统一公共工具并移除 workspace 专家链路。

将文件/命令/Git/检索能力统一迁入 public，去除重复工具与 local_ 命名前缀，并重命名底层路径守卫模块为 path_guard 以提升语义清晰度。

Made-with: Cursor

runtime/tools/public/run_command_tool.py

@@ -0,0 +1,39 @@
+from __future__ import annotations
+
+from typing import Any
+
+from oclaw.runtime.tools.base import ToolSpec
+from oclaw.runtime.tools.local_sdk import get_local_adapter
+
+
+def run_command_tool() -> ToolSpec:
+    def _handler(args: dict[str, Any]) -> dict[str, Any]:
+        command = str(args.get("command") or "").strip()
+        if not command:
+            return {"ok": False, "error_code": "command_required", "error": "command_required"}
+        cwd = str(args.get("cwd") or "").strip() or None
+        timeout = int(args.get("timeout") or 30)
+        return get_local_adapter().run_command(command=command, cwd=cwd, timeout=timeout)
+
+    return ToolSpec(
+        name="run_command",
+        description="Run a shell command via local backend.",
+        parameters={
+            "type": "object",
+            "properties": {
+                "command": {"type": "string", "description": "Shell command to execute."},
+                "cwd": {"type": "string", "description": "Optional working directory."},
+                "timeout": {"type": "integer", "description": "Timeout in seconds.", "default": 30},
+            },
+            "required": ["command"],
+            "additionalProperties": False,
+        },
+        handler=_handler,
+        tags=frozenset({"public", "exec"}),
+        risk_level="high",
+        timeout_s=90.0,
+        read_only=False,
+    )
+
+
+__all__ = ["run_command_tool"]