patchwarden 1.5.1 → 1.6.1

package/src/tools/{auditSession.ts → diagnostics/auditSession.ts}

@@ -1,8 +1,8 @@
 import {
   auditDirectSession,
   type DirectSessionAuditOutput,
-} from "../direct/directAudit.js";
-import { updateDirectSession } from "../direct/directSessionStore.js";
+} from "../../direct/directAudit.js";
+import { updateDirectSession } from "../../direct/directSessionStore.js";
 
 // ── Types ──────────────────────────────────────────────────────────
 

package/src/tools/{auditTask.ts → diagnostics/auditTask.ts}

@@ -31,14 +31,20 @@ export interface AuditTaskOutput {
   manual_verification_items: string[];
   recommended_next_actions: string[];
 }
-import { readFileSync, existsSync, writeFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, existsSync, opendirSync, statSync } from "node:fs";
 import { join, resolve, relative, basename, sep, isAbsolute } from "node:path";
-import { getTasksDir, getConfig } from "../config.js";
-import { guardReadPath, guardWorkspacePath } from "../security/pathGuard.js";
-import { guardSensitivePath, isSensitivePath } from "../security/sensitiveGuard.js";
-import { evaluateAcceptance } from "../goal/acceptanceEngine.js";
-import { renderAcceptanceMarkdown } from "../goal/acceptanceTemplate.js";
-import type { ChangedFile } from "../runner/changeCapture.js";
+import { getTasksDir, getConfig } from "../../config.js";
+import { guardReadPath, guardWorkspacePath } from "../../security/pathGuard.js";
+import { guardSensitivePath, isSensitivePath } from "../../security/sensitiveGuard.js";
+import { evaluateAcceptance } from "../../goal/acceptanceEngine.js";
+import { renderAcceptanceMarkdown } from "../../goal/acceptanceTemplate.js";
+import type { ChangedFile } from "../../runner/changeCapture.js";
+import { atomicWriteFileSync } from "../../utils/atomicFile.js";
+import { mutateTaskStatus } from "../../runner/taskStatusStore.js";
+import {
+  readTextFilePrefixSync,
+  readTextFileTailLinesSync,
+} from "../../utils/boundedFile.js";
 
 interface ExtractedCommand {
   type: "npm-run" | "npm-bare" | "node" | "npx" | "python";
@@ -86,6 +92,10 @@ const RELEASE_PATTERNS = [
     /npm\s+publish\s+completed/i,
     /deploy(ed|ment)?\s+(to|on)\s+(npm|registry|github)/i,
 ];
+const MAX_AUDIT_DOC_FILES = 200;
+const MAX_AUDIT_DOC_FILE_BYTES = 512 * 1024;
+const MAX_AUDIT_DOC_TOTAL_BYTES = 4 * 1024 * 1024;
+const MAX_AUDIT_EVIDENCE_BYTES = 1024 * 1024;
 function scanForReleaseClaims(text: string): string[] {
     const found: string[] = [];
     for (const pattern of RELEASE_PATTERNS) {
@@ -95,24 +105,50 @@ function scanForReleaseClaims(text: string): string[] {
     }
     return found;
 }
-function findMdFiles(dir: string, maxDepth = 3): string[] {
+function findMdFiles(
+    dir: string,
+    maxDepth = 3,
+    maxFiles = MAX_AUDIT_DOC_FILES,
+): { files: string[]; truncated: boolean } {
     const results: string[] = [];
-    if (!existsSync(dir) || maxDepth <= 0)
-        return results;
-    try {
-        const entries = readdirSync(dir, { withFileTypes: true });
-        for (const e of entries) {
-            const full = join(dir, e.name);
-            if (e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules") {
-                results.push(...findMdFiles(full, maxDepth - 1));
-            }
-            else if (e.isFile() && e.name.endsWith(".md")) {
-                results.push(full);
+    const pending = [{ path: dir, depth: maxDepth }];
+    const maxDirectories = maxFiles * 4;
+    let visitedDirectories = 0;
+    let truncated = false;
+    while (pending.length > 0 && results.length < maxFiles && visitedDirectories < maxDirectories) {
+        const current = pending.pop()!;
+        if (!existsSync(current.path) || current.depth <= 0) continue;
+        visitedDirectories += 1;
+        let handle;
+        try {
+            handle = opendirSync(current.path);
+            while (results.length < maxFiles) {
+                const entry = handle.readSync();
+                if (!entry) break;
+                const full = join(current.path, entry.name);
+                if (entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules") {
+                    if (pending.length < maxDirectories) pending.push({ path: full, depth: current.depth - 1 });
+                    else truncated = true;
+                } else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
+                    results.push(full);
+                }
             }
-        }
+        } catch { /* skip unreadable dirs */ }
+        finally { try { handle?.closeSync(); } catch { /* best effort */ } }
     }
-    catch { /* skip unreadable dirs */ }
-    return results;
+    truncated ||= pending.length > 0 || results.length >= maxFiles || visitedDirectories >= maxDirectories;
+    return { files: results, truncated };
+}
+
+function readAuditEvidence(path: string): { content: string; truncated: boolean } {
+    const half = Math.floor(MAX_AUDIT_EVIDENCE_BYTES / 2);
+    const prefix = readTextFilePrefixSync(path, half);
+    if (!prefix.truncated) return { content: prefix.content, truncated: false };
+    const tail = readTextFileTailLinesSync(path, 1000, half);
+    return {
+        content: `${prefix.content}\n[...audit evidence truncated...]\n${tail}`,
+        truncated: true,
+    };
 }
 // ── v0.7.2: New audit checks (exported for testing) ────────────────
 /**
@@ -659,20 +695,35 @@ export function auditTask(taskId: string): AuditTaskOutput {
     if (existsSync(readmePath))
         docsToScan.push(readmePath);
     const docsDir = join(repoPathSafe, "docs");
+    let markdownEnumerationTruncated = false;
     if (existsSync(docsDir)) {
-        docsToScan.push(...findMdFiles(docsDir));
+        const markdown = findMdFiles(docsDir);
+        docsToScan.push(...markdown.files);
+        markdownEnumerationTruncated = markdown.truncated;
     }
     // Collect all npm run references from all docs
     const allNpmRunRefs = new Set<string>();
     const allReleaseClaims: string[] = [];
+    let remainingDocBytes = MAX_AUDIT_DOC_TOTAL_BYTES;
+    let documentScanTruncated = markdownEnumerationTruncated || docsToScan.length > MAX_AUDIT_DOC_FILES;
     for (const docPath of docsToScan) {
+        if (remainingDocBytes <= 0) {
+            documentScanTruncated = true;
+            break;
+        }
         let content: string;
         try {
             if (docPath !== resultFile) {
                 guardReadPath(docPath, config.workspaceRoot);
                 guardSensitivePath(docPath);
             }
-            content = readFileSync(docPath, "utf-8");
+            const bounded = readTextFilePrefixSync(
+                docPath,
+                Math.min(MAX_AUDIT_DOC_FILE_BYTES, remainingDocBytes),
+            );
+            content = bounded.content;
+            remainingDocBytes -= Buffer.byteLength(content, "utf-8");
+            documentScanTruncated ||= bounded.truncated;
         }
         catch {
             continue;
@@ -689,6 +740,14 @@ export function auditTask(taskId: string): AuditTaskOutput {
         for (const c of claims)
             allReleaseClaims.push(`[${relative(repoPathSafe, docPath) || docPath}] ${c}`);
     }
+    if (documentScanTruncated) {
+        checks.push({
+            name: "documentation_scan_bounded",
+            result: "warn",
+            detail: `Documentation scan reached its ${MAX_AUDIT_DOC_FILES}-file or ${MAX_AUDIT_DOC_TOTAL_BYTES}-byte safety budget.`,
+        });
+        addManualVerification("Review documentation omitted by the bounded audit scan.");
+    }
     // Cross-check npm run refs against package.json scripts
     for (const scriptName of allNpmRunRefs) {
         if (pkgScripts.length > 0 && !pkgScripts.includes(scriptName)) {
@@ -735,7 +794,9 @@ export function auditTask(taskId: string): AuditTaskOutput {
     if (hasTestLog) {
         let logContent: string;
         try {
-            logContent = readFileSync(testLogFile, "utf-8");
+            const evidence = readAuditEvidence(testLogFile);
+            logContent = evidence.content;
+            if (evidence.truncated) addManualVerification("test.log exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             logContent = "";
@@ -773,7 +834,9 @@ export function auditTask(taskId: string): AuditTaskOutput {
     let resultMdContent: string | null = null;
     if (hasResult) {
         try {
-            resultMdContent = readFileSync(resultFile, "utf-8");
+            const evidence = readAuditEvidence(resultFile);
+            resultMdContent = evidence.content;
+            if (evidence.truncated) addManualVerification("result.md exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             resultMdContent = null;
@@ -841,7 +904,7 @@ export function auditTask(taskId: string): AuditTaskOutput {
         "## Recommended Actions",
         ...actions.map((a) => `- ${a}`),
     ].join("\n");
-    writeFileSync(join(taskDir, "independent-review.md"), reviewMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "independent-review.md"), reviewMd);
     // ── v0.7.2: 集成 acceptanceEngine ──
     const releaseClaimsUnverified = allReleaseClaims.length > 0;
     const acceptanceEvidence = {
@@ -878,16 +941,20 @@ export function auditTask(taskId: string): AuditTaskOutput {
     const acceptanceResult = evaluateAcceptance(acceptanceEvidence);
     // 回写 status.json 的 acceptance_status（仅对 done_by_agent 有意义）
     if (taskStatus === "done_by_agent") {
-        const updatedStatus = {
-            ...statusData,
+        const statusPatch = {
             acceptance_status: acceptanceResult.acceptance_status,
-            updated_at: new Date().toISOString(),
         };
-        writeFileSync(statusFile, JSON.stringify(updatedStatus, null, 2), "utf-8");
+        mutateTaskStatus(statusFile, (current) => {
+            if (current.status !== "done_by_agent") {
+                return { result: current };
+            }
+            const next = { ...current, ...statusPatch, updated_at: new Date().toISOString() };
+            return { next, result: next };
+        });
     }
     // 导出 ACCEPTANCE.md
     const acceptanceMd = renderAcceptanceMarkdown(taskId, acceptanceResult, acceptanceEvidence);
-    writeFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd);
     return {
         task_id: taskId,
         verdict,

package/src/tools/{healthCheck.ts → diagnostics/healthCheck.ts}

@@ -1,14 +1,14 @@
 import { accessSync, constants, existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
-import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../config.js";
-import { listAgents } from "./listAgents.js";
-import { redactSensitiveContent, redactSensitiveValue } from "../security/contentRedaction.js";
-import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../version.js";
-import type { ToolCatalogSnapshot } from "./toolCatalog.js";
-import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "./toolCatalog.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { listTasks } from "./listTasks.js";
+import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../../config.js";
+import { listAgents } from "../workspace/listAgents.js";
+import { redactSensitiveContent, redactSensitiveValue } from "../../security/contentRedaction.js";
+import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../../version.js";
+import type { ToolCatalogSnapshot } from "../catalog/toolCatalog.js";
+import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "../catalog/toolCatalog.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { listTasks } from "../tasks/listTasks.js";
 
 const SERVER_STARTED_AT = Date.now();
 

package/src/tools/diagnostics/index.ts

@@ -0,0 +1,6 @@
+export * from "./auditSession.js";
+export * from "./auditTask.js";
+export * from "./healthCheck.js";
+export * from "./safeStatus.js";
+export * from "./safeViews.js";
+export * from "./schemaDriftCheck.js";

package/src/tools/{safeStatus.ts → diagnostics/safeStatus.ts}

@@ -1,12 +1,12 @@
 import { readFileSync, existsSync } from "node:fs";
 import { resolve, join } from "node:path";
-import { getTasksDir, getConfig, type PatchWardenConfig } from "../config.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { guardSensitivePath } from "../security/sensitiveGuard.js";
-import type { TaskStatus, TaskPhase, AcceptanceStatus } from "./createTask.js";
-import { readTaskRuntime } from "../taskRuntime.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { diagnoseTask, type DiagnosisType, type DiagnosisConfidence } from "./diagnoseTask.js";
+import { getTasksDir, getConfig, type PatchWardenConfig } from "../../config.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { guardSensitivePath } from "../../security/sensitiveGuard.js";
+import type { TaskStatus, TaskPhase, AcceptanceStatus } from "../tasks/createTask.js";
+import { readTaskRuntime } from "../../runner/taskRuntime.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { diagnoseTask, type DiagnosisType, type DiagnosisConfidence } from "../tasks/diagnoseTask.js";
 
 export interface SafeStatusOutput {
   task_id: string;

package/src/tools/{safeViews.ts → diagnostics/safeViews.ts}

@@ -1,14 +1,15 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { getConfig, getTasksDir } from "../config.js";
+import { getConfig, getTasksDir } from "../../config.js";
 import { auditSession } from "./auditSession.js";
 import { auditTask, type AuditTaskOutput } from "./auditTask.js";
-import { finalizeDirectSession } from "./finalizeDirectSession.js";
-import { getTaskSummary } from "./getTaskSummary.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { redactSensitiveValue } from "../security/contentRedaction.js";
-import { readDirectSession, type DirectSessionRecord, type DirectSessionVerificationRun } from "../direct/directSessionStore.js";
-import type { ChangedFile, ClassifiedChange } from "../runner/changeCapture.js";
+import { finalizeDirectSession } from "../direct/finalizeDirectSession.js";
+import { getTaskSummary } from "../tasks/getTaskSummary.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { redactSensitiveValue } from "../../security/contentRedaction.js";
+import { readDirectSession, type DirectSessionRecord, type DirectSessionVerificationRun } from "../../direct/directSessionStore.js";
+import type { ChangedFile, ClassifiedChange } from "../../runner/changeCapture.js";
+import { ARTIFACT_SCHEMA_VERSION } from "../../version.js";
 
 export interface SafeViewOptions {
   max_items?: number;
@@ -18,6 +19,7 @@ export function safeResult(taskId: string, options: SafeViewOptions = {}) {
   const maxItems = normalizeMaxItems(options.max_items);
   const summary = getTaskSummary(taskId, { view: "compact", max_items: maxItems });
   return redact({
+    schema_version: ARTIFACT_SCHEMA_VERSION,
     task_id: summary.task_id,
     status: summary.status,
     terminal: summary.terminal,
@@ -46,13 +48,17 @@ export function safeTestSummary(taskId: string) {
   const { taskDir, config } = getTaskDir(taskId);
   const verify = readJson(join(taskDir, "verify.json"), config);
   const summary = getTaskSummary(taskId, { view: "compact", max_items: 8 });
-  const commands = asArray(verify.commands).map((entry: any) => ({
-    command: String(entry.command || ""),
-    status: String(entry.status || "unknown"),
-    exit_code: entry.exit_code ?? null,
-    duration_ms: Number(entry.duration_ms || 0),
-  }));
+  const commands = asArray(verify.commands).map((entry) => {
+    const command = asRecord(entry);
+    return {
+      command: String(command.command || ""),
+      status: String(command.status || "unknown"),
+      exit_code: command.exit_code ?? null,
+      duration_ms: Number(command.duration_ms || 0),
+    };
+  });
   return redact({
+    schema_version: ARTIFACT_SCHEMA_VERSION,
     task_id: taskId,
     status: String(verify.status || summary.verification_summary.status || "not_available"),
     command_count: commands.length,
@@ -71,6 +77,7 @@ export function safeDiffSummary(taskId: string, options: SafeViewOptions = {}) {
   const changedFiles = asArray(changes.changed_files) as ChangedFile[];
   const hygiene = asRecord(changes.artifact_hygiene);
   return redact({
+    schema_version: ARTIFACT_SCHEMA_VERSION,
     task_id: taskId,
     changed_files_total: changedFiles.length,
     additions: Number(changes.additions || 0),
@@ -141,6 +148,7 @@ function auditToSafe(audit: AuditTaskOutput, maxItems: number) {
     detail: truncate(check.detail, 240),
   }));
   return redact({
+    schema_version: ARTIFACT_SCHEMA_VERSION,
     task_id: audit.task_id,
     verdict: audit.verdict,
     acceptance: {
@@ -233,7 +241,7 @@ function getTaskDir(taskId: string) {
   return { config, taskDir };
 }
 
-function readJson(path: string, config: ReturnType<typeof getConfig>): Record<string, any> {
+function readJson(path: string, config: ReturnType<typeof getConfig>): Record<string, unknown> {
   guardReadPath(path, config.workspaceRoot, config.tasksDir);
   if (!existsSync(path)) return {};
   try {
@@ -252,12 +260,14 @@ function normalizeMaxItems(value: number | undefined): number {
   return value;
 }
 
-function asArray(value: unknown): any[] {
+function asArray(value: unknown): unknown[] {
   return Array.isArray(value) ? value : [];
 }
 
-function asRecord(value: unknown): Record<string, any> {
-  return value && typeof value === "object" && !Array.isArray(value) ? value as Record<string, any> : {};
+function asRecord(value: unknown): Record<string, unknown> {
+  return value && typeof value === "object" && !Array.isArray(value)
+    ? value as Record<string, unknown>
+    : {};
 }
 
 function limitStrings(values: string[], maxItems: number): string[] {

package/src/tools/{schemaDriftCheck.ts → diagnostics/schemaDriftCheck.ts}

@@ -7,9 +7,9 @@
  * 本模块只做检测和报告，不做运行时阻断。
  */
 
-import { computeSchemaDigest } from "./toolRegistry.js";
-import type { PatchWardenToolMeta } from "./toolRegistry.js";
-import { CHATGPT_CORE_TOOL_NAMES } from "./toolCatalog.js";
+import { computeSchemaDigest } from "../catalog/toolRegistry.js";
+import type { PatchWardenToolMeta } from "../catalog/toolRegistry.js";
+import { CHATGPT_CORE_TOOL_NAMES } from "../catalog/toolCatalog.js";
 
 // ── 结果类型 ──────────────────────────────────────────────────────
 

package/src/tools/{createDirectSession.ts → direct/createDirectSession.ts}

@@ -1,12 +1,12 @@
 import { existsSync, statSync } from "node:fs";
-import { getConfig } from "../config.js";
-import { PatchWardenError } from "../errors.js";
-import { guardWorkspacePath } from "../security/pathGuard.js";
-import { guardRuntimeSelfModification } from "../security/runtimeGuard.js";
-import { captureRepoSnapshot } from "../runner/changeCapture.js";
+import { getConfig } from "../../config.js";
+import { PatchWardenError } from "../../errors.js";
+import { guardWorkspacePath } from "../../security/pathGuard.js";
+import { guardRuntimeSelfModification } from "../../security/runtimeGuard.js";
+import { captureRepoSnapshot } from "../../runner/changeCapture.js";
 import {
   createDirectSession as createDirectSessionRecord,
-} from "../direct/directSessionStore.js";
+} from "../../direct/directSessionStore.js";
 
 // ── Types ──────────────────────────────────────────────────────────
 

package/src/tools/{finalizeDirectSession.ts → direct/finalizeDirectSession.ts}

@@ -1,18 +1,18 @@
 import { join, resolve, relative, isAbsolute } from "node:path";
 import {
   readDirectSession,
-  updateDirectSession,
   finalizeDirectSessionRecord,
   getDirectSessionDir,
-} from "../direct/directSessionStore.js";
-import { guardDirectSessionActive } from "../direct/directGuards.js";
+  withDirectSessionMutationLockAsync,
+} from "../../direct/directSessionStore.js";
+import { guardDirectSessionActive } from "../../direct/directGuards.js";
 import {
   captureRepoSnapshot,
   buildChangeArtifacts,
   type ChangeArtifacts,
   type ClassifiedChange,
   type ChangedFile,
-} from "../runner/changeCapture.js";
+} from "../../runner/changeCapture.js";
 
 // ── Types ──────────────────────────────────────────────────────────
 
@@ -41,6 +41,7 @@ export async function finalizeDirectSession(
   input: FinalizeDirectSessionInput
 ): Promise<FinalizeDirectSessionOutput> {
   const { session_id } = input;
+  return withDirectSessionMutationLockAsync(session_id, async () => {
 
   // 1. Read session and guard active (not expired, not finalized)
   const session = readDirectSession(session_id);
@@ -58,7 +59,7 @@ export async function finalizeDirectSession(
 
   // 4. Finalize session record — writes changed-files.json, diff.patch,
   //    summary.json, summary.md and marks the session as finalized.
-  finalizeDirectSessionRecord(session_id, afterSnapshot, changeArtifacts);
+  finalizeDirectSessionRecord(session_id, changeArtifacts);
 
   // 5. Build verification summary from session.verification_runs
   const verification_summary: Record<string, "passed" | "failed"> = {};
@@ -91,6 +92,7 @@ export async function finalizeDirectSession(
     finalized: true,
     next_action: "Call audit_session to independently review the changes.",
   };
+  });
 }
 
 // ── Helpers ────────────────────────────────────────────────────────

package/src/tools/direct/index.ts

@@ -0,0 +1,3 @@
+export * from "./createDirectSession.js";
+export * from "./finalizeDirectSession.js";
+export * from "./runDirectVerificationBundle.js";

package/src/tools/{runDirectVerificationBundle.ts → direct/runDirectVerificationBundle.ts}

@@ -1,5 +1,5 @@
-import { getConfig } from "../config.js";
-import { runVerification } from "./runVerification.js";
+import { getConfig } from "../../config.js";
+import { runVerification } from "../tasks/runVerification.js";
 
 export interface RunDirectVerificationBundleInput {
   session_id: string;

package/src/tools/{discoverTools.ts → discovery/discoverTools.ts}

@@ -8,12 +8,12 @@
  */
 
 import { join } from "node:path";
-import type { ToolDef } from "./registry.js";
-import { buildToolRegistry, type PatchWardenToolMeta } from "./toolRegistry.js";
-import { discoverTools as searchDiscover, type DiscoverToolsInput } from "./toolSearch.js";
-import { issueToken } from "../security/discoveryTokenStore.js";
-import { aggregateUsageStats, type ToolUsageStats } from "./toolUsageStats.js";
-import { getConfig } from "../config.js";
+import type { ToolDef } from "../registry.js";
+import { buildToolRegistry, type PatchWardenToolMeta } from "../catalog/toolRegistry.js";
+import { discoverTools as searchDiscover, type DiscoverToolsInput } from "../catalog/toolSearch.js";
+import { issueToken } from "../../security/discoveryTokenStore.js";
+import { aggregateUsageStats, type ToolUsageStats } from "../catalog/toolUsageStats.js";
+import { getConfig } from "../../config.js";
 
 export function discoverTools(
   input: DiscoverToolsInput,

package/src/tools/{explainTool.ts → discovery/explainTool.ts}

@@ -7,9 +7,9 @@
  *         检测 registry 与实际 toolDef 之间的 schema drift。
  */
 
-import type { ToolDef } from "./registry.js";
-import { buildToolRegistry, computeSchemaDigest, type PatchWardenToolMeta } from "./toolRegistry.js";
-import { explainTool as searchExplain, type ExplainToolInput } from "./toolSearch.js";
+import type { ToolDef } from "../registry.js";
+import { buildToolRegistry, computeSchemaDigest, type PatchWardenToolMeta } from "../catalog/toolRegistry.js";
+import { explainTool as searchExplain, type ExplainToolInput } from "../catalog/toolSearch.js";
 
 export function explainTool(
   input: ExplainToolInput,

package/src/tools/discovery/index.ts

@@ -0,0 +1,3 @@
+export * from "./discoverTools.js";
+export * from "./explainTool.js";
+export * from "./invokeDiscoveredTool.js";

package/src/tools/{invokeDiscoveredTool.ts → discovery/invokeDiscoveredTool.ts}

@@ -7,13 +7,13 @@
  * 任一环节失败都记审计日志并返回错误结果，不向上层抛错。
  */
 
-import { consumeToken, type DiscoveryTokenRecord } from "../security/discoveryTokenStore.js";
-import { checkInvocation } from "../security/toolInvocationGuard.js";
-import { logToolInvocation, computeArgumentsDigest } from "../logging.js";
-import { buildToolRegistry, type PatchWardenToolMeta } from "./toolRegistry.js";
-import type { ToolProfile } from "./toolCatalog.js";
-import type { ToolDef } from "./registry.js";
-import { PatchWardenError } from "../errors.js";
+import { consumeToken, type DiscoveryTokenRecord } from "../../security/discoveryTokenStore.js";
+import { checkInvocation } from "../../security/toolInvocationGuard.js";
+import { logToolInvocation, computeArgumentsDigest } from "../../logging.js";
+import { buildToolRegistry, type PatchWardenToolMeta } from "../catalog/toolRegistry.js";
+import type { ToolProfile } from "../catalog/toolCatalog.js";
+import type { ToolDef } from "../registry.js";
+import { PatchWardenError } from "../../errors.js";
 
 // ── 类型定义 ──────────────────────────────────────────────────────
 

package/src/tools/dispatch/coreDispatch.ts

@@ -5,39 +5,44 @@
  * rewritten. Extracted from the original handleToolCallInternal switch.
  */
 
-import { savePlan } from "../savePlan.js";
-import { getPlan } from "../getPlan.js";
-import { createTask } from "../createTask.js";
-import { getTaskStatus } from "../getTaskStatus.js";
-import { getResult, getResultJson, getDiff, getTestLog, getTaskLogTail } from "../taskOutputs.js";
-import { listWorkspace } from "../listWorkspace.js";
-import { readWorkspaceFile } from "../readWorkspaceFile.js";
-import { listTasks } from "../listTasks.js";
-import { cancelTask } from "../cancelTask.js";
-import { killTask } from "../killTask.js";
-import { retryTask } from "../retryTask.js";
-import { getTaskStdoutTail } from "../getTaskStdoutTail.js";
-import { getTaskProgress } from "../getTaskProgress.js";
-import { listAgents } from "../listAgents.js";
-import { healthCheck } from "../healthCheck.js";
-import { getTaskSummary } from "../getTaskSummary.js";
-import { waitForTask } from "../waitForTask.js";
-import { runTaskLoop } from "../runTaskLoop.js";
-import { getTaskLineage } from "../taskLineage.js";
-import { exportTaskEvidencePack } from "../evidencePack.js";
-import { recommendAgentForTask } from "../recommendAgentForTask.js";
-import { auditTask } from "../auditTask.js";
-import { safeStatus } from "../safeStatus.js";
-import { safeAudit, safeDiffSummary, safeResult, safeTestSummary } from "../safeViews.js";
-import { diagnoseTask } from "../diagnoseTask.js";
-import { reconcileTasks } from "../reconcileTasks.js";
-import { checkReleaseGate } from "../checkReleaseGate.js";
-import { getProjectPolicyTool } from "../releaseMode.js";
+import { savePlan } from "../goals/savePlan.js";
+import { getPlan } from "../goals/getPlan.js";
+import { createTask } from "../tasks/createTask.js";
+import { getTaskStatus } from "../tasks/getTaskStatus.js";
+import { getResult, getResultJson, getDiff, getTestLog, getTaskLogTail } from "../tasks/taskOutputs.js";
+import { listWorkspace } from "../workspace/listWorkspace.js";
+import { readWorkspaceFile } from "../workspace/readWorkspaceFile.js";
+import { listTasks } from "../tasks/listTasks.js";
+import { cancelTask } from "../tasks/cancelTask.js";
+import { killTask } from "../tasks/killTask.js";
+import { retryTask } from "../tasks/retryTask.js";
+import { getTaskStdoutTail } from "../tasks/getTaskStdoutTail.js";
+import { getTaskProgress } from "../tasks/getTaskProgress.js";
+import { listAgents } from "../workspace/listAgents.js";
+import { healthCheck } from "../diagnostics/healthCheck.js";
+import { getTaskSummary } from "../tasks/getTaskSummary.js";
+import { waitForTask } from "../tasks/waitForTask.js";
+import { runTaskLoop } from "../tasks/runTaskLoop.js";
+import { getTaskLineage } from "../tasks/taskLineage.js";
+import { exportTaskEvidencePack } from "../tasks/evidencePack.js";
+import { recommendAgentForTask } from "../workspace/recommendAgentForTask.js";
+import { auditTask } from "../diagnostics/auditTask.js";
+import { safeStatus } from "../diagnostics/safeStatus.js";
+import { safeAudit, safeDiffSummary, safeResult, safeTestSummary } from "../diagnostics/safeViews.js";
+import { diagnoseTask } from "../tasks/diagnoseTask.js";
+import { reconcileTasks } from "../tasks/reconcileTasks.js";
+import { checkReleaseGate } from "../release/checkReleaseGate.js";
+import { getProjectPolicyTool } from "../release/releaseMode.js";
 import { runTask } from "../../runner/runTask.js";
 import { getConfig } from "../../config.js";
 import { getToolCatalogSnapshot } from "../registry.js";
 import type { ToolHandlerMap } from "./types.js";
 import { toResult } from "./types.js";
+import {
+  parseOptionalTaskTemplate,
+  parseReleaseStage,
+  parseTaskLogFile,
+} from "./validation.js";
 
 // ── Local helpers (moved verbatim from registry.ts) ───────────────
 
@@ -82,7 +87,7 @@ export const coreHandlers: ToolHandlerMap = {
         plan_id: args?.plan_id ? String(args.plan_id) : undefined,
         inline_plan: args?.inline_plan ? String(args.inline_plan) : undefined,
         plan_title: args?.plan_title ? String(args.plan_title) : undefined,
-        template: args?.template ? (String(args.template) as any) : undefined,
+        template: parseOptionalTaskTemplate(args?.template),
         goal: args?.goal ? String(args.goal) : undefined,
         source_task_id: args?.source_task_id ? String(args.source_task_id) : undefined,
         agent: String(args?.agent ?? ""),
@@ -259,7 +264,7 @@ export const coreHandlers: ToolHandlerMap = {
     return toResult(
       getTaskLogTail(
         String(args?.task_id ?? ""),
-        (args?.file as "stdout" | "stderr" | "test" | "verify") || "stdout",
+        parseTaskLogFile(args?.file),
         {
           lines: args?.lines ? Number(args.lines) : undefined,
           redact: args?.redact !== undefined ? Boolean(args.redact) : undefined,
@@ -349,7 +354,7 @@ export const coreHandlers: ToolHandlerMap = {
     return toResult(
       await checkReleaseGate({
         repo_path: String(args?.repo_path ?? ""),
-        target_stage: String(args?.target_stage ?? "local_ready") as any,
+        target_stage: parseReleaseStage(args?.target_stage),
         package_name: args?.package_name ? String(args.package_name) : undefined,
         version: args?.version ? String(args.version) : undefined,
         github_repo: args?.github_repo ? String(args.github_repo) : undefined,