feat: refine HITL audit policy defaults (#236)

internal/multiagent/hitl_toolsearch_compat.go

@@ -21,6 +21,7 @@ var HitlExemptMetaTools = []string{
 	"TaskGet",
 	"TaskUpdate",
 	"TaskList",
+	"upsert_project_fact",
 }
 
 // IsToolSearchTool reports whether name is the Eino dynamictool tool_search meta-tool.

internal/multiagent/hitl_toolsearch_compat_test.go

@@ -45,4 +45,14 @@ func TestMergeHitlExemptMetaTools_includesToolSearch(t *testing.T) {
 	if !found {
 		t.Fatalf("tool_search missing from %v", merged)
 	}
+	foundProjectFact := false
+	for _, name := range merged {
+		if strings.EqualFold(strings.TrimSpace(name), "upsert_project_fact") {
+			foundProjectFact = true
+			break
+		}
+	}
+	if !foundProjectFact {
+		t.Fatalf("upsert_project_fact missing from %v", merged)
+	}
 }