patchwarden 1.5.1 → 1.6.1

package/dist/tools/{auditSession.d.ts → diagnostics/auditSession.d.ts}

@@ -1,4 +1,4 @@
-import { type DirectSessionAuditOutput } from "../direct/directAudit.js";
+import { type DirectSessionAuditOutput } from "../../direct/directAudit.js";
 export interface AuditSessionInput {
     session_id: string;
 }

package/dist/tools/{auditSession.js → diagnostics/auditSession.js}

@@ -1,5 +1,5 @@
-import { auditDirectSession, } from "../direct/directAudit.js";
-import { updateDirectSession } from "../direct/directSessionStore.js";
+import { auditDirectSession, } from "../../direct/directAudit.js";
+import { updateDirectSession } from "../../direct/directSessionStore.js";
 // ── Main function ──────────────────────────────────────────────────
 export function auditSession(input) {
     const { session_id } = input;

package/dist/tools/{auditTask.d.ts → diagnostics/auditTask.d.ts}

@@ -32,7 +32,7 @@ export interface AuditTaskOutput {
     manual_verification_items: string[];
     recommended_next_actions: string[];
 }
-import type { ChangedFile } from "../runner/changeCapture.js";
+import type { ChangedFile } from "../../runner/changeCapture.js";
 /**
  * Check 1: forbidden_scope_violation (fail level).
  * Returns null when no forbidden patterns are configured (skip).

package/dist/tools/{auditTask.js → diagnostics/auditTask.js}

@@ -1,10 +1,13 @@
-import { readFileSync, existsSync, writeFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, existsSync, opendirSync, statSync } from "node:fs";
 import { join, resolve, relative, basename, sep, isAbsolute } from "node:path";
-import { getTasksDir, getConfig } from "../config.js";
-import { guardReadPath, guardWorkspacePath } from "../security/pathGuard.js";
-import { guardSensitivePath, isSensitivePath } from "../security/sensitiveGuard.js";
-import { evaluateAcceptance } from "../goal/acceptanceEngine.js";
-import { renderAcceptanceMarkdown } from "../goal/acceptanceTemplate.js";
+import { getTasksDir, getConfig } from "../../config.js";
+import { guardReadPath, guardWorkspacePath } from "../../security/pathGuard.js";
+import { guardSensitivePath, isSensitivePath } from "../../security/sensitiveGuard.js";
+import { evaluateAcceptance } from "../../goal/acceptanceEngine.js";
+import { renderAcceptanceMarkdown } from "../../goal/acceptanceTemplate.js";
+import { atomicWriteFileSync } from "../../utils/atomicFile.js";
+import { mutateTaskStatus } from "../../runner/taskStatusStore.js";
+import { readTextFilePrefixSync, readTextFileTailLinesSync, } from "../../utils/boundedFile.js";
 // Release claim patterns — anything that claims remote publish/release/deploy
 const RELEASE_PATTERNS = [
     /npm\s+package\s+version\s+published/i,
@@ -16,6 +19,10 @@ const RELEASE_PATTERNS = [
     /npm\s+publish\s+completed/i,
     /deploy(ed|ment)?\s+(to|on)\s+(npm|registry|github)/i,
 ];
+const MAX_AUDIT_DOC_FILES = 200;
+const MAX_AUDIT_DOC_FILE_BYTES = 512 * 1024;
+const MAX_AUDIT_DOC_TOTAL_BYTES = 4 * 1024 * 1024;
+const MAX_AUDIT_EVIDENCE_BYTES = 1024 * 1024;
 function scanForReleaseClaims(text) {
     const found = [];
     for (const pattern of RELEASE_PATTERNS) {
@@ -25,24 +32,57 @@ function scanForReleaseClaims(text) {
     }
     return found;
 }
-function findMdFiles(dir, maxDepth = 3) {
+function findMdFiles(dir, maxDepth = 3, maxFiles = MAX_AUDIT_DOC_FILES) {
     const results = [];
-    if (!existsSync(dir) || maxDepth <= 0)
-        return results;
-    try {
-        const entries = readdirSync(dir, { withFileTypes: true });
-        for (const e of entries) {
-            const full = join(dir, e.name);
-            if (e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules") {
-                results.push(...findMdFiles(full, maxDepth - 1));
+    const pending = [{ path: dir, depth: maxDepth }];
+    const maxDirectories = maxFiles * 4;
+    let visitedDirectories = 0;
+    let truncated = false;
+    while (pending.length > 0 && results.length < maxFiles && visitedDirectories < maxDirectories) {
+        const current = pending.pop();
+        if (!existsSync(current.path) || current.depth <= 0)
+            continue;
+        visitedDirectories += 1;
+        let handle;
+        try {
+            handle = opendirSync(current.path);
+            while (results.length < maxFiles) {
+                const entry = handle.readSync();
+                if (!entry)
+                    break;
+                const full = join(current.path, entry.name);
+                if (entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules") {
+                    if (pending.length < maxDirectories)
+                        pending.push({ path: full, depth: current.depth - 1 });
+                    else
+                        truncated = true;
+                }
+                else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
+                    results.push(full);
+                }
             }
-            else if (e.isFile() && e.name.endsWith(".md")) {
-                results.push(full);
+        }
+        catch { /* skip unreadable dirs */ }
+        finally {
+            try {
+                handle?.closeSync();
             }
+            catch { /* best effort */ }
         }
     }
-    catch { /* skip unreadable dirs */ }
-    return results;
+    truncated ||= pending.length > 0 || results.length >= maxFiles || visitedDirectories >= maxDirectories;
+    return { files: results, truncated };
+}
+function readAuditEvidence(path) {
+    const half = Math.floor(MAX_AUDIT_EVIDENCE_BYTES / 2);
+    const prefix = readTextFilePrefixSync(path, half);
+    if (!prefix.truncated)
+        return { content: prefix.content, truncated: false };
+    const tail = readTextFileTailLinesSync(path, 1000, half);
+    return {
+        content: `${prefix.content}\n[...audit evidence truncated...]\n${tail}`,
+        truncated: true,
+    };
 }
 // ── v0.7.2: New audit checks (exported for testing) ────────────────
 /**
@@ -606,20 +646,32 @@ export function auditTask(taskId) {
     if (existsSync(readmePath))
         docsToScan.push(readmePath);
     const docsDir = join(repoPathSafe, "docs");
+    let markdownEnumerationTruncated = false;
     if (existsSync(docsDir)) {
-        docsToScan.push(...findMdFiles(docsDir));
+        const markdown = findMdFiles(docsDir);
+        docsToScan.push(...markdown.files);
+        markdownEnumerationTruncated = markdown.truncated;
     }
     // Collect all npm run references from all docs
     const allNpmRunRefs = new Set();
     const allReleaseClaims = [];
+    let remainingDocBytes = MAX_AUDIT_DOC_TOTAL_BYTES;
+    let documentScanTruncated = markdownEnumerationTruncated || docsToScan.length > MAX_AUDIT_DOC_FILES;
     for (const docPath of docsToScan) {
+        if (remainingDocBytes <= 0) {
+            documentScanTruncated = true;
+            break;
+        }
         let content;
         try {
             if (docPath !== resultFile) {
                 guardReadPath(docPath, config.workspaceRoot);
                 guardSensitivePath(docPath);
             }
-            content = readFileSync(docPath, "utf-8");
+            const bounded = readTextFilePrefixSync(docPath, Math.min(MAX_AUDIT_DOC_FILE_BYTES, remainingDocBytes));
+            content = bounded.content;
+            remainingDocBytes -= Buffer.byteLength(content, "utf-8");
+            documentScanTruncated ||= bounded.truncated;
         }
         catch {
             continue;
@@ -636,6 +688,14 @@ export function auditTask(taskId) {
         for (const c of claims)
             allReleaseClaims.push(`[${relative(repoPathSafe, docPath) || docPath}] ${c}`);
     }
+    if (documentScanTruncated) {
+        checks.push({
+            name: "documentation_scan_bounded",
+            result: "warn",
+            detail: `Documentation scan reached its ${MAX_AUDIT_DOC_FILES}-file or ${MAX_AUDIT_DOC_TOTAL_BYTES}-byte safety budget.`,
+        });
+        addManualVerification("Review documentation omitted by the bounded audit scan.");
+    }
     // Cross-check npm run refs against package.json scripts
     for (const scriptName of allNpmRunRefs) {
         if (pkgScripts.length > 0 && !pkgScripts.includes(scriptName)) {
@@ -682,7 +742,10 @@ export function auditTask(taskId) {
     if (hasTestLog) {
         let logContent;
         try {
-            logContent = readFileSync(testLogFile, "utf-8");
+            const evidence = readAuditEvidence(testLogFile);
+            logContent = evidence.content;
+            if (evidence.truncated)
+                addManualVerification("test.log exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             logContent = "";
@@ -720,7 +783,10 @@ export function auditTask(taskId) {
     let resultMdContent = null;
     if (hasResult) {
         try {
-            resultMdContent = readFileSync(resultFile, "utf-8");
+            const evidence = readAuditEvidence(resultFile);
+            resultMdContent = evidence.content;
+            if (evidence.truncated)
+                addManualVerification("result.md exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             resultMdContent = null;
@@ -788,7 +854,7 @@ export function auditTask(taskId) {
         "## Recommended Actions",
         ...actions.map((a) => `- ${a}`),
     ].join("\n");
-    writeFileSync(join(taskDir, "independent-review.md"), reviewMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "independent-review.md"), reviewMd);
     // ── v0.7.2: 集成 acceptanceEngine ──
     const releaseClaimsUnverified = allReleaseClaims.length > 0;
     const acceptanceEvidence = {
@@ -827,16 +893,20 @@ export function auditTask(taskId) {
     const acceptanceResult = evaluateAcceptance(acceptanceEvidence);
     // 回写 status.json 的 acceptance_status（仅对 done_by_agent 有意义）
     if (taskStatus === "done_by_agent") {
-        const updatedStatus = {
-            ...statusData,
+        const statusPatch = {
             acceptance_status: acceptanceResult.acceptance_status,
-            updated_at: new Date().toISOString(),
         };
-        writeFileSync(statusFile, JSON.stringify(updatedStatus, null, 2), "utf-8");
+        mutateTaskStatus(statusFile, (current) => {
+            if (current.status !== "done_by_agent") {
+                return { result: current };
+            }
+            const next = { ...current, ...statusPatch, updated_at: new Date().toISOString() };
+            return { next, result: next };
+        });
     }
     // 导出 ACCEPTANCE.md
     const acceptanceMd = renderAcceptanceMarkdown(taskId, acceptanceResult, acceptanceEvidence);
-    writeFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd);
     return {
         task_id: taskId,
         verdict,

package/dist/tools/{healthCheck.d.ts → diagnostics/healthCheck.d.ts}

@@ -1,4 +1,4 @@
-import type { ToolCatalogSnapshot } from "./toolCatalog.js";
+import type { ToolCatalogSnapshot } from "../catalog/toolCatalog.js";
 export interface HealthCheckInput {
     detail?: "standard" | "self_diagnostic";
 }
@@ -14,9 +14,9 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
         recent_tasks_returned: number;
         recent_failures: {
             task_id: string;
-            status: import("./createTask.js").TaskStatus;
-            phase: import("./createTask.js").TaskPhase;
-            pending_reason: import("../watcherStatus.js").PendingReason;
+            status: import("../tasks/createTask.js").TaskStatus;
+            phase: import("../tasks/createTask.js").TaskPhase;
+            pending_reason: import("../../watcherStatus.js").PendingReason;
             error: string | null;
         }[];
     } | undefined;
@@ -37,7 +37,7 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
     };
     watcher: {
         supervisor: Record<string, unknown>;
-        status: import("../watcherStatus.js").WatcherState;
+        status: import("../../watcherStatus.js").WatcherState;
         available: boolean;
         stale_after_seconds: number;
         last_heartbeat_at: string | null;
@@ -65,7 +65,7 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
     tunnel: Record<string, unknown> & {
         last_error: string | null;
     };
-    agents: import("./listAgents.js").AgentAvailability[];
+    agents: import("../workspace/listAgents.js").AgentAvailability[];
     agent_status: {
         [k: string]: string;
     };

package/dist/tools/{healthCheck.js → diagnostics/healthCheck.js}

@@ -1,13 +1,13 @@
 import { accessSync, constants, existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
-import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../config.js";
-import { listAgents } from "./listAgents.js";
-import { redactSensitiveContent, redactSensitiveValue } from "../security/contentRedaction.js";
-import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../version.js";
-import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "./toolCatalog.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { listTasks } from "./listTasks.js";
+import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../../config.js";
+import { listAgents } from "../workspace/listAgents.js";
+import { redactSensitiveContent, redactSensitiveValue } from "../../security/contentRedaction.js";
+import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../../version.js";
+import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "../catalog/toolCatalog.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { listTasks } from "../tasks/listTasks.js";
 const SERVER_STARTED_AT = Date.now();
 export function healthCheck(catalog, input = {}) {
     const config = getConfig();

package/dist/tools/diagnostics/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./auditSession.js";
+export * from "./auditTask.js";
+export * from "./healthCheck.js";
+export * from "./safeStatus.js";
+export * from "./safeViews.js";
+export * from "./schemaDriftCheck.js";

package/dist/tools/diagnostics/index.js

@@ -0,0 +1,6 @@
+export * from "./auditSession.js";
+export * from "./auditTask.js";
+export * from "./healthCheck.js";
+export * from "./safeStatus.js";
+export * from "./safeViews.js";
+export * from "./schemaDriftCheck.js";

package/dist/tools/{safeStatus.d.ts → diagnostics/safeStatus.d.ts}

@@ -1,6 +1,6 @@
-import { type PatchWardenConfig } from "../config.js";
-import type { TaskStatus, TaskPhase, AcceptanceStatus } from "./createTask.js";
-import { type DiagnosisType, type DiagnosisConfidence } from "./diagnoseTask.js";
+import { type PatchWardenConfig } from "../../config.js";
+import type { TaskStatus, TaskPhase, AcceptanceStatus } from "../tasks/createTask.js";
+import { type DiagnosisType, type DiagnosisConfidence } from "../tasks/diagnoseTask.js";
 export interface SafeStatusOutput {
     task_id: string;
     status: TaskStatus | "not_found";

package/dist/tools/{safeStatus.js → diagnostics/safeStatus.js}

@@ -1,11 +1,11 @@
 import { readFileSync, existsSync } from "node:fs";
 import { resolve, join } from "node:path";
-import { getTasksDir, getConfig } from "../config.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { guardSensitivePath } from "../security/sensitiveGuard.js";
-import { readTaskRuntime } from "../taskRuntime.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { diagnoseTask } from "./diagnoseTask.js";
+import { getTasksDir, getConfig } from "../../config.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { guardSensitivePath } from "../../security/sensitiveGuard.js";
+import { readTaskRuntime } from "../../runner/taskRuntime.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { diagnoseTask } from "../tasks/diagnoseTask.js";
 export function safeStatus(taskId, config) {
     const cfg = config || getConfig();
     const tasksDir = getTasksDir(cfg);

package/dist/tools/{safeViews.d.ts → diagnostics/safeViews.d.ts}

@@ -2,6 +2,7 @@ export interface SafeViewOptions {
     max_items?: number;
 }
 export declare function safeResult(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
     status: string;
     terminal: boolean;
@@ -32,6 +33,7 @@ export declare function safeResult(taskId: string, options?: SafeViewOptions): {
     redaction_categories: string[];
 };
 export declare function safeTestSummary(taskId: string): {
+    schema_version: string;
     task_id: string;
     status: string;
     command_count: number;
@@ -41,19 +43,20 @@ export declare function safeTestSummary(taskId: string): {
     commands: {
         command: string;
         status: string;
-        exit_code: any;
+        exit_code: {} | null;
         duration_ms: number;
     }[];
     headline: string;
 };
 export declare function safeDiffSummary(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
     changed_files_total: number;
     additions: number;
     deletions: number;
     diff_available: boolean;
     diff_truncated: boolean;
-    patch_mode: any;
+    patch_mode: {} | null;
     files: {
         path: string;
         old_path: string | null;
@@ -62,13 +65,14 @@ export declare function safeDiffSummary(taskId: string, options?: SafeViewOption
         tracked: boolean;
         ignored: boolean;
     }[];
-    artifact_hygiene_counts: Record<string, any>;
+    artifact_hygiene_counts: Record<string, unknown>;
     large_diff_omitted: boolean;
     truncated: boolean;
 };
 export declare function safeAudit(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
-    verdict: "pass" | "warn" | "fail";
+    verdict: "warn" | "pass" | "fail";
     acceptance: {
         verdict: string;
         status: string;
@@ -84,17 +88,17 @@ export declare function safeAudit(taskId: string, options?: SafeViewOptions): {
     };
     checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     fail_checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     warn_checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     possible_false_positives: {
@@ -238,7 +242,7 @@ export declare function safeFinalizeDirectSession(sessionId: string, options?: S
 }>;
 export declare function safeAuditDirectSession(sessionId: string, options?: SafeViewOptions): {
     session_id: string;
-    decision: "pass" | "warn" | "fail";
+    decision: "warn" | "pass" | "fail";
     reason_codes: string[];
     blocking_findings: string[];
     warnings: string[];

package/dist/tools/{safeViews.js → diagnostics/safeViews.js}

@@ -1,17 +1,19 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { getConfig, getTasksDir } from "../config.js";
+import { getConfig, getTasksDir } from "../../config.js";
 import { auditSession } from "./auditSession.js";
 import { auditTask } from "./auditTask.js";
-import { finalizeDirectSession } from "./finalizeDirectSession.js";
-import { getTaskSummary } from "./getTaskSummary.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { redactSensitiveValue } from "../security/contentRedaction.js";
-import { readDirectSession } from "../direct/directSessionStore.js";
+import { finalizeDirectSession } from "../direct/finalizeDirectSession.js";
+import { getTaskSummary } from "../tasks/getTaskSummary.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { redactSensitiveValue } from "../../security/contentRedaction.js";
+import { readDirectSession } from "../../direct/directSessionStore.js";
+import { ARTIFACT_SCHEMA_VERSION } from "../../version.js";
 export function safeResult(taskId, options = {}) {
     const maxItems = normalizeMaxItems(options.max_items);
     const summary = getTaskSummary(taskId, { view: "compact", max_items: maxItems });
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: summary.task_id,
         status: summary.status,
         terminal: summary.terminal,
@@ -39,13 +41,17 @@ export function safeTestSummary(taskId) {
     const { taskDir, config } = getTaskDir(taskId);
     const verify = readJson(join(taskDir, "verify.json"), config);
     const summary = getTaskSummary(taskId, { view: "compact", max_items: 8 });
-    const commands = asArray(verify.commands).map((entry) => ({
-        command: String(entry.command || ""),
-        status: String(entry.status || "unknown"),
-        exit_code: entry.exit_code ?? null,
-        duration_ms: Number(entry.duration_ms || 0),
-    }));
+    const commands = asArray(verify.commands).map((entry) => {
+        const command = asRecord(entry);
+        return {
+            command: String(command.command || ""),
+            status: String(command.status || "unknown"),
+            exit_code: command.exit_code ?? null,
+            duration_ms: Number(command.duration_ms || 0),
+        };
+    });
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: taskId,
         status: String(verify.status || summary.verification_summary.status || "not_available"),
         command_count: commands.length,
@@ -63,6 +69,7 @@ export function safeDiffSummary(taskId, options = {}) {
     const changedFiles = asArray(changes.changed_files);
     const hygiene = asRecord(changes.artifact_hygiene);
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: taskId,
         changed_files_total: changedFiles.length,
         additions: Number(changes.additions || 0),
@@ -128,6 +135,7 @@ function auditToSafe(audit, maxItems) {
         detail: truncate(check.detail, 240),
     }));
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: audit.task_id,
         verdict: audit.verdict,
         acceptance: {
@@ -239,7 +247,9 @@ function asArray(value) {
     return Array.isArray(value) ? value : [];
 }
 function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
 }
 function limitStrings(values, maxItems) {
     return values.slice(0, maxItems).map((value) => truncate(value, 240));

package/dist/tools/{schemaDriftCheck.d.ts → diagnostics/schemaDriftCheck.d.ts}

@@ -6,7 +6,7 @@
  *
  * 本模块只做检测和报告，不做运行时阻断。
  */
-import type { PatchWardenToolMeta } from "./toolRegistry.js";
+import type { PatchWardenToolMeta } from "../catalog/toolRegistry.js";
 export interface SchemaDriftResult {
     /** true 表示无 drift，false 表示有 drift */
     ok: boolean;

package/dist/tools/{schemaDriftCheck.js → diagnostics/schemaDriftCheck.js}

@@ -6,8 +6,8 @@
  *
  * 本模块只做检测和报告，不做运行时阻断。
  */
-import { computeSchemaDigest } from "./toolRegistry.js";
-import { CHATGPT_CORE_TOOL_NAMES } from "./toolCatalog.js";
+import { computeSchemaDigest } from "../catalog/toolRegistry.js";
+import { CHATGPT_CORE_TOOL_NAMES } from "../catalog/toolCatalog.js";
 /** chatgpt_core profile 的预期工具数（来自 CHATGPT_CORE_TOOL_NAMES）。 */
 const EXPECTED_CORE_COUNT = CHATGPT_CORE_TOOL_NAMES.length;
 // ── 检查 1: registry schema digest 一致性 ─────────────────────────

package/dist/tools/{createDirectSession.js → direct/createDirectSession.js}

@@ -1,10 +1,10 @@
 import { existsSync, statSync } from "node:fs";
-import { getConfig } from "../config.js";
-import { PatchWardenError } from "../errors.js";
-import { guardWorkspacePath } from "../security/pathGuard.js";
-import { guardRuntimeSelfModification } from "../security/runtimeGuard.js";
-import { captureRepoSnapshot } from "../runner/changeCapture.js";
-import { createDirectSession as createDirectSessionRecord, } from "../direct/directSessionStore.js";
+import { getConfig } from "../../config.js";
+import { PatchWardenError } from "../../errors.js";
+import { guardWorkspacePath } from "../../security/pathGuard.js";
+import { guardRuntimeSelfModification } from "../../security/runtimeGuard.js";
+import { captureRepoSnapshot } from "../../runner/changeCapture.js";
+import { createDirectSession as createDirectSessionRecord, } from "../../direct/directSessionStore.js";
 // ── Tool implementation ────────────────────────────────────────────
 export async function createDirectSession(input) {
     const config = getConfig();

package/dist/tools/{finalizeDirectSession.d.ts → direct/finalizeDirectSession.d.ts}

@@ -1,4 +1,4 @@
-import { type ClassifiedChange } from "../runner/changeCapture.js";
+import { type ClassifiedChange } from "../../runner/changeCapture.js";
 export interface FinalizeDirectSessionInput {
     session_id: string;
 }

package/dist/tools/direct/finalizeDirectSession.js

@@ -0,0 +1,86 @@
+import { join, resolve, relative, isAbsolute } from "node:path";
+import { readDirectSession, finalizeDirectSessionRecord, getDirectSessionDir, withDirectSessionMutationLockAsync, } from "../../direct/directSessionStore.js";
+import { guardDirectSessionActive } from "../../direct/directGuards.js";
+import { captureRepoSnapshot, buildChangeArtifacts, } from "../../runner/changeCapture.js";
+// ── Main function ──────────────────────────────────────────────────
+export async function finalizeDirectSession(input) {
+    const { session_id } = input;
+    return withDirectSessionMutationLockAsync(session_id, async () => {
+        // 1. Read session and guard active (not expired, not finalized)
+        const session = readDirectSession(session_id);
+        guardDirectSessionActive(session);
+        // 2. Capture after snapshot
+        const afterSnapshot = await captureRepoSnapshot(session.resolved_repo_path);
+        // 3. Build change artifacts from before/after snapshots
+        const changeArtifacts = await buildChangeArtifacts(session.resolved_repo_path, session.workspace_snapshot_before, afterSnapshot);
+        // 4. Finalize session record — writes changed-files.json, diff.patch,
+        //    summary.json, summary.md and marks the session as finalized.
+        finalizeDirectSessionRecord(session_id, changeArtifacts);
+        // 5. Build verification summary from session.verification_runs
+        const verification_summary = {};
+        for (const run of session.verification_runs) {
+            verification_summary[run.command] = run.passed ? "passed" : "failed";
+        }
+        // 6. Identify out-of-scope changes (paths outside resolved_repo_path)
+        const out_of_scope_changes = findOutOfScopeChanges(changeArtifacts, session.resolved_repo_path);
+        // 7. Build compact summary with categorized changes
+        const sessionDir = getDirectSessionDir(session_id);
+        return {
+            session_id,
+            changed_files_total: changeArtifacts.changed_files.length,
+            source_changes: changeArtifacts.artifact_hygiene.source_changes,
+            tracked_build_artifacts: changeArtifacts.artifact_hygiene.tracked_build_artifacts,
+            runtime_generated_files: changeArtifacts.artifact_hygiene.runtime_generated_files,
+            suspicious_changes: changeArtifacts.artifact_hygiene.suspicious_changes,
+            out_of_scope_changes,
+            verification_summary,
+            diff_path: join(sessionDir, "diff.patch"),
+            summary_path: join(sessionDir, "summary.md"),
+            finalized: true,
+            next_action: "Call audit_session to independently review the changes.",
+        };
+    });
+}
+// ── Helpers ────────────────────────────────────────────────────────
+/**
+ * Filter changeArtifacts.changed_files for paths that resolve outside the
+ * session's resolved_repo_path and map them to ClassifiedChange format.
+ */
+function findOutOfScopeChanges(artifacts, resolvedRepoPath) {
+    const normalizedRepo = resolve(resolvedRepoPath);
+    return artifacts.changed_files
+        .filter((file) => {
+        const fullPath = resolve(normalizedRepo, file.path);
+        const rel = relative(normalizedRepo, fullPath);
+        return isAbsolute(rel) || rel.startsWith("..");
+    })
+        .map((file) => toClassifiedChange(file));
+}
+/**
+ * Map a ChangedFile to the ClassifiedChange format by adding a reason string.
+ */
+function toClassifiedChange(file) {
+    return {
+        path: file.path,
+        change: file.change,
+        tracked: file.tracked,
+        ignored: file.ignored,
+        kind: file.kind,
+        reason: classificationReason(file),
+    };
+}
+/**
+ * Produce a human-readable reason for a changed file classification.
+ * Mirrors the logic in changeCapture.ts classifyArtifactHygiene.
+ */
+function classificationReason(change) {
+    if (change.ignored)
+        return "untracked path is ignored by repository Git rules";
+    if (change.kind === "build_artifact" && change.tracked)
+        return "artifact-like path is tracked by Git and requires review";
+    if (change.kind === "build_artifact")
+        return "artifact-like path is not ignored and requires review";
+    if (change.kind === "runtime_generated")
+        return "runtime-generated path is not ignored and requires review";
+    return change.tracked ? "tracked source change" : "untracked source change";
+}

package/dist/tools/direct/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./createDirectSession.js";
+export * from "./finalizeDirectSession.js";
+export * from "./runDirectVerificationBundle.js";

package/dist/tools/direct/index.js

@@ -0,0 +1,3 @@
+export * from "./createDirectSession.js";
+export * from "./finalizeDirectSession.js";
+export * from "./runDirectVerificationBundle.js";