patchwarden 1.1.0 → 1.5.1

package/dist/tools/taskLineage.js

@@ -0,0 +1,175 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { getConfig } from "../config.js";
+import { guardReadPath } from "../security/pathGuard.js";
+import { redactSensitiveValue } from "../security/contentRedaction.js";
+import { PatchWardenError } from "../errors.js";
+export function createLineageId(now = new Date()) {
+    const stamp = now.toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
+    return `lineage_${stamp}_${randomBytes(4).toString("hex")}`;
+}
+export function writeTaskLineage(record) {
+    const config = getConfig();
+    const lineageDir = resolve(config.workspaceRoot, ".patchwarden", "lineages", record.lineage_id);
+    mkdirSync(lineageDir, { recursive: true });
+    const safeRecord = redactSensitiveValue(record).value;
+    writeFileSync(join(lineageDir, "lineage.json"), JSON.stringify(safeRecord, null, 2) + "\n", "utf-8");
+    writeFileSync(join(lineageDir, "SUMMARY.md"), buildSummaryMarkdown(safeRecord), "utf-8");
+    return toSafeTaskLineage(safeRecord);
+}
+export function getTaskLineage(lineageId, options = {}) {
+    const maxItems = normalizeMaxItems(options.max_items);
+    if (!/^[A-Za-z0-9_-]+$/.test(lineageId)) {
+        throw new PatchWardenError("invalid_lineage_id", "lineage_id may contain only letters, numbers, underscores, and hyphens.", "Pass a lineage_id returned by run_task_loop.", true, { lineage_id: lineageId });
+    }
+    const config = getConfig();
+    const lineageFile = resolve(config.workspaceRoot, ".patchwarden", "lineages", lineageId, "lineage.json");
+    guardReadPath(lineageFile, config.workspaceRoot, ".patchwarden/lineages");
+    if (!existsSync(lineageFile)) {
+        throw new PatchWardenError("lineage_not_found", `Task lineage not found: "${lineageId}".`, "Pass a lineage_id returned by run_task_loop.", true, { lineage_id: lineageId });
+    }
+    const raw = readFileSync(lineageFile, "utf-8").replace(/^\uFEFF/, "");
+    const record = JSON.parse(raw);
+    return toSafeTaskLineage(redactSensitiveValue(record).value, maxItems);
+}
+export function toSafeTaskLineage(record, maxItems = 8) {
+    const rounds = record.rounds.slice(0, maxItems);
+    const latest = record.rounds[record.rounds.length - 1];
+    const directSessions = normalizeDirectSessions(record.direct_sessions);
+    return {
+        lineage_id: record.lineage_id,
+        goal: record.goal,
+        repo_path: record.repo_path,
+        created_at: record.created_at,
+        updated_at: record.updated_at,
+        final_status: record.final_status,
+        stop_reason: record.stop_reason,
+        next_action: record.next_action,
+        tasks: {
+            main: record.main_task,
+            fix: record.fix_tasks.slice(0, maxItems),
+            cleanup: record.cleanup_tasks.slice(0, maxItems),
+            direct_sessions: directSessions.slice(0, maxItems),
+        },
+        worktree: normalizeWorktree(record.worktree),
+        agent_routing: record.agent_routing ? {
+            requested_agent: record.agent_routing.requested_agent,
+            selected_agent: truncate(String(record.agent_routing.selected_agent), 120),
+            reason: truncate(String(record.agent_routing.reason), 240),
+            fallback: Boolean(record.agent_routing.fallback),
+        } : null,
+        verification: {
+            latest_status: latest?.verification_status || "not_available",
+            passed: latest?.verification_status === "passed",
+        },
+        rounds,
+        warnings: record.warnings.slice(0, maxItems).map((value) => truncate(value, 240)),
+        errors: record.errors.slice(0, maxItems).map((value) => truncate(value, 240)),
+        truncated: record.rounds.length > maxItems ||
+            record.fix_tasks.length > maxItems ||
+            record.cleanup_tasks.length > maxItems ||
+            directSessions.length > maxItems ||
+            record.warnings.length > maxItems ||
+            record.errors.length > maxItems,
+    };
+}
+function buildSummaryMarkdown(record) {
+    const rounds = record.rounds.map((round) => `- ${round.role} ${round.task_id}: ${round.status}, verification=${round.verification_status}, audit=${round.audit_verdict}`);
+    return [
+        "# PatchWarden Task Lineage",
+        "",
+        `- Lineage: ${record.lineage_id}`,
+        `- Goal: ${record.goal}`,
+        `- Repo: ${record.repo_path}`,
+        `- Final status: ${record.final_status}`,
+        `- Stop reason: ${record.stop_reason}`,
+        `- Next action: ${record.next_action}`,
+        `- Isolation: ${normalizeWorktree(record.worktree).isolation_mode}`,
+        `- Worktree: ${formatWorktree(record.worktree)}`,
+        `- Agent routing: ${formatAgentRouting(record.agent_routing)}`,
+        "",
+        "## Tasks",
+        `- Main: ${record.main_task || "none"}`,
+        `- Fix tasks: ${record.fix_tasks.length > 0 ? record.fix_tasks.join(", ") : "none"}`,
+        `- Cleanup tasks: ${record.cleanup_tasks.length > 0 ? record.cleanup_tasks.join(", ") : "none"}`,
+        `- Direct sessions: ${formatDirectSessions(record.direct_sessions)}`,
+        "",
+        "## Rounds",
+        ...(rounds.length > 0 ? rounds : ["- None."]),
+        "",
+    ].join("\n");
+}
+function normalizeWorktree(value) {
+    if (!value) {
+        return {
+            isolation_mode: "current_repo",
+            cleanup: "keep",
+            status: "not_used",
+            next_action: "none",
+        };
+    }
+    return {
+        isolation_mode: value.isolation_mode === "worktree" ? "worktree" : "current_repo",
+        worktree_id: value.worktree_id ? truncate(String(value.worktree_id), 120) : undefined,
+        worktree_path: value.worktree_path ? truncate(String(value.worktree_path), 260) : undefined,
+        branch: value.branch ? truncate(String(value.branch), 160) : undefined,
+        requested_base_branch: value.requested_base_branch ? truncate(String(value.requested_base_branch), 160) : undefined,
+        cleanup: value.cleanup,
+        status: value.status,
+        next_action: truncate(String(value.next_action || "review_worktree"), 240),
+    };
+}
+function formatWorktree(value) {
+    const worktree = normalizeWorktree(value);
+    if (worktree.isolation_mode !== "worktree")
+        return "not used";
+    const id = worktree.worktree_id || "unknown";
+    const status = worktree.status || "unknown";
+    const branch = worktree.branch ? ` branch=${worktree.branch}` : "";
+    return `${id} status=${status}${branch}`;
+}
+function formatAgentRouting(value) {
+    if (!value)
+        return "not recorded";
+    const requested = value.requested_agent ? ` requested=${value.requested_agent}` : "";
+    return `${value.selected_agent}${requested} reason=${truncate(value.reason, 160)}`;
+}
+function normalizeDirectSessions(value) {
+    return value.map((entry) => {
+        if (typeof entry === "string")
+            return { session_id: entry };
+        return {
+            session_id: String(entry.session_id || ""),
+            status: entry.status,
+            command_count: entry.command_count,
+            passed_commands: entry.passed_commands,
+            failed_commands: entry.failed_commands,
+            timed_out_commands: entry.timed_out_commands,
+            audit_decision: entry.audit_decision,
+            changed_files_total: entry.changed_files_total,
+            next_action: entry.next_action ? truncate(String(entry.next_action), 240) : undefined,
+        };
+    }).filter((entry) => entry.session_id !== "");
+}
+function formatDirectSessions(value) {
+    const sessions = normalizeDirectSessions(value);
+    if (sessions.length === 0)
+        return "none";
+    return sessions.map((entry) => {
+        const status = entry.status ? ` status=${entry.status}` : "";
+        const audit = entry.audit_decision ? ` audit=${entry.audit_decision}` : "";
+        return `${entry.session_id}${status}${audit}`;
+    }).join(", ");
+}
+function normalizeMaxItems(value) {
+    if (value === undefined)
+        return 8;
+    if (!Number.isInteger(value) || value < 1 || value > 50) {
+        throw new Error("max_items must be an integer from 1 to 50.");
+    }
+    return value;
+}
+function truncate(value, maxChars) {
+    return value.length <= maxChars ? value : `${value.slice(0, maxChars)}...`;
+}

package/dist/tools/toolCatalog.d.ts

@@ -12,8 +12,8 @@ export interface ToolCatalogSnapshot {
     tool_names: string[];
     tool_manifest_sha256: string;
 }
-export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status", "safe_result", "safe_audit", "safe_test_summary", "safe_diff_summary"];
-export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "finalize_direct_session", "audit_session", "safe_direct_summary", "safe_finalize_direct_session", "safe_audit_direct_session", "sync_file"];
+export declare const CHATGPT_CORE_TOOL_NAMES: readonly ["health_check", "list_agents", "list_workspace", "read_workspace_file", "save_plan", "create_task", "run_task_loop", "recommend_agent_for_task", "get_task_lineage", "export_task_evidence_pack", "get_project_policy", "wait_for_task", "get_task_summary", "get_diff", "get_result", "get_result_json", "get_test_log", "get_task_status", "list_tasks", "cancel_task", "audit_task", "safe_status", "safe_result", "safe_audit", "safe_test_summary", "safe_diff_summary"];
+export declare const CHATGPT_DIRECT_TOOL_NAMES: readonly ["health_check", "list_workspace", "create_direct_session", "search_workspace", "read_workspace_file", "apply_patch", "run_verification", "run_direct_verification_bundle", "finalize_direct_session", "audit_session", "safe_direct_summary", "safe_finalize_direct_session", "safe_audit_direct_session", "sync_file"];
 export declare const CHATGPT_SEARCH_TOOL_NAMES: readonly ["health_check", "discover_tools", "explain_tool", "invoke_discovered_tool", "safe_status"];
 export declare function resolveToolProfile(configProfile?: string): ToolProfile;
 export declare function selectToolsForProfile<T extends CatalogTool>(tools: T[], profile: ToolProfile, enableDirectProfile?: boolean): T[];

package/dist/tools/toolCatalog.js

@@ -7,6 +7,11 @@ export const CHATGPT_CORE_TOOL_NAMES = [
     "read_workspace_file",
     "save_plan",
     "create_task",
+    "run_task_loop",
+    "recommend_agent_for_task",
+    "get_task_lineage",
+    "export_task_evidence_pack",
+    "get_project_policy",
     "wait_for_task",
     "get_task_summary",
     "get_diff",
@@ -31,6 +36,7 @@ export const CHATGPT_DIRECT_TOOL_NAMES = [
     "read_workspace_file",
     "apply_patch",
     "run_verification",
+    "run_direct_verification_bundle",
     "finalize_direct_session",
     "audit_session",
     "safe_direct_summary",

package/dist/tools/toolRegistry.js

@@ -350,6 +350,61 @@ const STATIC_TOOL_META = {
         requiresConfirmation: false,
         relatedTools: ["save_plan", "wait_for_task", "get_task_status"],
     },
+    run_task_loop: {
+        title: "Run Task Loop",
+        summary: "运行受保护的任务循环：创建任务、等待、验证、审计，并在低风险测试失败时创建 fix_tests 后续任务",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit"],
+        tags: ["loop", "task", "lineage", "verify", "audit", "fix"],
+        aliases: ["task_loop", "run_loop", "guarded_loop"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_task", "wait_for_task", "safe_result", "safe_audit", "get_task_lineage"],
+    },
+    recommend_agent_for_task: {
+        title: "Recommend Agent For Task",
+        summary: "Return bounded agent routing guidance without starting an agent or creating a task",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "diagnostic"],
+        tags: ["agent", "routing", "recommend", "task", "safe"],
+        aliases: ["recommend_agent", "route_agent", "agent_routing"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["list_agents", "create_task", "run_task_loop"],
+    },
+    get_task_lineage: {
+        title: "Get Task Lineage",
+        summary: "读取 run_task_loop 生成的任务链路安全摘要，不返回完整日志或 diff",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["lineage", "loop", "summary", "task", "safe"],
+        aliases: ["lineage", "task_lineage"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["run_task_loop", "safe_result", "safe_audit"],
+    },
+    export_task_evidence_pack: {
+        title: "Export Task Evidence Pack",
+        summary: "Export bounded lineage, verification, Direct, policy, and catalog evidence without logs or diffs",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["delegate", "audit", "diagnostic"],
+        tags: ["evidence", "lineage", "summary", "release", "safe"],
+        aliases: ["evidence_pack", "export_evidence", "task_evidence"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["get_task_lineage", "run_task_loop", "get_project_policy"],
+    },
+    get_project_policy: {
+        title: "Get Project Policy",
+        summary: "Read bounded project policy and release readiness without exposing secrets or expanding command permissions",
+        profiles: ["full", "chatgpt_core"],
+        modes: ["diagnostic", "release"],
+        tags: ["policy", "project", "release", "readiness", "safe"],
+        aliases: ["project_policy", "policy", "get_policy"],
+        risk: "readonly",
+        requiresConfirmation: false,
+        relatedTools: ["release_check", "release_prepare", "release_cleanup"],
+    },
     sync_file: {
         title: "Sync File",
         summary: "在 Direct 会话中同步文件（带 sha256 校验）",
@@ -461,6 +516,17 @@ const STATIC_TOOL_META = {
         requiresConfirmation: false,
         relatedTools: ["finalize_direct_session", "audit_session"],
     },
+    run_direct_verification_bundle: {
+        title: "Run Direct Verification Bundle",
+        summary: "Run multiple Direct allowlisted verification commands and return bounded status without stdout or stderr tails",
+        profiles: ["full", "chatgpt_direct"],
+        modes: ["direct", "audit"],
+        tags: ["direct", "verify", "verification", "bundle", "safe"],
+        aliases: ["direct_verify_bundle", "verification_bundle"],
+        risk: "command",
+        requiresConfirmation: false,
+        relatedTools: ["run_verification", "safe_finalize_direct_session", "safe_audit_direct_session"],
+    },
     safe_direct_summary: {
         title: "Safe Direct Summary",
         summary: "Direct 会话安全摘要（不含完整 diff 或验证 stdout/stderr）",
@@ -605,6 +671,28 @@ const STATIC_TOOL_META = {
         requiresConfirmation: false,
         relatedTools: ["summarize_goal_progress", "read_goal"],
     },
+    export_goal_report: {
+        title: "Export Goal Report",
+        summary: "Export a structured final report for a Goal session",
+        profiles: ["full"],
+        modes: ["delegate", "audit"],
+        tags: ["goal", "report", "export", "summary", "final"],
+        aliases: ["goal_report", "report"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["summarize_goal_progress", "export_handoff"],
+    },
+    import_speckit_tasks: {
+        title: "Import Spec Kit Tasks",
+        summary: "Import Spec Kit tasks into a Goal session as subgoals",
+        profiles: ["full"],
+        modes: ["delegate", "audit"],
+        tags: ["goal", "speckit", "import", "tasks", "subgoal"],
+        aliases: ["speckit_import", "import_tasks"],
+        risk: "workspace_write",
+        requiresConfirmation: false,
+        relatedTools: ["create_subgoal_task", "export_goal_report"],
+    },
     invoke_discovered_tool: {
         title: "Invoke Discovered Tool",
         summary: "v0.8.1: 通过 token 调用 discover_tools 发现的动态工具",
@@ -639,6 +727,50 @@ const STATIC_TOOL_META = {
         requiresConfirmation: true,
         relatedTools: ["audit_task", "safe_status"],
     },
+    release_check: {
+        title: "Release Check",
+        summary: "Run bounded release readiness checks through the existing release gate without remote writes",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "check", "gate", "readiness", "policy"],
+        aliases: ["release_check", "check_release"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["check_release_gate", "get_project_policy", "release_prepare", "release_verify"],
+    },
+    release_prepare: {
+        title: "Release Prepare",
+        summary: "Run policy-approved local release preparation commands through the existing command guard",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "prepare", "build", "test", "policy"],
+        aliases: ["prepare_release", "release_ready"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_check", "release_verify"],
+    },
+    release_verify: {
+        title: "Release Verify",
+        summary: "Verify npm, GitHub release, and CI facts with read-only remote checks",
+        profiles: ["full"],
+        modes: ["release", "diagnostic"],
+        tags: ["release", "verify", "npm", "github", "ci"],
+        aliases: ["verify_release", "release_remote_verify"],
+        risk: "release",
+        requiresConfirmation: true,
+        relatedTools: ["release_check", "check_release_gate"],
+    },
+    release_cleanup: {
+        title: "Release Cleanup",
+        summary: "Dry-run-first cleanup for low-risk release artifacts under project policy",
+        profiles: ["full"],
+        modes: ["release"],
+        tags: ["release", "cleanup", "artifacts", "policy"],
+        aliases: ["cleanup_release", "release_artifact_cleanup"],
+        risk: "workspace_write",
+        requiresConfirmation: true,
+        relatedTools: ["get_project_policy", "release_prepare"],
+    },
     merge_worktree: {
         title: "Merge Worktree",
         summary: "v1.0.0: 合并隔离 worktree 变更回主工作区",

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PATCHWARDEN_VERSION = "1.1.0";
-export declare const TOOL_SCHEMA_EPOCH = "2026-06-27-v9";
+export declare const PATCHWARDEN_VERSION = "1.5.1";
+export declare const TOOL_SCHEMA_EPOCH = "2026-07-05-v13";

package/dist/version.js

@@ -1,2 +1,2 @@
-export const PATCHWARDEN_VERSION = "1.1.0";
-export const TOOL_SCHEMA_EPOCH = "2026-06-27-v9";
+export const PATCHWARDEN_VERSION = "1.5.1";
+export const TOOL_SCHEMA_EPOCH = "2026-07-05-v13";