feat(chat): publish and harden all IM shortcuts

internal/shortcut/semantic_catalog.go

@@ -0,0 +1,96 @@
+// Copyright 2026 Alibaba Group
+// Licensed under the Apache License, Version 2.0
+
+package shortcut
+
+import (
+	_ "embed"
+	"encoding/json"
+	"fmt"
+	"strings"
+)
+
+//go:embed semantic_catalog.json
+var semanticCatalogJSON []byte
+
+type semanticCatalogFile struct {
+	Version      int                              `json:"version"`
+	Service      string                           `json:"service"`
+	Availability Availability                     `json:"default_availability"`
+	Shortcuts    map[string]semanticCatalogRecord `json:"shortcuts"`
+}
+
+type semanticCatalogRecord struct {
+	Disposition   SemanticDisposition `json:"disposition"`
+	SemanticDelta string              `json:"semantic_delta"`
+	Risk          Risk                `json:"risk"`
+	Availability  Availability        `json:"availability,omitempty"`
+	Primary       string              `json:"primary,omitempty"`
+	Public        bool                `json:"public"`
+	Reviewed      bool                `json:"reviewed"`
+}
+
+var reviewedSemanticCatalog = mustLoadSemanticCatalog()
+
+func mustLoadSemanticCatalog() map[string]semanticCatalogRecord {
+	var source semanticCatalogFile
+	if err := json.Unmarshal(semanticCatalogJSON, &source); err != nil {
+		panic(fmt.Sprintf("invalid shortcut semantic catalog: %v", err))
+	}
+	if source.Version != 1 || strings.TrimSpace(source.Service) == "" {
+		panic("invalid shortcut semantic catalog header")
+	}
+	out := make(map[string]semanticCatalogRecord, len(source.Shortcuts))
+	for command, record := range source.Shortcuts {
+		if !strings.HasPrefix(command, "+") {
+			panic(fmt.Sprintf("semantic catalog command %q lacks + prefix", command))
+		}
+		if !record.Reviewed || strings.TrimSpace(record.SemanticDelta) == "" {
+			panic(fmt.Sprintf("semantic catalog command %q is not reviewed", command))
+		}
+		switch record.Disposition {
+		case DispositionPrimarySmart, DispositionSemanticAdapter, DispositionSchemaLeaf, DispositionAliasInternal:
+		default:
+			panic(fmt.Sprintf("semantic catalog command %q has invalid disposition %q", command, record.Disposition))
+		}
+		switch record.Risk {
+		case RiskRead, RiskWrite, RiskHighWrite:
+		default:
+			panic(fmt.Sprintf("semantic catalog command %q has invalid risk %q", command, record.Risk))
+		}
+		if record.Availability == "" {
+			record.Availability = source.Availability
+		}
+		switch record.Availability {
+		case AvailabilityAvailable, AvailabilityUnavailable, AvailabilityDeprecated:
+		default:
+			panic(fmt.Sprintf("semantic catalog command %q has invalid availability %q", command, record.Availability))
+		}
+		if record.Disposition == DispositionAliasInternal && strings.TrimSpace(record.Primary) == "" {
+			panic(fmt.Sprintf("semantic alias %q must name its primary command", command))
+		}
+		// Public visibility is an explicit reviewed product decision. Disposition
+		// remains routing metadata: a reviewed, available Schema projection or
+		// compatibility alias can still be intentionally exposed as a Shortcut.
+		if record.Public && record.Availability != AvailabilityAvailable {
+			panic(fmt.Sprintf("semantic catalog command %q cannot be public with availability %q",
+				command, record.Availability))
+		}
+		out[publicCatalogKey(source.Service, command)] = record
+	}
+	return out
+}
+
+func applyReviewedSemanticCatalog(s Shortcut) (Shortcut, bool) {
+	record, ok := reviewedSemanticCatalog[publicCatalogKey(s.Service, s.Command)]
+	if !ok {
+		return s, false
+	}
+	s.Disposition = record.Disposition
+	s.SemanticDelta = record.SemanticDelta
+	s.Availability = record.Availability
+	s.PrimaryCommand = record.Primary
+	s.SemanticReviewed = record.Reviewed
+	s.Hidden = !record.Public
+	return s, true
+}