patchwarden 1.1.0 → 1.5.0

package/dist/tools/taskLineage.js

@@ -0,0 +1,175 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { getConfig } from "../config.js";
+import { guardReadPath } from "../security/pathGuard.js";
+import { redactSensitiveValue } from "../security/contentRedaction.js";
+import { PatchWardenError } from "../errors.js";
+export function createLineageId(now = new Date()) {
+    const stamp = now.toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
+    return `lineage_${stamp}_${randomBytes(4).toString("hex")}`;
+}
+export function writeTaskLineage(record) {
+    const config = getConfig();
+    const lineageDir = resolve(config.workspaceRoot, ".patchwarden", "lineages", record.lineage_id);
+    mkdirSync(lineageDir, { recursive: true });
+    const safeRecord = redactSensitiveValue(record).value;
+    writeFileSync(join(lineageDir, "lineage.json"), JSON.stringify(safeRecord, null, 2) + "\n", "utf-8");
+    writeFileSync(join(lineageDir, "SUMMARY.md"), buildSummaryMarkdown(safeRecord), "utf-8");
+    return toSafeTaskLineage(safeRecord);
+}
+export function getTaskLineage(lineageId, options = {}) {
+    const maxItems = normalizeMaxItems(options.max_items);
+    if (!/^[A-Za-z0-9_-]+$/.test(lineageId)) {
+        throw new PatchWardenError("invalid_lineage_id", "lineage_id may contain only letters, numbers, underscores, and hyphens.", "Pass a lineage_id returned by run_task_loop.", true, { lineage_id: lineageId });
+    }
+    const config = getConfig();
+    const lineageFile = resolve(config.workspaceRoot, ".patchwarden", "lineages", lineageId, "lineage.json");
+    guardReadPath(lineageFile, config.workspaceRoot, ".patchwarden/lineages");
+    if (!existsSync(lineageFile)) {
+        throw new PatchWardenError("lineage_not_found", `Task lineage not found: "${lineageId}".`, "Pass a lineage_id returned by run_task_loop.", true, { lineage_id: lineageId });
+    }
+    const raw = readFileSync(lineageFile, "utf-8").replace(/^\uFEFF/, "");
+    const record = JSON.parse(raw);
+    return toSafeTaskLineage(redactSensitiveValue(record).value, maxItems);
+}
+export function toSafeTaskLineage(record, maxItems = 8) {
+    const rounds = record.rounds.slice(0, maxItems);
+    const latest = record.rounds[record.rounds.length - 1];
+    const directSessions = normalizeDirectSessions(record.direct_sessions);
+    return {
+        lineage_id: record.lineage_id,
+        goal: record.goal,
+        repo_path: record.repo_path,
+        created_at: record.created_at,
+        updated_at: record.updated_at,
+        final_status: record.final_status,
+        stop_reason: record.stop_reason,
+        next_action: record.next_action,
+        tasks: {
+            main: record.main_task,
+            fix: record.fix_tasks.slice(0, maxItems),
+            cleanup: record.cleanup_tasks.slice(0, maxItems),
+            direct_sessions: directSessions.slice(0, maxItems),
+        },
+        worktree: normalizeWorktree(record.worktree),
+        agent_routing: record.agent_routing ? {
+            requested_agent: record.agent_routing.requested_agent,
+            selected_agent: truncate(String(record.agent_routing.selected_agent), 120),
+            reason: truncate(String(record.agent_routing.reason), 240),
+            fallback: Boolean(record.agent_routing.fallback),
+        } : null,
+        verification: {
+            latest_status: latest?.verification_status || "not_available",
+            passed: latest?.verification_status === "passed",
+        },
+        rounds,
+        warnings: record.warnings.slice(0, maxItems).map((value) => truncate(value, 240)),
+        errors: record.errors.slice(0, maxItems).map((value) => truncate(value, 240)),
+        truncated: record.rounds.length > maxItems ||
+            record.fix_tasks.length > maxItems ||
+            record.cleanup_tasks.length > maxItems ||
+            directSessions.length > maxItems ||
+            record.warnings.length > maxItems ||
+            record.errors.length > maxItems,
+    };
+}
+function buildSummaryMarkdown(record) {
+    const rounds = record.rounds.map((round) => `- ${round.role} ${round.task_id}: ${round.status}, verification=${round.verification_status}, audit=${round.audit_verdict}`);
+    return [
+        "# PatchWarden Task Lineage",
+        "",
+        `- Lineage: ${record.lineage_id}`,
+        `- Goal: ${record.goal}`,
+        `- Repo: ${record.repo_path}`,
+        `- Final status: ${record.final_status}`,
+        `- Stop reason: ${record.stop_reason}`,
+        `- Next action: ${record.next_action}`,
+        `- Isolation: ${normalizeWorktree(record.worktree).isolation_mode}`,
+        `- Worktree: ${formatWorktree(record.worktree)}`,
+        `- Agent routing: ${formatAgentRouting(record.agent_routing)}`,
+        "",
+        "## Tasks",
+        `- Main: ${record.main_task || "none"}`,
+        `- Fix tasks: ${record.fix_tasks.length > 0 ? record.fix_tasks.join(", ") : "none"}`,
+        `- Cleanup tasks: ${record.cleanup_tasks.length > 0 ? record.cleanup_tasks.join(", ") : "none"}`,
+        `- Direct sessions: ${formatDirectSessions(record.direct_sessions)}`,
+        "",
+        "## Rounds",
+        ...(rounds.length > 0 ? rounds : ["- None."]),
+        "",
+    ].join("\n");
+}
+function normalizeWorktree(value) {
+    if (!value) {
+        return {
+            isolation_mode: "current_repo",
+            cleanup: "keep",
+            status: "not_used",
+            next_action: "none",
+        };
+    }
+    return {
+        isolation_mode: value.isolation_mode === "worktree" ? "worktree" : "current_repo",
+        worktree_id: value.worktree_id ? truncate(String(value.worktree_id), 120) : undefined,
+        worktree_path: value.worktree_path ? truncate(String(value.worktree_path), 260) : undefined,
+        branch: value.branch ? truncate(String(value.branch), 160) : undefined,
+        requested_base_branch: value.requested_base_branch ? truncate(String(value.requested_base_branch), 160) : undefined,
+        cleanup: value.cleanup,
+        status: value.status,
+        next_action: truncate(String(value.next_action || "review_worktree"), 240),
+    };
+}
+function formatWorktree(value) {
+    const worktree = normalizeWorktree(value);
+    if (worktree.isolation_mode !== "worktree")
+        return "not used";
+    const id = worktree.worktree_id || "unknown";
+    const status = worktree.status || "unknown";
+    const branch = worktree.branch ? ` branch=${worktree.branch}` : "";
+    return `${id} status=${status}${branch}`;
+}
+function formatAgentRouting(value) {
+    if (!value)
+        return "not recorded";
+    const requested = value.requested_agent ? ` requested=${value.requested_agent}` : "";
+    return `${value.selected_agent}${requested} reason=${truncate(value.reason, 160)}`;
+}
+function normalizeDirectSessions(value) {
+    return value.map((entry) => {
+        if (typeof entry === "string")
+            return { session_id: entry };
+        return {
+            session_id: String(entry.session_id || ""),
+            status: entry.status,
+            command_count: entry.command_count,
+            passed_commands: entry.passed_commands,
+            failed_commands: entry.failed_commands,
+            timed_out_commands: entry.timed_out_commands,
+            audit_decision: entry.audit_decision,
+            changed_files_total: entry.changed_files_total,
+            next_action: entry.next_action ? truncate(String(entry.next_action), 240) : undefined,
+        };
+    }).filter((entry) => entry.session_id !== "");
+}
+function formatDirectSessions(value) {
+    const sessions = normalizeDirectSessions(value);
+    if (sessions.length === 0)
+        return "none";
+    return sessions.map((entry) => {
+        const status = entry.status ? ` status=${entry.status}` : "";
+        const audit = entry.audit_decision ? ` audit=${entry.audit_decision}` : "";
+        return `${entry.session_id}${status}${audit}`;
+    }).join(", ");
+}
+function normalizeMaxItems(value) {
+    if (value === undefined)
+        return 8;
+    if (!Number.isInteger(value) || value < 1 || value > 50) {
+        throw new Error("max_items must be an integer from 1 to 50.");
+    }
+    return value;
+}
+function truncate(value, maxChars) {
+    return value.length <= maxChars ? value : `${value.slice(0, maxChars)}...`;
+}

package/dist/tools/toolCatalog.d.ts

@@ -12,8 +12,8 @@ export interface ToolCatalogSnapshot {
     tool_names: string[];
     tool_manifest_sha256: string;
 }
-export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status", "safe_result", "safe_audit", "safe_test_summary", "safe_diff_summary"];
-export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "finalize_direct_session", "audit_session", "safe_direct_summary", "safe_finalize_direct_session", "safe_audit_direct_session", "sync_file"];
+export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "run_task_loop", "recommend_agent_for_task", "get_task_lineage", "export_task_evidence_pack", "get_project_policy", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status", "safe_result", "safe_audit", "safe_test_summary", "safe_diff_summary"];
+export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "run_direct_verification_bundle", "finalize_direct_session", "audit_session", "safe_direct_summary", "safe_finalize_direct_session", "safe_audit_direct_session", "sync_file"];
 export declare const CHATGPT_SEARCH_TOOL_NAMES: readonly ["health_check", "discover_tools", "explain_tool", "invoke_discovered_tool", "safe_status"];
 export declare function resolveToolProfile(configProfile?: string): ToolProfile;
 export declare function selectToolsForProfile<T extends CatalogTool>(tools: T[], profile: ToolProfile, enableDirectProfile?: boolean): T[];

package/dist/tools/toolCatalog.js

@@ -7,6 +7,11 @@ export const CHATGPT_CORE_TOOL_NAMES = [
     "read_workspace_file",
     "save_plan",
     "create_task",
+    "run_task_loop",
+    "recommend_agent_for_task",
+    "get_task_lineage",
+    "export_task_evidence_pack",
+    "get_project_policy",
     "wait_for_task",
     "get_task_summary",
     "get_diff",
@@ -31,6 +36,7 @@ export const CHATGPT_DIRECT_TOOL_NAMES = [
     "read_workspace_file",
     "apply_patch",
     "run_verification",
+    "run_direct_verification_bundle",
     "finalize_direct_session",
     "audit_session",
     "safe_direct_summary",

package/dist/tools/toolRegistry.js

@@ -350,6 +350,61 @@ const STATIC_TOOL_META = {
         requiresConfirmation: false,
         relatedTools: ["save_plan", "wait_for_task", "get_task_status"],
     },
+    run_task_loop: {
+        title: "Run Task Loop",
+        summary: "运行受保护的任务循环：创建任务、等待、验证、审计，并在低风险测试失败时创建 fix_tests 后续任务",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["loop", "task", "lineage", "verify", "audit", "fix"],
+        aliases: ["task_loop", "run_loop", "guarded_loop"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_task", "wait_for_task", "safe_result", "safe_audit", "get_task_lineage"],
+    },
+    recommend_agent_for_task: {
+        title: "Recommend Agent For Task",
+        summary: "Return bounded agent routing guidance without starting an agent or creating a task",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["agent", "routing", "recommend", "task", "safe"],
+        aliases: ["recommend_agent", "route_agent", "agent_routing"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["list_agents", "create_task", "run_task_loop"],
+    },
+    get_task_lineage: {
+        title: "Get Task Lineage",
+        summary: "读取 run_task_loop 生成的任务链路安全摘要，不返回完整日志或 diff",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["lineage", "loop", "summary", "task", "safe"],
+        aliases: ["lineage", "task_lineage"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["run_task_loop", "safe_result", "safe_audit"],
+    },
+    export_task_evidence_pack: {
+        title: "Export Task Evidence Pack",
+        summary: "Export bounded lineage, verification, Direct, policy, and catalog evidence without logs or diffs",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["evidence", "lineage", "summary", "release", "safe"],
+        aliases: ["evidence_pack", "export_evidence", "task_evidence"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_lineage", "run_task_loop", "get_project_policy"],
+    },
+    get_project_policy: {
+        title: "Get Project Policy",
+        summary: "Read bounded project policy and release readiness without exposing secrets or expanding command permissions",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["diagnostic", "release"],
+        tags: ["policy", "project", "release", "readiness", "safe"],
+        aliases: ["project_policy", "policy", "get_policy"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["release_check", "release_prepare", "release_cleanup"],
+    },
     sync_file: {
         title: "Sync File",
         summary: "在 Direct 会话中同步文件（带 sha256 校验）",
@@ -461,6 +516,17 @@ const STATIC_TOOL_META = {
         requiresConfirmation: false,
         relatedTools: ["finalize_direct_session", "audit_session"],
     },
+    run_direct_verification_bundle: {
+        title: "Run Direct Verification Bundle",
+        summary: "Run multiple Direct allowlisted verification commands and return bounded status without stdout or stderr tails",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["direct", "verify", "verification", "bundle", "safe"],
+        aliases: ["direct_verify_bundle", "verification_bundle"],
+        risk: "command",
+        requiresConfirmation: false,
+        relatedTools: ["run_verification", "safe_finalize_direct_session", "safe_audit_direct_session"],
+    },
     safe_direct_summary: {
         title: "Safe Direct Summary",
         summary: "Direct 会话安全摘要（不含完整 diff 或验证 stdout/stderr）",
@@ -639,6 +705,50 @@ const STATIC_TOOL_META = {
         requiresConfirmation: true,
         relatedTools: ["audit_task", "safe_status"],
     },
+    release_check: {
+        title: "Release Check",
+        summary: "Run bounded release readiness checks through the existing release gate without remote writes",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "check", "gate", "readiness", "policy"],
+        aliases: ["release_check", "check_release"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["check_release_gate", "get_project_policy", "release_prepare", "release_verify"],
+    },
+    release_prepare: {
+        title: "Release Prepare",
+        summary: "Run policy-approved local release preparation commands through the existing command guard",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "prepare", "build", "test", "policy"],
+        aliases: ["prepare_release", "release_ready"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_check", "release_verify"],
+    },
+    release_verify: {
+        title: "Release Verify",
+        summary: "Verify npm, GitHub release, and CI facts with read-only remote checks",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "verify", "npm", "github", "ci"],
+        aliases: ["verify_release", "release_remote_verify"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["release_check", "check_release_gate"],
+    },
+    release_cleanup: {
+        title: "Release Cleanup",
+        summary: "Dry-run-first cleanup for low-risk release artifacts under project policy",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "cleanup", "artifacts", "policy"],
+        aliases: ["cleanup_release", "release_artifact_cleanup"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_prepare"],
+    },
     merge_worktree: {
         title: "Merge Worktree",
         summary: "v1.0.0: 合并隔离 worktree 变更回主工作区",

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PATCHWARDEN_VERSION = "1.1.0";
-export declare const TOOL_SCHEMA_EPOCH = "2026-06-27-v9";
+export declare const PATCHWARDEN_VERSION = "1.5.0";
+export declare const TOOL_SCHEMA_EPOCH = "2026-07-05-v13";

package/dist/version.js

@@ -1,2 +1,2 @@
-export const PATCHWARDEN_VERSION = "1.1.0";
-export const TOOL_SCHEMA_EPOCH = "2026-06-27-v9";
+export const PATCHWARDEN_VERSION = "1.5.0";
+export const TOOL_SCHEMA_EPOCH = "2026-07-05-v13";

package/docs/chatgpt-usage.md

@@ -92,6 +92,37 @@ safety boundaries and complete evidence.
 7. Changes remain uncommitted for review; commit, push, and publish are outside
    the ordinary task scope.
 
+For routine guarded work, `run_task_loop` can perform the assess-only preflight,
+task creation, waiting, safe summary review, audit, and bounded `fix_tests`
+follow-up cycle in one tool call. It still uses the existing Watcher and
+allow-listed verification commands, stops at local confirmation boundaries, and
+returns a `lineage_id` for `get_task_lineage` instead of full logs or diffs.
+
+For v1.4 Direct-assisted verification, set `direct_verify=true` only when the
+local Direct profile is enabled and the desired Direct verification commands are
+already allow-listed. The loop creates a Direct session after the normal task
+and audit have succeeded, runs verification, safe-finalizes, safe-audits, and
+stores bounded Direct evidence in lineage. It does not call Direct patching
+tools, publish, push, tag, create releases, or restart live services.
+
+For v1.5 isolated loop work, set `agent="auto"` when you want PatchWarden to
+pick from configured local agents using bounded routing, and set
+`isolation_mode="worktree"` only when the target repo is a git repository and
+you want the task to run in an isolated worktree. Worktree mode records evidence
+in lineage but never auto-merges or auto-deletes the worktree. After a loop
+finishes, call `export_task_evidence_pack(lineage_id)` to write bounded
+`evidence.json` and `EVIDENCE.md` files without stdout/stderr tails, full diffs,
+verification logs, or sensitive file content.
+
+For v1.3 policy-aware work, call `get_project_policy` before release-oriented
+changes. It reads the bounded effective `.patchwarden/project-policy.json`
+summary and release readiness without granting new command permissions. Release
+mode tools are full-profile only: `release_check` wraps the existing release
+gate, `release_prepare` runs only already allow-listed local commands,
+`release_verify` performs read-only npm/GitHub/CI checks, and `release_cleanup`
+defaults to dry run. None of these tools publish, push, tag, create GitHub
+Releases, restart live tunnels/watchers, or return full logs/diffs.
+
 `needs_confirm` assessments must be confirmed locally with
 `patchwarden-confirm <full_assessment_id>`. The confirmation command is not an
 MCP tool. A `blocked` assessment cannot be confirmed.

package/docs/control-center/README.md

@@ -27,6 +27,15 @@ automation-friendly commands.
 
 ## Design Notes
 
+- v1.3 Dashboard panels show bounded task lineage, project policy, and release
+  readiness summaries. The backing APIs are read-only and do not expose full
+  stdout/stderr, full diffs, long logs, or secret-bearing files.
+- v1.4 extends the lineage panel with Direct-assisted verification status and
+  exposes a safe Direct session summary API without stdout/stderr tails or diffs.
+- v1.5 adds an Evidence Pack dashboard card plus read-only
+  `/api/evidence-packs` and `/api/evidence-packs/:lineage_id` routes. These
+  APIs return bounded lineage/policy/catalog evidence and omit stdout/stderr,
+  full diffs, verification logs, and sensitive file content.
 - `control-center-mvp.md`: first Web dashboard scope.
 - `control-center-phase2.md`: follow-up management and diagnostics scope.
 - `control-center-daily-driver.md`: current daily-use contract.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "patchwarden",
-  "version": "1.1.0",
-  "description": "Secure local MCP bridge for ChatGPT and local agents, with workspace-scoped tasks, safe summaries, audits, and Direct editing.",
+  "version": "1.5.0",
+  "description": "Secure local MCP bridge for ChatGPT and local agents, with workspace-scoped task loops, safe summaries, audits, and Direct editing.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/scripts/checks/control-center-smoke.js

@@ -229,6 +229,7 @@ async function testStaticFiles() {
     if (!rootCt.includes("text/html")) checks.push(`GET / -> Content-Type ${rootCt} (expected text/html)`);
     if (!root.body.includes("setup-checklist-card")) checks.push("dashboard missing setup checklist card");
     if (!root.body.includes("Show Core / Direct log tails")) checks.push("dashboard activity log is not collapsed behind a summary");
+    if (!root.body.includes("evidence-pack-card")) checks.push("dashboard missing v1.5 evidence pack card");
 
     if (vendor.status !== 200) checks.push(`GET /vendor/tailwindcss-browser.js -> status ${vendor.status}`);
     const vendorCt = vendor.headers["content-type"] || "";
@@ -667,6 +668,92 @@ async function testOtherGetApis() {
     problems.push(`/api/audit error: ${err.message}`);
   }
 
+  // /api/lineages
+  try {
+    const res = await httpGet(`${BASE_URL}/api/lineages`);
+    if (res.status !== 200) problems.push(`/api/lineages -> ${res.status} (expected 200)`);
+    else {
+      const json = tryJson(res.body);
+      if (!json || !Array.isArray(json.lineages) || typeof json.total !== "number") {
+        problems.push(`/api/lineages missing bounded lineage summary fields: ${res.body.slice(0, 120)}`);
+      }
+    }
+  } catch (err) {
+    problems.push(`/api/lineages error: ${err.message}`);
+  }
+
+  // /api/project-policy
+  try {
+    const res = await httpGet(`${BASE_URL}/api/project-policy?repo_path=.`);
+    if (res.status !== 200) problems.push(`/api/project-policy -> ${res.status} (expected 200)`);
+    else {
+      const json = tryJson(res.body);
+      if (!json || !("effective_policy" in json) || !Array.isArray(json.issues)) {
+        problems.push(`/api/project-policy missing policy summary fields: ${res.body.slice(0, 120)}`);
+      }
+      const text = res.body.toLowerCase();
+      if (text.includes("stdout") || text.includes("stderr") || text.includes("diff_patch")) {
+        problems.push("/api/project-policy leaked log/diff-shaped fields");
+      }
+    }
+  } catch (err) {
+    problems.push(`/api/project-policy error: ${err.message}`);
+  }
+
+  // /api/release/status
+  try {
+    const res = await httpGet(`${BASE_URL}/api/release/status?repo_path=.`);
+    if (res.status !== 200) problems.push(`/api/release/status -> ${res.status} (expected 200)`);
+    else {
+      const json = tryJson(res.body);
+      if (!json || !("release_readiness" in json) || json.remote_write_performed !== false) {
+        problems.push(`/api/release/status missing read-only release status fields: ${res.body.slice(0, 120)}`);
+      }
+      const text = res.body.toLowerCase();
+      if (text.includes("stdout") || text.includes("stderr") || text.includes("diff_patch")) {
+        problems.push("/api/release/status leaked log/diff-shaped fields");
+      }
+    }
+  } catch (err) {
+    problems.push(`/api/release/status error: ${err.message}`);
+  }
+
+  // /api/evidence-packs
+  try {
+    const res = await httpGet(`${BASE_URL}/api/evidence-packs`);
+    if (res.status !== 200) problems.push(`/api/evidence-packs -> ${res.status} (expected 200)`);
+    else {
+      const json = tryJson(res.body);
+      if (!json || !Array.isArray(json.evidence_packs) || typeof json.total !== "number") {
+        problems.push(`/api/evidence-packs missing bounded evidence summary fields: ${res.body.slice(0, 120)}`);
+      }
+      const text = res.body.toLowerCase();
+      if (text.includes("stdout_tail") || text.includes("stderr_tail") || text.includes("diff.patch") || text.includes("verification.log")) {
+        problems.push("/api/evidence-packs leaked log/diff-shaped fields");
+      }
+    }
+  } catch (err) {
+    problems.push(`/api/evidence-packs error: ${err.message}`);
+  }
+
+  // /api/direct-sessions/:id/summary (safe, bounded route; missing id is still non-leaky)
+  try {
+    const res = await httpGet(`${BASE_URL}/api/direct-sessions/direct_missing_summary/summary`);
+    if (res.status !== 200) problems.push(`/api/direct-sessions/:id/summary -> ${res.status} (expected 200)`);
+    else {
+      const json = tryJson(res.body);
+      if (!json || json.session_id !== "direct_missing_summary") {
+        problems.push(`/api/direct-sessions/:id/summary missing safe summary envelope: ${res.body.slice(0, 120)}`);
+      }
+      const text = res.body.toLowerCase();
+      if (text.includes("stdout_tail") || text.includes("stderr_tail") || text.includes("diff_patch") || text.includes("verification.log")) {
+        problems.push("/api/direct-sessions/:id/summary leaked log/diff-shaped fields");
+      }
+    }
+  } catch (err) {
+    problems.push(`/api/direct-sessions/:id/summary error: ${err.message}`);
+  }
+
   // /api/logs/core
   try {
     const res = await httpGet(`${BASE_URL}/api/logs/core`);

package/scripts/checks/control-smoke.js

@@ -76,7 +76,7 @@ try {
     ready: false,
     pid: null,
     tool_profile: "chatgpt_direct",
-    tool_count: 13,
+    tool_count: 14,
     tools_ready: true,
   }), "utf8");
   writeFileSync(join(directRuntime, "tunnel-client.pid"), String(fakeTunnel.pid), "utf8");
@@ -114,7 +114,7 @@ try {
     reason_code: "stale_fixture",
     last_error: "stale failure",
     tool_profile: "chatgpt_core",
-    tool_count: 21,
+    tool_count: 26,
     tools_ready: true,
   }), "utf8");
   healthServer = spawn(

package/scripts/checks/mcp-manifest-check.js

@@ -105,6 +105,11 @@ try {
       throw new Error("get_task_summary schema must expose view and max_items");
     }
     const safeRequirements = {
+      run_task_loop: ["repo_path", "goal", "verify_commands", "direct_verify", "isolation_mode", "worktree_cleanup"],
+      recommend_agent_for_task: ["repo_path", "goal"],
+      get_task_lineage: ["lineage_id"],
+      export_task_evidence_pack: ["lineage_id"],
+      get_project_policy: ["repo_path"],
       safe_result: ["task_id"],
       safe_audit: ["task_id"],
       safe_test_summary: ["task_id"],
@@ -124,6 +129,7 @@ try {
       create_direct_session: ["repo_path"],
       apply_patch: ["session_id", "path", "expected_sha256", "operations"],
       run_verification: ["session_id", "command"],
+      run_direct_verification_bundle: ["session_id", "commands"],
       finalize_direct_session: ["session_id"],
       audit_session: ["session_id"],
       safe_direct_summary: ["session_id"],
@@ -200,6 +206,11 @@ try {
       health_check: ["detail"],
       list_tasks: ["repo_path", "active_only"],
       get_task_summary: ["view", "max_items"],
+      run_task_loop: ["repo_path", "goal", "verify_commands", "direct_verify", "isolation_mode", "worktree_cleanup"],
+      recommend_agent_for_task: ["repo_path", "goal"],
+      get_task_lineage: ["lineage_id"],
+      export_task_evidence_pack: ["lineage_id"],
+      get_project_policy: ["repo_path"],
       safe_result: ["task_id"],
       safe_audit: ["task_id"],
       safe_test_summary: ["task_id"],
@@ -208,6 +219,7 @@ try {
       create_direct_session: ["repo_path"],
       apply_patch: ["session_id", "path", "expected_sha256", "operations"],
       run_verification: ["session_id", "command"],
+      run_direct_verification_bundle: ["session_id", "commands"],
       finalize_direct_session: ["session_id"],
       audit_session: ["session_id"],
       safe_direct_summary: ["session_id"],