },
+    get_task_lineage: {
+        title: "Get Task Lineage",
+        summary: "读取 run_task_loop 生成的任务链路安全摘要，不返回完整日志或 diff",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["lineage", "loop", "summary", "task", "safe"],
+        aliases: ["lineage", "task_lineage"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["run_task_loop", "safe_result", "safe_audit"],
+    },
+    export_task_evidence_pack: {
+        title: "Export Task Evidence Pack",
+        summary: "Export bounded lineage, verification, Direct, policy, and catalog evidence without logs or diffs",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["evidence", "lineage", "summary", "release", "safe"],
+        aliases: ["evidence_pack", "export_evidence", "task_evidence"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_lineage", "run_task_loop", "get_project_policy"],
+    },
+    get_project_policy: {
+        title: "Get Project Policy",
+        summary: "Read bounded project policy and release readiness without exposing secrets or expanding command permissions",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["diagnostic", "release"],
+        tags: ["policy", "project", "release", "readiness", "safe"],
+        aliases: ["project_policy", "policy", "get_policy"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["release_check", "release_prepare", "release_cleanup"],
+    },
+    sync_file: {
+        title: "Sync File",
+        summary: "在 Direct 会话中同步文件（带 sha256 校验）",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct"],
+        tags: ["sync", "file", "copy", "write"],
+        aliases: ["sync", "copy_file"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["apply_patch", "create_direct_session"],
+    },
+    apply_patch: {
+        title: "Apply Patch",
+        summary: "在 Direct 会话中应用补丁修改文件",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct"],
+        tags: ["patch", "apply", "write", "edit", "modify"],
+        aliases: ["patch", "edit", "apply_patch"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["sync_file", "finalize_direct_session", "search_workspace"],
+    },
+    create_direct_session: {
+        title: "Create Direct Session",
+        summary: "创建 Direct 编辑会话",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct"],
+        tags: ["direct", "session", "create", "start"],
+        aliases: ["new_session", "start_session"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["apply_patch", "search_workspace", "finalize_direct_session"],
+    },
+    finalize_direct_session: {
+        title: "Finalize Direct Session",
+        summary: "完成 Direct 会话并生成摘要和 diff",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["direct", "session", "finalize", "complete", "summary"],
+        aliases: ["finalize", "end_session"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_direct_session", "audit_session", "apply_patch"],
+    },
+    audit_session: {
+        title: "Audit Session",
+        summary: "审计 Direct 会话的变更和验证结果",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["audit", "session", "direct", "verify", "review"],
+        aliases: ["audit_direct", "review_session"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["finalize_direct_session", "audit_task"],
+    },
+    audit_task: {
+        title: "Audit Task",
+        summary: "审计任务执行结果和验证证据",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["audit", "task", "verify", "review", "evidence"],
+        aliases: ["audit", "review_task"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_summary", "get_result", "wait_for_task"],
+    },
+    cancel_task: {
+        title: "Cancel Task",
+        summary: "安全取消运行中的任务",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate"],
+        tags: ["cancel", "task", "stop", "terminate"],
+        aliases: ["cancel", "stop_task"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["kill_task", "retry_task", "get_task_status"],
+    },
+    kill_task: {
+        title: "Kill Task",
+        summary: "立即终止任务进程",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["kill", "task", "terminate", "force", "stop", "cancel"],
+        aliases: ["kill", "force_kill"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["cancel_task", "retry_task"],
+    },
+    retry_task: {
+        title: "Retry Task",
+        summary: "重试失败或取消的任务",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["retry", "task", "restart", "rerun", "failed"],
+        aliases: ["retry", "restart_task"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["cancel_task", "create_task", "get_task_status"],
+    },
+    // ── command ───────────────────────────────────────────────────
+    run_verification: {
+        title: "Run Verification",
+        summary: "在 Direct 会话中运行白名单验证命令",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["verify", "verification", "command", "test", "run"],
+        aliases: ["verify", "run_test", "test"],
+        risk: "command",
+        requiresConfirmation: false,
+        relatedTools: ["finalize_direct_session", "audit_session"],
+    },
+    run_direct_verification_bundle: {
+        title: "Run Direct Verification Bundle",
+        summary: "Run multiple Direct allowlisted verification commands and return bounded status without stdout or stderr tails",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["direct", "verify", "verification", "bundle", "safe"],
+        aliases: ["direct_verify_bundle", "verification_bundle"],
+        risk: "command",
+        requiresConfirmation: false,
+        relatedTools: ["run_verification", "safe_finalize_direct_session", "safe_audit_direct_session"],
+    },
+    safe_direct_summary: {
+        title: "Safe Direct Summary",
+        summary: "Direct 会话安全摘要（不含完整 diff 或验证 stdout/stderr）",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["safe", "direct", "summary", "session"],
+        aliases: ["safe_direct", "direct_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["finalize_direct_session", "audit_session"],
+    },
+    safe_finalize_direct_session: {
+        title: "Safe Finalize Direct Session",
+        summary: "完成 Direct 会话并返回低噪摘要",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["safe", "direct", "finalize", "summary"],
+        aliases: ["safe_finalize", "finalize_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["finalize_direct_session", "safe_direct_summary"],
+    },
+    safe_audit_direct_session: {
+        title: "Safe Audit Direct Session",
+        summary: "Direct 会话安全审计摘要（不含验证尾部或完整 diff）",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["safe", "direct", "audit", "session"],
+        aliases: ["safe_direct_audit", "audit_direct_summary"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["audit_session", "safe_finalize_direct_session"],
+    },
+    run_task: {
+        title: "Run Task",
+        summary: "手动触发任务执行（需 enableRunTaskTool=true）",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["run", "task", "execute", "manual", "agent"],
+        aliases: ["run", "execute_task"],
+        risk: "command",
+        requiresConfirmation: true,
+        relatedTools: ["create_task", "wait_for_task"],
+    },
+    // ── v0.8.0 goal 工具 + v0.8.1 invoke_discovered_tool ───────────
+    create_goal: {
+        title: "Create Goal",
+        summary: "v0.8.0: 创建目标会话，管理多任务目标和子目标依赖",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["goal", "create", "session", "objective", "plan"],
+        aliases: ["new_goal", "create_goal"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["list_goals", "read_goal", "create_subgoal_task"],
+    },
+    list_goals: {
+        title: "List Goals",
+        summary: "v0.8.0: 列出所有目标会话及完成进度",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["goal", "list", "session", "enumerate"],
+        aliases: ["goals", "list_goal"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["create_goal", "read_goal"],
+    },
+    read_goal: {
+        title: "Read Goal",
+        summary: "v0.8.0: 读取目标会话详情，含子目标和依赖信息",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["goal", "read", "detail", "session"],
+        aliases: ["get_goal", "goal_detail"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["list_goals", "create_goal", "suggest_next_subgoal"],
+    },
+    create_subgoal_task: {
+        title: "Create Subgoal Task",
+        summary: "v0.8.0: 在目标会话中创建子目标并启动关联任务",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["goal", "subgoal", "create", "task", "dependency"],
+        aliases: ["new_subgoal", "add_subgoal"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_goal", "accept_subgoal", "suggest_next_subgoal"],
+    },
+    accept_subgoal: {
+        title: "Accept Subgoal",
+        summary: "v0.8.0: 验收子目标，确认所有关联任务已通过",
+        profiles: ["full"],
+        modes: ["delegate", "audit"],
+        tags: ["goal", "subgoal", "accept", "verify", "approve"],
+        aliases: ["accept", "approve_subgoal"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["reject_subgoal", "audit_task", "create_subgoal_task"],
+    },
+    reject_subgoal: {
+        title: "Reject Subgoal",
+        summary: "v0.8.0: 拒绝子目标并记录原因",
+        profiles: ["full"],
+        modes: ["delegate", "audit"],
+        tags: ["goal", "subgoal", "reject", "deny"],
+        aliases: ["reject", "deny_subgoal"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["accept_subgoal", "create_subgoal_task"],
+    },
+    suggest_next_subgoal: {
+        title: "Suggest Next Subgoal",
+        summary: "v0.8.0: 基于依赖图建议下一个可执行的子目标",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["goal", "subgoal", "suggest", "next", "ready", "dependency"],
+        aliases: ["next_subgoal", "suggest"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["read_goal", "create_subgoal_task", "summarize_goal_progress"],
+    },
+    summarize_goal_progress: {
+        title: "Summarize Goal Progress",
+        summary: "v0.8.0: 汇总目标完成度、各状态子目标统计和风险",
+        profiles: ["full"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["goal", "progress", "summary", "completion", "status"],
+        aliases: ["goal_progress", "progress"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["suggest_next_subgoal", "read_goal", "export_handoff"],
+    },
+    export_handoff: {
+        title: "Export Handoff",
+        summary: "v0.8.0: 导出目标会话交接文档，用于新会话续作",
+        profiles: ["full"],
+        modes: ["delegate", "audit"],
+        tags: ["goal", "handoff", "export", "transfer", "session"],
+        aliases: ["handoff", "export_handoff"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["summarize_goal_progress", "read_goal"],
+    },
+    invoke_discovered_tool: {
+        title: "Invoke Discovered Tool",
+        summary: "v0.8.1: 通过 token 调用 discover_tools 发现的动态工具",
+        profiles: ["full", "chatgpt_search"],
+        modes: ["delegate", "direct"],
+        tags: ["invoke", "call", "tool", "dynamic", "discovered", "token"],
+        aliases: ["invoke", "call_tool", "invoke_tool"],
+        risk: "command",
+        requiresConfirmation: true,
+        relatedTools: ["discover_tools", "explain_tool"],
+    },
+    // ── 测试 fixture（不暴露在 getToolDefs，仅供 invokeDiscoveredTool 单测） ──
+    __test_credential_tool: {
+        title: "Test Credential Tool",
+        summary: "Test fixture: credential_sensitive risk tool (never exposed in getToolDefs)",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["test", "credential", "fixture"],
+        aliases: [],
+        risk: "credential_sensitive",
+        requiresConfirmation: true,
+    },
+    // ── v1.0.0 release / worktree 工具 ──────────────────────────────
+    check_release_gate: {
+        title: "Check Release Gate",
+        summary: "v1.0.0: 五阶段发布门禁检查（local/packed/published/github/ci）",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "gate", "verify", "publish", "npm", "github", "ci"],
+        aliases: ["release_gate", "check_release", "verify_release"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["audit_task", "safe_status"],
+    },
+    release_check: {
+        title: "Release Check",
+        summary: "Run bounded release readiness checks through the existing release gate without remote writes",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "check", "gate", "readiness", "policy"],
+        aliases: ["release_check", "check_release"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["check_release_gate", "get_project_policy", "release_prepare", "release_verify"],
+    },
+    release_prepare: {
+        title: "Release Prepare",
+        summary: "Run policy-approved local release preparation commands through the existing command guard",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "prepare", "build", "test", "policy"],
+        aliases: ["prepare_release", "release_ready"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_check", "release_verify"],
+    },
+    release_verify: {
+        title: "Release Verify",
+        summary: "Verify npm, GitHub release, and CI facts with read-only remote checks",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "verify", "npm", "github", "ci"],
+        aliases: ["verify_release", "release_remote_verify"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["release_check", "check_release_gate"],
+    },
+    release_cleanup: {
+        title: "Release Cleanup",
+        summary: "Dry-run-first cleanup for low-risk release artifacts under project policy",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "cleanup", "artifacts", "policy"],
+        aliases: ["cleanup_release", "release_artifact_cleanup"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_prepare"],
+    },
+    merge_worktree: {
+        title: "Merge Worktree",
+        summary: "v1.0.0: 合并隔离 worktree 变更回主工作区",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["worktree", "merge", "goal", "subgoal", "isolate"],
+        aliases: ["merge_worktree", "worktree_merge"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["discard_worktree", "create_subgoal_task", "accept_subgoal"],
+    },
+    discard_worktree: {
+        title: "Discard Worktree",
+        summary: "v1.0.0: 安全丢弃隔离 worktree 并归档状态",
+        profiles: ["full"],
+        modes: ["delegate"],
+        tags: ["worktree", "discard", "cleanup", "goal", "subgoal"],
+        aliases: ["discard_worktree", "worktree_discard", "remove_worktree"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["merge_worktree", "create_subgoal_task", "reject_subgoal"],
+    },
+};
+// ── schema digest 计算 ───────────────────────────────────────────
+/**
+ * 稳定 JSON 序列化：按字段名排序，避免 key 顺序导致 digest 漂移。
+ */
+export function stableJsonStringify(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map(stableJsonStringify).join(",")}]`;
+    }
+    if (value !== null && typeof value === "object") {
+        const entries = Object.entries(value)
+            .sort(([left], [right]) => left.localeCompare(right));
+        return `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${stableJsonStringify(entry)}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+/**
+ * 计算 inputSchema 的 sha256 digest。
+ * 返回格式："sha256:<hex>"
+ */
+export function computeSchemaDigest(inputSchema) {
+    const canonical = stableJsonStringify(inputSchema);
+    const hash = createHash("sha256").update(canonical).digest("hex");
+    return `sha256:${hash}`;
+}
+// ── 构建完整工具注册表 ────────────────────────────────────────────
+/**
+ * 从 ToolDef[] 构建带元数据的完整工具注册表。
+ * 静态元数据来自 STATIC_TOOL_META，schema digest 动态计算。
+ * 未在 STATIC_TOOL_META 中注册的工具会被跳过（不报错，保持前向兼容）。
+ */
+export function buildToolRegistry(tools) {
+    const registry = [];
+    for (const tool of tools) {
+        const meta = STATIC_TOOL_META[tool.name];
+        if (!meta)
+            continue;
+        registry.push({
+            name: tool.name,
+            title: meta.title,
+            summary: meta.summary,
+            description: tool.description,
+            profiles: meta.profiles,
+            modes: meta.modes,
+            tags: meta.tags,
+            aliases: meta.aliases,
+            risk: meta.risk,
+            requiresConfirmation: meta.requiresConfirmation,
+            inputSchemaDigest: computeSchemaDigest(tool.inputSchema),
+            relatedTools: meta.relatedTools,
+            examples: meta.examples,
+        });
+    }
+    return registry;
+}
+/**
+ * 获取单个工具的元数据（不含 schema digest，digest 需从 registry 获取）。
+ */
+export function getStaticToolMeta(name) {
+    return STATIC_TOOL_META[name];
+}