feat: expose codex fs command governance

tests/local-agent-codex-app-server-runner.test.mjs

@@ -149,6 +149,24 @@ test("codex app-server discovery includes governance and MCP summaries without l
     userInitiatedOnly: true,
     labels: ["配置读取", "单项写入", "批量写入", "MCP 重载", "Skill 配置"],
   });
+  assert.deepEqual(metadata.fileSystemGovernanceSummary, {
+    actionCount: 9,
+    readActionCount: 3,
+    writeActionCount: 3,
+    destructiveActionCount: 1,
+    watchActionCount: 2,
+    userInitiatedOnly: true,
+    labels: ["读取文件", "读取目录", "元数据", "写入文件", "创建目录", "复制", "删除", "监听", "取消监听"],
+  });
+  assert.deepEqual(metadata.commandSessionSummary, {
+    actionCount: 5,
+    controlActionCount: 3,
+    streamAvailable: true,
+    terminationAvailable: true,
+    sandboxedCommandAvailable: true,
+    userInitiatedOnly: true,
+    labels: ["执行命令", "写入 stdin", "调整 PTY", "终止命令", "输出流"],
+  });
 
   const serialized = JSON.stringify(metadata);
   assert.equal(serialized.includes("sk-secret-should-not-leak"), false);