patchwarden 1.5.1 → 1.6.2

package/dist/tools/{auditSession.d.ts → diagnostics/auditSession.d.ts}

@@ -1,4 +1,4 @@
-import { type DirectSessionAuditOutput } from "../direct/directAudit.js";
+import { type DirectSessionAuditOutput } from "../../direct/directAudit.js";
 export interface AuditSessionInput {
     session_id: string;
 }

package/dist/tools/{auditSession.js → diagnostics/auditSession.js}

@@ -1,5 +1,5 @@
-import { auditDirectSession, } from "../direct/directAudit.js";
-import { updateDirectSession } from "../direct/directSessionStore.js";
+import { auditDirectSession, } from "../../direct/directAudit.js";
+import { updateDirectSession } from "../../direct/directSessionStore.js";
 // ── Main function ──────────────────────────────────────────────────
 export function auditSession(input) {
     const { session_id } = input;

package/dist/tools/{auditTask.d.ts → diagnostics/auditTask.d.ts}

@@ -32,7 +32,8 @@ export interface AuditTaskOutput {
     manual_verification_items: string[];
     recommended_next_actions: string[];
 }
-import type { ChangedFile } from "../runner/changeCapture.js";
+import type { ChangedFile } from "../../runner/changeCapture.js";
+export declare function extractNpmRunScriptNames(content: string): string[];
 /**
  * Check 1: forbidden_scope_violation (fail level).
  * Returns null when no forbidden patterns are configured (skip).

package/dist/tools/{auditTask.js → diagnostics/auditTask.js}

@@ -1,10 +1,13 @@
-import { readFileSync, existsSync, writeFileSync, readdirSync, statSync } from "node:fs";
+import { readFileSync, existsSync, opendirSync, statSync } from "node:fs";
 import { join, resolve, relative, basename, sep, isAbsolute } from "node:path";
-import { getTasksDir, getConfig } from "../config.js";
-import { guardReadPath, guardWorkspacePath } from "../security/pathGuard.js";
-import { guardSensitivePath, isSensitivePath } from "../security/sensitiveGuard.js";
-import { evaluateAcceptance } from "../goal/acceptanceEngine.js";
-import { renderAcceptanceMarkdown } from "../goal/acceptanceTemplate.js";
+import { getTasksDir, getConfig } from "../../config.js";
+import { guardReadPath, guardWorkspacePath } from "../../security/pathGuard.js";
+import { guardSensitivePath, isSensitivePath } from "../../security/sensitiveGuard.js";
+import { evaluateAcceptance } from "../../goal/acceptanceEngine.js";
+import { renderAcceptanceMarkdown } from "../../goal/acceptanceTemplate.js";
+import { atomicWriteFileSync } from "../../utils/atomicFile.js";
+import { mutateTaskStatus } from "../../runner/taskStatusStore.js";
+import { readTextFilePrefixSync, readTextFileTailLinesSync, } from "../../utils/boundedFile.js";
 // Release claim patterns — anything that claims remote publish/release/deploy
 const RELEASE_PATTERNS = [
     /npm\s+package\s+version\s+published/i,
@@ -16,6 +19,10 @@ const RELEASE_PATTERNS = [
     /npm\s+publish\s+completed/i,
     /deploy(ed|ment)?\s+(to|on)\s+(npm|registry|github)/i,
 ];
+const MAX_AUDIT_DOC_FILES = 200;
+const MAX_AUDIT_DOC_FILE_BYTES = 512 * 1024;
+const MAX_AUDIT_DOC_TOTAL_BYTES = 4 * 1024 * 1024;
+const MAX_AUDIT_EVIDENCE_BYTES = 1024 * 1024;
 function scanForReleaseClaims(text) {
     const found = [];
     for (const pattern of RELEASE_PATTERNS) {
@@ -25,24 +32,89 @@ function scanForReleaseClaims(text) {
     }
     return found;
 }
-function findMdFiles(dir, maxDepth = 3) {
+function findMdFiles(dir, maxDepth = 3, maxFiles = MAX_AUDIT_DOC_FILES) {
     const results = [];
-    if (!existsSync(dir) || maxDepth <= 0)
-        return results;
-    try {
-        const entries = readdirSync(dir, { withFileTypes: true });
-        for (const e of entries) {
-            const full = join(dir, e.name);
-            if (e.isDirectory() && !e.name.startsWith(".") && e.name !== "node_modules") {
-                results.push(...findMdFiles(full, maxDepth - 1));
+    const pending = [{ path: dir, depth: maxDepth }];
+    const maxDirectories = maxFiles * 4;
+    let visitedDirectories = 0;
+    let truncated = false;
+    while (pending.length > 0 && results.length < maxFiles && visitedDirectories < maxDirectories) {
+        const current = pending.pop();
+        if (!existsSync(current.path) || current.depth <= 0)
+            continue;
+        visitedDirectories += 1;
+        let handle;
+        try {
+            handle = opendirSync(current.path);
+            while (results.length < maxFiles) {
+                const entry = handle.readSync();
+                if (!entry)
+                    break;
+                const full = join(current.path, entry.name);
+                if (entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules") {
+                    if (pending.length < maxDirectories)
+                        pending.push({ path: full, depth: current.depth - 1 });
+                    else
+                        truncated = true;
+                }
+                else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
+                    results.push(full);
+                }
             }
-            else if (e.isFile() && e.name.endsWith(".md")) {
-                results.push(full);
+        }
+        catch { /* skip unreadable dirs */ }
+        finally {
+            try {
+                handle?.closeSync();
             }
+            catch { /* best effort */ }
         }
     }
-    catch { /* skip unreadable dirs */ }
-    return results;
+    truncated ||= pending.length > 0 || results.length >= maxFiles || visitedDirectories >= maxDirectories;
+    return { files: results, truncated };
+}
+export function extractNpmRunScriptNames(content) {
+    const names = new Set();
+    const collectCommands = (text) => {
+        const pattern = /\bnpm(?:\.cmd)?\s+run\s+([a-zA-Z0-9:_-]+)/gi;
+        let match;
+        while ((match = pattern.exec(text)) !== null) {
+            if (match[1])
+                names.add(match[1]);
+        }
+    };
+    // Markdown code blocks are explicit command-bearing regions. Keep their
+    // content separate from prose so token boundaries cannot be concatenated.
+    const withoutFences = content.replace(/(?:```|~~~)[^\r\n]*\r?\n([\s\S]*?)(?:```|~~~)/g, (_whole, body) => {
+        collectCommands(body);
+        return "\n";
+    });
+    // Inline code is also explicit. Remove it from the prose pass afterward to
+    // avoid double-counting and accidental cross-node matches.
+    const withoutInlineCode = withoutFences.replace(/`([^`\r\n]+)`/g, (_whole, body) => {
+        collectCommands(body);
+        return " ";
+    });
+    // In ordinary text, accept only a standalone command line (optionally a
+    // list item, shell prompt, or Run:/Command: label). Narrative mentions such
+    // as "this guide discusses npm run deploy" are not executable evidence.
+    const explicitPlainCommand = /^\s*(?:(?:[-*+]\s+|\d+[.)]\s+|>\s*|\$\s*|PS>\s*)|(?:(?:run|command|命令)\s*[:：]\s*))?npm(?:\.cmd)?\s+run\s+[a-zA-Z0-9:_-]+(?:\s+(?:--[^\r\n#]*|#[^\r\n]*))?\s*$/i;
+    for (const line of withoutInlineCode.split(/\r?\n/)) {
+        if (explicitPlainCommand.test(line))
+            collectCommands(line);
+    }
+    return [...names];
+}
+function readAuditEvidence(path) {
+    const half = Math.floor(MAX_AUDIT_EVIDENCE_BYTES / 2);
+    const prefix = readTextFilePrefixSync(path, half);
+    if (!prefix.truncated)
+        return { content: prefix.content, truncated: false };
+    const tail = readTextFileTailLinesSync(path, 1000, half);
+    return {
+        content: `${prefix.content}\n[...audit evidence truncated...]\n${tail}`,
+        truncated: true,
+    };
 }
 // ── v0.7.2: New audit checks (exported for testing) ────────────────
 /**
@@ -426,7 +498,7 @@ export function auditTask(taskId) {
     };
     // ── 1. Task status ──
     const taskStatus = statusData.status || "unknown";
-    const failedStatuses = new Set(["failed", "failed_verification", "failed_scope_violation", "failed_policy_violation", "canceled"]);
+    const failedStatuses = new Set(["failed", "failed_verification", "failed_scope_violation", "failed_policy_violation", "canceled", "timeout"]);
     const doneStatuses = new Set(["done", "done_by_agent"]);
     checks.push({
         name: "task_status",
@@ -606,36 +678,52 @@ export function auditTask(taskId) {
     if (existsSync(readmePath))
         docsToScan.push(readmePath);
     const docsDir = join(repoPathSafe, "docs");
+    let markdownEnumerationTruncated = false;
     if (existsSync(docsDir)) {
-        docsToScan.push(...findMdFiles(docsDir));
+        const markdown = findMdFiles(docsDir);
+        docsToScan.push(...markdown.files);
+        markdownEnumerationTruncated = markdown.truncated;
     }
     // Collect all npm run references from all docs
     const allNpmRunRefs = new Set();
     const allReleaseClaims = [];
+    let remainingDocBytes = MAX_AUDIT_DOC_TOTAL_BYTES;
+    let documentScanTruncated = markdownEnumerationTruncated || docsToScan.length > MAX_AUDIT_DOC_FILES;
     for (const docPath of docsToScan) {
+        if (remainingDocBytes <= 0) {
+            documentScanTruncated = true;
+            break;
+        }
         let content;
         try {
             if (docPath !== resultFile) {
                 guardReadPath(docPath, config.workspaceRoot);
                 guardSensitivePath(docPath);
             }
-            content = readFileSync(docPath, "utf-8");
+            const bounded = readTextFilePrefixSync(docPath, Math.min(MAX_AUDIT_DOC_FILE_BYTES, remainingDocBytes));
+            content = bounded.content;
+            remainingDocBytes -= Buffer.byteLength(content, "utf-8");
+            documentScanTruncated ||= bounded.truncated;
         }
         catch {
             continue;
         }
         // Extract npm run xxx
-        const refs = content.match(/npm(?:\.cmd)?\s+run\s+([a-zA-Z0-9:_-]+)/gi) || [];
-        for (const ref of refs) {
-            const scriptName = ref.replace(/npm\s+run\s+/i, "").replace(/[^a-zA-Z0-9:_-]/g, "");
-            if (scriptName)
-                allNpmRunRefs.add(scriptName);
-        }
+        for (const scriptName of extractNpmRunScriptNames(content))
+            allNpmRunRefs.add(scriptName);
         // Check release claims
         const claims = scanForReleaseClaims(content);
         for (const c of claims)
             allReleaseClaims.push(`[${relative(repoPathSafe, docPath) || docPath}] ${c}`);
     }
+    if (documentScanTruncated) {
+        checks.push({
+            name: "documentation_scan_bounded",
+            result: "warn",
+            detail: `Documentation scan reached its ${MAX_AUDIT_DOC_FILES}-file or ${MAX_AUDIT_DOC_TOTAL_BYTES}-byte safety budget.`,
+        });
+        addManualVerification("Review documentation omitted by the bounded audit scan.");
+    }
     // Cross-check npm run refs against package.json scripts
     for (const scriptName of allNpmRunRefs) {
         if (pkgScripts.length > 0 && !pkgScripts.includes(scriptName)) {
@@ -682,7 +770,10 @@ export function auditTask(taskId) {
     if (hasTestLog) {
         let logContent;
         try {
-            logContent = readFileSync(testLogFile, "utf-8");
+            const evidence = readAuditEvidence(testLogFile);
+            logContent = evidence.content;
+            if (evidence.truncated)
+                addManualVerification("test.log exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             logContent = "";
@@ -720,7 +811,10 @@ export function auditTask(taskId) {
     let resultMdContent = null;
     if (hasResult) {
         try {
-            resultMdContent = readFileSync(resultFile, "utf-8");
+            const evidence = readAuditEvidence(resultFile);
+            resultMdContent = evidence.content;
+            if (evidence.truncated)
+                addManualVerification("result.md exceeded the audit read budget; inspect the complete local artifact.");
         }
         catch {
             resultMdContent = null;
@@ -788,7 +882,7 @@ export function auditTask(taskId) {
         "## Recommended Actions",
         ...actions.map((a) => `- ${a}`),
     ].join("\n");
-    writeFileSync(join(taskDir, "independent-review.md"), reviewMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "independent-review.md"), reviewMd);
     // ── v0.7.2: 集成 acceptanceEngine ──
     const releaseClaimsUnverified = allReleaseClaims.length > 0;
     const acceptanceEvidence = {
@@ -827,16 +921,20 @@ export function auditTask(taskId) {
     const acceptanceResult = evaluateAcceptance(acceptanceEvidence);
     // 回写 status.json 的 acceptance_status（仅对 done_by_agent 有意义）
     if (taskStatus === "done_by_agent") {
-        const updatedStatus = {
-            ...statusData,
+        const statusPatch = {
             acceptance_status: acceptanceResult.acceptance_status,
-            updated_at: new Date().toISOString(),
         };
-        writeFileSync(statusFile, JSON.stringify(updatedStatus, null, 2), "utf-8");
+        mutateTaskStatus(statusFile, (current) => {
+            if (current.status !== "done_by_agent") {
+                return { result: current };
+            }
+            const next = { ...current, ...statusPatch, updated_at: new Date().toISOString() };
+            return { next, result: next };
+        });
     }
     // 导出 ACCEPTANCE.md
     const acceptanceMd = renderAcceptanceMarkdown(taskId, acceptanceResult, acceptanceEvidence);
-    writeFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd, "utf-8");
+    atomicWriteFileSync(join(taskDir, "ACCEPTANCE.md"), acceptanceMd);
     return {
         task_id: taskId,
         verdict,

package/dist/tools/{healthCheck.d.ts → diagnostics/healthCheck.d.ts}

@@ -1,4 +1,4 @@
-import type { ToolCatalogSnapshot } from "./toolCatalog.js";
+import type { ToolCatalogSnapshot } from "../catalog/toolCatalog.js";
 export interface HealthCheckInput {
     detail?: "standard" | "self_diagnostic";
 }
@@ -14,11 +14,12 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
         recent_tasks_returned: number;
         recent_failures: {
             task_id: string;
-            status: import("./createTask.js").TaskStatus;
-            phase: import("./createTask.js").TaskPhase;
-            pending_reason: import("../watcherStatus.js").PendingReason;
+            status: import("../tasks/createTask.js").TaskStatus;
+            phase: import("../tasks/createTask.js").TaskPhase;
+            pending_reason: import("../../watcherStatus.js").PendingReason;
             error: string | null;
         }[];
+        last_assessment_validation_failure: import("../../assessments/assessmentDiagnostics.js").AssessmentValidationFailureDiagnostic | null;
     } | undefined;
     connector_visibility: {
         status: string;
@@ -37,7 +38,7 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
     };
     watcher: {
         supervisor: Record<string, unknown>;
-        status: import("../watcherStatus.js").WatcherState;
+        status: import("../../watcherStatus.js").WatcherState;
         available: boolean;
         stale_after_seconds: number;
         last_heartbeat_at: string | null;
@@ -65,10 +66,21 @@ export declare function healthCheck(catalog?: ToolCatalogSnapshot, input?: Healt
     tunnel: Record<string, unknown> & {
         last_error: string | null;
     };
-    agents: import("./listAgents.js").AgentAvailability[];
+    config_path: string;
+    runtime_build_layout: string | null;
+    watcher_entry_path: string | null;
+    validator_module_path: string | null;
+    agents: import("../workspace/listAgents.js").AgentAvailability[];
     agent_status: {
         [k: string]: string;
     };
+    agent_readiness: {
+        [k: string]: {
+            executable_available: boolean;
+            provider_status: "not_checked";
+            availability_scope: "executable_only";
+        };
+    };
     search_tool_count?: 5 | undefined;
     direct_tool_count?: number | undefined;
     status: string;

package/dist/tools/{healthCheck.js → diagnostics/healthCheck.js}

@@ -1,13 +1,14 @@
 import { accessSync, constants, existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
-import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../config.js";
-import { listAgents } from "./listAgents.js";
-import { redactSensitiveContent, redactSensitiveValue } from "../security/contentRedaction.js";
-import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../version.js";
-import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "./toolCatalog.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { listTasks } from "./listTasks.js";
+import { getConfig, getTasksDir, getDirectSessionsDir, resolveWorkspaceRoot } from "../../config.js";
+import { listAgents } from "../workspace/listAgents.js";
+import { redactSensitiveContent, redactSensitiveValue } from "../../security/contentRedaction.js";
+import { PATCHWARDEN_VERSION, TOOL_SCHEMA_EPOCH } from "../../version.js";
+import { CHATGPT_CORE_TOOL_NAMES, CHATGPT_DIRECT_TOOL_NAMES, CHATGPT_SEARCH_TOOL_NAMES, resolveToolProfile } from "../catalog/toolCatalog.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { listTasks } from "../tasks/listTasks.js";
+import { readLastAssessmentValidationFailure } from "../../assessments/assessmentDiagnostics.js";
 const SERVER_STARTED_AT = Date.now();
 export function healthCheck(catalog, input = {}) {
     const config = getConfig();
@@ -120,8 +121,23 @@ export function healthCheck(catalog, input = {}) {
         workspace_root: workspace,
         tasks_dir: tasks,
         tunnel,
+        config_path: agents.config_path,
+        runtime_build_layout: typeof watcher.supervisor?.runtime_build_layout === "string"
+            ? watcher.supervisor.runtime_build_layout
+            : null,
+        watcher_entry_path: typeof watcher.supervisor?.watcher_entry_path === "string"
+            ? watcher.supervisor.watcher_entry_path
+            : null,
+        validator_module_path: typeof watcher.supervisor?.validator_module_path === "string"
+            ? watcher.supervisor.validator_module_path
+            : null,
         agents: agents.agents,
         agent_status: Object.fromEntries(agents.agents.map((agent) => [agent.name, agent.available ? "ok" : "missing"])),
+        agent_readiness: Object.fromEntries(agents.agents.map((agent) => [agent.name, {
+                executable_available: agent.available,
+                provider_status: agent.provider_status,
+                availability_scope: agent.availability_scope,
+            }])),
         ...(input.detail === "self_diagnostic" ? { self_diagnostic: buildSelfDiagnostic(config) } : {}),
         last_error: tunnel.last_error || (!watcher.available ? watcher.reason : null) || mismatchReport[0] || null,
     };
@@ -129,7 +145,7 @@ export function healthCheck(catalog, input = {}) {
 function buildSelfDiagnostic(config) {
     const recent = listTasks({ limit: 20 });
     const failures = recent.tasks
-        .filter((task) => task.status.startsWith("failed") || task.status === "canceled")
+        .filter((task) => task.status.startsWith("failed") || task.status === "canceled" || task.status === "timeout")
         .slice(0, 10)
         .map((task) => ({
         task_id: task.task_id,
@@ -145,6 +161,7 @@ function buildSelfDiagnostic(config) {
         configured_agents: Object.keys(config.agents),
         recent_tasks_returned: recent.tasks.length,
         recent_failures: failures,
+        last_assessment_validation_failure: readLastAssessmentValidationFailure(),
     };
     const safe = redactSensitiveValue(diagnostic);
     return {
@@ -171,6 +188,11 @@ function readWatcherSupervisorStatus() {
             restart_attempts: Number.isInteger(Number(raw.restart_attempts)) ? Number(raw.restart_attempts) : 0,
             last_error: safeText(raw.last_error, 500) || null,
             checked_at: safeText(raw.checked_at, 80) || null,
+            project_root: safeText(raw.project_root, 500) || null,
+            config_path: safeText(raw.config_path, 500) || null,
+            watcher_entry_path: safeText(raw.watcher_entry_path, 500) || null,
+            validator_module_path: safeText(raw.validator_module_path, 500) || null,
+            runtime_build_layout: safeText(raw.runtime_build_layout, 80) || null,
         };
     }
     catch {
@@ -239,6 +261,12 @@ function readTunnelStatus() {
                 : [],
             tool_manifest_sha256: safeText(raw.tool_manifest_sha256, 80) || null,
             core_tools_ready: Boolean(raw.core_tools_ready),
+            project_root: safeText(raw.project_root, 500) || null,
+            config_path: safeText(raw.config_path, 500) || null,
+            mcp_entry_path: safeText(raw.mcp_entry_path, 500) || null,
+            watcher_entry_path: safeText(raw.watcher_entry_path, 500) || null,
+            validator_module_path: safeText(raw.validator_module_path, 500) || null,
+            runtime_build_layout: safeText(raw.runtime_build_layout, 80) || null,
         };
         const redacted = redactSensitiveContent(JSON.stringify(allowed));
         return JSON.parse(redacted.content);

package/dist/tools/diagnostics/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./auditSession.js";
+export * from "./auditTask.js";
+export * from "./healthCheck.js";
+export * from "./safeStatus.js";
+export * from "./safeViews.js";
+export * from "./schemaDriftCheck.js";

package/dist/tools/diagnostics/index.js

@@ -0,0 +1,6 @@
+export * from "./auditSession.js";
+export * from "./auditTask.js";
+export * from "./healthCheck.js";
+export * from "./safeStatus.js";
+export * from "./safeViews.js";
+export * from "./schemaDriftCheck.js";

package/dist/tools/{safeStatus.d.ts → diagnostics/safeStatus.d.ts}

@@ -1,6 +1,6 @@
-import { type PatchWardenConfig } from "../config.js";
-import type { TaskStatus, TaskPhase, AcceptanceStatus } from "./createTask.js";
-import { type DiagnosisType, type DiagnosisConfidence } from "./diagnoseTask.js";
+import { type PatchWardenConfig } from "../../config.js";
+import type { TaskStatus, TaskPhase, AcceptanceStatus } from "../tasks/createTask.js";
+import { type DiagnosisType, type DiagnosisConfidence } from "../tasks/diagnoseTask.js";
 export interface SafeStatusOutput {
     task_id: string;
     status: TaskStatus | "not_found";

package/dist/tools/{safeStatus.js → diagnostics/safeStatus.js}

@@ -1,11 +1,11 @@
 import { readFileSync, existsSync } from "node:fs";
 import { resolve, join } from "node:path";
-import { getTasksDir, getConfig } from "../config.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { guardSensitivePath } from "../security/sensitiveGuard.js";
-import { readTaskRuntime } from "../taskRuntime.js";
-import { readWatcherStatus } from "../watcherStatus.js";
-import { diagnoseTask } from "./diagnoseTask.js";
+import { getTasksDir, getConfig } from "../../config.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { guardSensitivePath } from "../../security/sensitiveGuard.js";
+import { readTaskRuntime } from "../../runner/taskRuntime.js";
+import { readWatcherStatus } from "../../watcherStatus.js";
+import { diagnoseTask } from "../tasks/diagnoseTask.js";
 export function safeStatus(taskId, config) {
     const cfg = config || getConfig();
     const tasksDir = getTasksDir(cfg);

package/dist/tools/{safeViews.d.ts → diagnostics/safeViews.d.ts}

@@ -2,6 +2,7 @@ export interface SafeViewOptions {
     max_items?: number;
 }
 export declare function safeResult(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
     status: string;
     terminal: boolean;
@@ -32,6 +33,7 @@ export declare function safeResult(taskId: string, options?: SafeViewOptions): {
     redaction_categories: string[];
 };
 export declare function safeTestSummary(taskId: string): {
+    schema_version: string;
     task_id: string;
     status: string;
     command_count: number;
@@ -41,19 +43,20 @@ export declare function safeTestSummary(taskId: string): {
     commands: {
         command: string;
         status: string;
-        exit_code: any;
+        exit_code: {} | null;
         duration_ms: number;
     }[];
     headline: string;
 };
 export declare function safeDiffSummary(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
     changed_files_total: number;
     additions: number;
     deletions: number;
     diff_available: boolean;
     diff_truncated: boolean;
-    patch_mode: any;
+    patch_mode: {} | null;
     files: {
         path: string;
         old_path: string | null;
@@ -62,13 +65,14 @@ export declare function safeDiffSummary(taskId: string, options?: SafeViewOption
         tracked: boolean;
         ignored: boolean;
     }[];
-    artifact_hygiene_counts: Record<string, any>;
+    artifact_hygiene_counts: Record<string, unknown>;
     large_diff_omitted: boolean;
     truncated: boolean;
 };
 export declare function safeAudit(taskId: string, options?: SafeViewOptions): {
+    schema_version: string;
     task_id: string;
-    verdict: "pass" | "warn" | "fail";
+    verdict: "warn" | "pass" | "fail";
     acceptance: {
         verdict: string;
         status: string;
@@ -84,17 +88,17 @@ export declare function safeAudit(taskId: string, options?: SafeViewOptions): {
     };
     checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     fail_checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     warn_checks: {
         name: string;
-        result: "pass" | "warn" | "fail";
+        result: "warn" | "pass" | "fail";
         detail: string;
     }[];
     possible_false_positives: {
@@ -238,7 +242,7 @@ export declare function safeFinalizeDirectSession(sessionId: string, options?: S
 }>;
 export declare function safeAuditDirectSession(sessionId: string, options?: SafeViewOptions): {
     session_id: string;
-    decision: "pass" | "warn" | "fail";
+    decision: "warn" | "pass" | "fail";
     reason_codes: string[];
     blocking_findings: string[];
     warnings: string[];

package/dist/tools/{safeViews.js → diagnostics/safeViews.js}

@@ -1,17 +1,19 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
-import { getConfig, getTasksDir } from "../config.js";
+import { getConfig, getTasksDir } from "../../config.js";
 import { auditSession } from "./auditSession.js";
 import { auditTask } from "./auditTask.js";
-import { finalizeDirectSession } from "./finalizeDirectSession.js";
-import { getTaskSummary } from "./getTaskSummary.js";
-import { guardReadPath } from "../security/pathGuard.js";
-import { redactSensitiveValue } from "../security/contentRedaction.js";
-import { readDirectSession } from "../direct/directSessionStore.js";
+import { finalizeDirectSession } from "../direct/finalizeDirectSession.js";
+import { getTaskSummary } from "../tasks/getTaskSummary.js";
+import { guardReadPath } from "../../security/pathGuard.js";
+import { redactSensitiveValue } from "../../security/contentRedaction.js";
+import { readDirectSession } from "../../direct/directSessionStore.js";
+import { ARTIFACT_SCHEMA_VERSION } from "../../version.js";
 export function safeResult(taskId, options = {}) {
     const maxItems = normalizeMaxItems(options.max_items);
     const summary = getTaskSummary(taskId, { view: "compact", max_items: maxItems });
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: summary.task_id,
         status: summary.status,
         terminal: summary.terminal,
@@ -39,13 +41,17 @@ export function safeTestSummary(taskId) {
     const { taskDir, config } = getTaskDir(taskId);
     const verify = readJson(join(taskDir, "verify.json"), config);
     const summary = getTaskSummary(taskId, { view: "compact", max_items: 8 });
-    const commands = asArray(verify.commands).map((entry) => ({
-        command: String(entry.command || ""),
-        status: String(entry.status || "unknown"),
-        exit_code: entry.exit_code ?? null,
-        duration_ms: Number(entry.duration_ms || 0),
-    }));
+    const commands = asArray(verify.commands).map((entry) => {
+        const command = asRecord(entry);
+        return {
+            command: String(command.command || ""),
+            status: String(command.status || "unknown"),
+            exit_code: command.exit_code ?? null,
+            duration_ms: Number(command.duration_ms || 0),
+        };
+    });
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: taskId,
         status: String(verify.status || summary.verification_summary.status || "not_available"),
         command_count: commands.length,
@@ -63,6 +69,7 @@ export function safeDiffSummary(taskId, options = {}) {
     const changedFiles = asArray(changes.changed_files);
     const hygiene = asRecord(changes.artifact_hygiene);
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: taskId,
         changed_files_total: changedFiles.length,
         additions: Number(changes.additions || 0),
@@ -128,6 +135,7 @@ function auditToSafe(audit, maxItems) {
         detail: truncate(check.detail, 240),
     }));
     return redact({
+        schema_version: ARTIFACT_SCHEMA_VERSION,
         task_id: audit.task_id,
         verdict: audit.verdict,
         acceptance: {
@@ -239,7 +247,9 @@ function asArray(value) {
     return Array.isArray(value) ? value : [];
 }
 function asRecord(value) {
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
 }
 function limitStrings(values, maxItems) {
     return values.slice(0, maxItems).map((value) => truncate(value, 240));

package/dist/tools/{schemaDriftCheck.d.ts → diagnostics/schemaDriftCheck.d.ts}

@@ -6,7 +6,7 @@
  *
  * 本模块只做检测和报告，不做运行时阻断。
  */
-import type { PatchWardenToolMeta } from "./toolRegistry.js";
+import type { PatchWardenToolMeta } from "../catalog/toolRegistry.js";
 export interface SchemaDriftResult {
     /** true 表示无 drift，false 表示有 drift */
     ok: boolean;