move to tool

Author: impself

docs/mkdocs/en/tool_safety_guard.md

@@ -62,9 +62,9 @@ permissions, and runtime resource limits.
 
 ```bash
 python scripts/tool_safety_check.py \
-    --policy examples/tool_safety/tool_safety_policy.yaml \
+    --policy tool/safety/examples/tool_safety_policy.yaml \
     --language python \
-    --script-file examples/tool_safety/samples/03_dangerous_delete.py \
+    --script-file tool/safety/examples/samples/03_dangerous_delete.py \
     --output tool_safety_report.json \
     --audit-file tool_safety_audit.jsonl
 echo $?  # 0=allow, 2=deny, 3=review, 4=input/policy error
@@ -74,10 +74,10 @@ Run the manifest to scan all 14 public samples:
 
 ```bash
 python scripts/tool_safety_check.py \
-    --policy examples/tool_safety/tool_safety_policy.yaml \
-    --manifest examples/tool_safety/samples/manifest.yaml \
-    --manifest-output examples/tool_safety/manifest_run.json \
-    --audit-file examples/tool_safety/tool_safety_audit.jsonl
+    --policy tool/safety/examples/tool_safety_policy.yaml \
+    --manifest tool/safety/examples/samples/manifest.yaml \
+    --manifest-output tool/safety/examples/manifest_run.json \
+    --audit-file tool/safety/examples/tool_safety_audit.jsonl
 ```
 
 ## Programmatic usage
@@ -90,7 +90,7 @@ from tool.safety import (
     ScriptLanguage,
 )
 
-policy = load_safety_policy("examples/tool_safety/tool_safety_policy.yaml")
+policy = load_safety_policy("tool/safety/examples/tool_safety_policy.yaml")
 guard = ToolSafetyGuard(policy)
 
 request = SafetyScanRequest(
@@ -397,7 +397,7 @@ tool/
 scripts/
   tool_safety_check.py          # CLI
 tests/tool_safety/              # safety guard tests
-examples/tool_safety/
+tool/safety/examples/
   tool_safety_policy.yaml       # sample policy
   samples/                      # 14 public samples + manifest
   tool_safety_report.json       # generated report

docs/mkdocs/zh/tool_safety_guard.zh_CN.md

@@ -53,9 +53,9 @@ span 属性/指标输出。
 
 ```bash
 python scripts/tool_safety_check.py \
-    --policy examples/tool_safety/tool_safety_policy.yaml \
+    --policy tool/safety/examples/tool_safety_policy.yaml \
     --language python \
-    --script-file examples/tool_safety/samples/03_dangerous_delete.py \
+    --script-file tool/safety/examples/samples/03_dangerous_delete.py \
     --output tool_safety_report.json \
     --audit-file tool_safety_audit.jsonl
 echo $?  # 0=allow, 2=deny, 3=review, 4=输入/策略/必需审计错误
@@ -65,10 +65,10 @@ echo $?  # 0=allow, 2=deny, 3=review, 4=输入/策略/必需审计错误
 
 ```bash
 python scripts/tool_safety_check.py \
-    --policy examples/tool_safety/tool_safety_policy.yaml \
-    --manifest examples/tool_safety/samples/manifest.yaml \
-    --manifest-output examples/tool_safety/manifest_run.json \
-    --audit-file examples/tool_safety/tool_safety_audit.jsonl
+    --policy tool/safety/examples/tool_safety_policy.yaml \
+    --manifest tool/safety/examples/samples/manifest.yaml \
+    --manifest-output tool/safety/examples/manifest_run.json \
+    --audit-file tool/safety/examples/tool_safety_audit.jsonl
 ```
 
 ## 作为库使用
@@ -81,7 +81,7 @@ from tool.safety import (
     ScriptLanguage,
 )
 
-policy = load_safety_policy("examples/tool_safety/tool_safety_policy.yaml")
+policy = load_safety_policy("tool/safety/examples/tool_safety_policy.yaml")
 guard = ToolSafetyGuard(policy)
 
 request = SafetyScanRequest(
@@ -351,7 +351,7 @@ tool/
 scripts/
   tool_safety_check.py          # CLI
 tests/tool_safety/              # 安全检查器测试
-examples/tool_safety/           # 策略、14 个样例、报告和审计样例
+tool/safety/examples/           # 策略、14 个样例、报告和审计样例
 docs/
   tool_safety_guard.md          # English version
   tool_safety_guard.zh_CN.md    # 本文

scripts/tool_safety_check.py

@@ -3,7 +3,7 @@
 Usage::
 
     python scripts/tool_safety_check.py \\
-        --policy examples/tool_safety/tool_safety_policy.yaml \\
+        --policy tool/safety/examples/tool_safety_policy.yaml \\
         --language python \\
         --script-file path/to/script.py \\
         --tool-name demo

tests/tool_safety/test_cli.py

@@ -11,7 +11,7 @@
 
 REPO_ROOT = Path(__file__).resolve().parents[2]
 CLI = REPO_ROOT / "scripts" / "tool_safety_check.py"
-POLICY = REPO_ROOT / "examples" / "tool_safety" / "tool_safety_policy.yaml"
+POLICY = REPO_ROOT / "tool" / "safety" / "examples" / "tool_safety_policy.yaml"
 
 
 def _run_cli(*args: str) -> tuple[int, str, str]:
@@ -52,11 +52,15 @@ def test_review_exit_3():
 
 
 def test_invalid_policy_exit_4(tmp_path):
-    cmd = [sys.executable, str(CLI), "--policy",
-           str(tmp_path / "missing.yaml"), "--script", "print(1)"]
+    missing_policy = tmp_path / "missing.yaml"
+    cmd = [sys.executable, str(CLI), "--policy", str(missing_policy),
+           "--script", "print(1)"]
     proc = subprocess.run(cmd, capture_output=True, text=True,
                           cwd=str(REPO_ROOT))
     assert proc.returncode == 4
+    assert "policy error:" in proc.stderr
+    assert str(missing_policy) in proc.stderr
+    assert proc.stdout == ""
 
 
 def test_required_audit_failure_exits_4(tmp_path):
@@ -70,7 +74,7 @@ def test_required_audit_failure_exits_4(tmp_path):
 
 
 def test_manifest_writes_output(tmp_path):
-    manifest = REPO_ROOT / "examples" / "tool_safety" / "samples" / "manifest.yaml"
+    manifest = REPO_ROOT / "tool" / "safety" / "examples" / "samples" / "manifest.yaml"
     output = tmp_path / "out.json"
     audit = tmp_path / "audit.jsonl"
     cmd = [sys.executable, str(CLI), "--policy", str(POLICY),

tests/tool_safety/test_integration.py

@@ -1,7 +1,7 @@
 """Integration tests: manifest samples must match expected decisions.
 
 These tests verify the public manifest in
-``examples/tool_safety/samples/manifest.yaml``. Per the issue acceptance
+``tool/safety/examples/samples/manifest.yaml``. Per the issue acceptance
 criteria: every sample must produce a structured report, high-risk
 detection must be >= 90%, safe false positives <= 10%, and the
 key-credential-delete-non-allowlist categories must be 100%.
@@ -20,8 +20,8 @@
 
 
 REPO_ROOT = Path(__file__).resolve().parents[2]
-POLICY_PATH = REPO_ROOT / "examples" / "tool_safety" / "tool_safety_policy.yaml"
-MANIFEST_PATH = REPO_ROOT / "examples" / "tool_safety" / "samples" / "manifest.yaml"
+POLICY_PATH = REPO_ROOT / "tool" / "safety" / "examples" / "tool_safety_policy.yaml"
+MANIFEST_PATH = REPO_ROOT / "tool" / "safety" / "examples" / "samples" / "manifest.yaml"
 
 
 @pytest.fixture(scope="module")

examples/tool_safety/README.md tool/safety/examples/README.mdexamples/tool_safety/README.md renamed to tool/safety/examples/README.md

@@ -31,7 +31,7 @@ and the generated report / audit outputs.
 
 ```bash
 # Single sample
-python ../../scripts/tool_safety_check.py \
+python ../../../scripts/tool_safety_check.py \
     --policy tool_safety_policy.yaml \
     --language python \
     --script-file samples/03_dangerous_delete.py \
@@ -40,7 +40,7 @@ python ../../scripts/tool_safety_check.py \
 echo $?  # 0=allow, 2=deny, 3=review, 4=input/policy error
 
 # All 14 samples
-python ../../scripts/tool_safety_check.py \
+python ../../../scripts/tool_safety_check.py \
     --policy tool_safety_policy.yaml \
     --manifest samples/manifest.yaml \
     --manifest-output manifest_run.json \
@@ -58,5 +58,5 @@ python ../../scripts/tool_safety_check.py \
   samples.
 
 See the full design document in
-[English](../../docs/tool_safety_guard.md) or
-[中文](../../docs/tool_safety_guard.zh_CN.md).
+[English](../../../docs/mkdocs/en/tool_safety_guard.md) or
+[中文](../../../docs/mkdocs/zh/tool_safety_guard.zh_CN.md).