统一公共工具并移除 workspace 专家链路。

将文件/命令/Git/检索能力统一迁入 public，去除重复工具与 local_ 命名前缀，并重命名底层路径守卫模块为 path_guard 以提升语义清晰度。

Made-with: Cursor

runtime/tools/public/apply_patch_tool.py

@@ -0,0 +1,54 @@
+from __future__ import annotations
+
+import hashlib
+from typing import Any
+
+from oclaw.runtime.tools.base import ToolSpec
+from oclaw.runtime.tools.path_guard import resolve_workspace_path
+
+
+def apply_patch_tool() -> ToolSpec:
+    def handler(args: dict[str, Any]) -> dict[str, Any]:
+        path = str(args.get("path") or "").strip()
+        new_content = str(args.get("new_content") or "")
+        expected_sha256 = str(args.get("expected_sha256") or "").strip()
+        p = resolve_workspace_path(path)
+        if p.exists() and p.is_file() and expected_sha256:
+            cur = hashlib.sha256(p.read_bytes()).hexdigest()
+            if cur != expected_sha256:
+                return {
+                    "ok": False,
+                    "error": "sha_mismatch",
+                    "path": str(p),
+                    "expected_sha256": expected_sha256,
+                    "current_sha256": cur,
+                }
+        p.parent.mkdir(parents=True, exist_ok=True)
+        p.write_text(new_content, encoding="utf-8")
+        sha = hashlib.sha256(p.read_bytes()).hexdigest()
+        return {"ok": True, "path": str(p), "sha256": sha, "bytes": p.stat().st_size}
+
+    return ToolSpec(
+        name="apply_patch",
+        description="Overwrite a file with new content (optional sha256 precondition).",
+        parameters={
+            "type": "object",
+            "properties": {
+                "path": {"type": "string", "description": "File path, relative to workspace root."},
+                "new_content": {"type": "string", "description": "New full file content."},
+                "expected_sha256": {
+                    "type": "string",
+                    "description": "If provided, the current file sha256 must match.",
+                },
+            },
+            "required": ["path", "new_content"],
+            "additionalProperties": False,
+        },
+        handler=handler,
+        tags=frozenset({"public", "write"}),
+        risk_level="high",
+        read_only=False,
+    )
+
+
+__all__ = ["apply_patch_tool"]