@eoasmxd/freya 0.4.1 → 0.4.3

package/README.md

@@ -33,9 +33,30 @@ freya --no-cli
 freya stop
 ```
 
+### 方式二：通过 Docker 运行（推荐，免环境配置）
+
+无需安装 Node.js 与包管理环境，直接通过容器一键启动（支持配置与会话数据持久化）：
+
+```bash
+# 启动并挂载持久化数据目录（宿主机 ./freya-data 映射至容器 /data）
+docker run -d \
+  --name freya \
+  -p 3000:3000 \
+  -v $(pwd)/freya-data:/data \
+  --restart unless-stopped \
+  ghcr.io/eoasmxd/freya:latest
+```
+
+或使用本地源码构建镜像运行：
+```bash
+# 本地构建并启动
+docker build -t freya .
+docker run -d --name freya -p 3000:3000 -v $(pwd)/freya-data:/data freya
+```
+
 ---
 
-### 方式二：从源码构建运行
+### 方式三：从源码构建运行
 
 运行环境要求：**Node.js** (>= 22.0.0) 和 **pnpm** (9.x)。
 

package/core/dist/agent/agent-executor.js

@@ -187,6 +187,11 @@ export class FreyaAgentExecutor {
         const nextToolboxIdleRounds = {};
         const deactivatedIds = [];
         for (const id of activeToolboxIds) {
+            if (!this.toolRegistry.isToolboxEnabled(id)) {
+                deactivatedIds.push(id);
+                this.context.logger.info(`[FreyaAgentExecutor] 工具箱 [${id}] 已被全局禁用，自动从当前会话卸载。`);
+                continue;
+            }
             const boxTools = this.toolRegistry.getToolsInBox(id);
             const isUsed = boxTools.some((tool) => executedToolNames.has(tool.getDefinition().name));
             if (isUsed) {

package/core/dist/command/command-executor.js

@@ -23,6 +23,13 @@ export class FreyaCommandExecutor {
             });
             return true;
         }
+        if (!this.registry.isCommandEnabled(commandName)) {
+            this.context.eventBus.emit('session:reply:error', {
+                sessionId,
+                message: `❌ 权限拒绝：系统指令 "/${commandName}" 已被系统管理员全局禁用。`
+            });
+            return true;
+        }
         try {
             const replyContent = await cmd.execute(args, sessionId, this.context, connectionId);
             if (replyContent) {

package/core/dist/command/command-registry.d.ts

@@ -1,9 +1,14 @@
-import type { FreyaCommand } from '@eoasmxd/freya-sdk';
+import type { FreyaCommand, FreyaContext } from '@eoasmxd/freya-sdk';
 /** 系统指令注册表：维护主指令与别名的映射字典 */
 export declare class FreyaCommandRegistry {
+    private context?;
     private commands;
     private aliasMap;
     private pluginCommandsMap;
+    constructor(context?: FreyaContext | undefined);
+    setContext(context: FreyaContext): void;
+    /** 判断指定指令当前是否已注册且处于可用启用状态 */
+    isCommandEnabled(name: string): boolean;
     /** 注册新的系统指令并建立别名路由 */
     register(command: FreyaCommand, pluginId?: string): void;
     /** 注销指定插件注册的所有指令与别名 */

package/core/dist/command/command-registry.js

@@ -1,8 +1,38 @@
+const BUILTIN_COMMAND_CATEGORY_MAP = {
+    approve: 'auth',
+    reject: 'auth',
+    session: 'session',
+    model: 'model',
+    models: 'model'
+};
 /** 系统指令注册表：维护主指令与别名的映射字典 */
 export class FreyaCommandRegistry {
+    context;
     commands = new Map();
     aliasMap = new Map();
     pluginCommandsMap = new Map();
+    constructor(context) {
+        this.context = context;
+    }
+    setContext(context) {
+        this.context = context;
+    }
+    /** 判断指定指令当前是否已注册且处于可用启用状态 */
+    isCommandEnabled(name) {
+        const lowerName = name.toLowerCase();
+        const primaryName = this.aliasMap.get(lowerName) || lowerName;
+        if (!this.commands.has(primaryName)) {
+            return false;
+        }
+        const category = BUILTIN_COMMAND_CATEGORY_MAP[primaryName];
+        if (category) {
+            const commandsConfig = this.context?.config?.commands?.builtin;
+            if (commandsConfig && typeof commandsConfig[category]?.enabled === 'boolean') {
+                return commandsConfig[category].enabled;
+            }
+        }
+        return true;
+    }
     /** 注册新的系统指令并建立别名路由 */
     register(command, pluginId) {
         const name = command.name.toLowerCase();
@@ -54,6 +84,6 @@ export class FreyaCommandRegistry {
         return undefined;
     }
     list() {
-        return Array.from(this.commands.values());
+        return Array.from(this.commands.values()).filter((cmd) => this.isCommandEnabled(cmd.name));
     }
 }

package/core/dist/config/config-manager.js

@@ -688,6 +688,41 @@ export class FreyaConfigManager {
                 min: 10,
                 max: 300,
                 category: '安全'
+            },
+            {
+                key: 'tools.builtin.config.enabled',
+                defaultValue: true,
+                description: '是否启用系统核心配置工具箱（允许大模型查看与修改系统配置）',
+                type: 'boolean',
+                category: '系统工具'
+            },
+            {
+                key: 'tools.builtin.session.enabled',
+                defaultValue: true,
+                description: '是否启用会话与子任务管理工具箱（允许大模型查阅会话历史与派生子任务）',
+                type: 'boolean',
+                category: '系统工具'
+            },
+            {
+                key: 'commands.builtin.auth.enabled',
+                defaultValue: true,
+                description: '是否启用敏感操作授权审批指令（/approve 与 /reject）',
+                type: 'boolean',
+                category: '系统指令'
+            },
+            {
+                key: 'commands.builtin.session.enabled',
+                defaultValue: true,
+                description: '是否启用会话管理与路由指令（/session 及其子命令）',
+                type: 'boolean',
+                category: '系统指令'
+            },
+            {
+                key: 'commands.builtin.model.enabled',
+                defaultValue: true,
+                description: '是否启用模型查看与切换指令（/model 及其子命令）',
+                type: 'boolean',
+                category: '系统指令'
             }
         ];
         this.schemaRegistry.register('core', coreFields);

package/core/dist/kernel.js

@@ -44,10 +44,10 @@ export class FreyaKernel {
         ctx.logger.info('Freya 核心服务正在启动...');
         ctx.eventBus = new FreyaEventBus();
         const configSchemaRegistry = new FreyaConfigSchemaRegistry();
-        const toolRegistry = new FreyaToolRegistry();
+        const toolRegistry = new FreyaToolRegistry(ctx);
         const llmRegistry = new FreyaLLMRegistry();
         const promptRegistry = new FreyaPromptRegistry();
-        const commandRegistry = new FreyaCommandRegistry();
+        const commandRegistry = new FreyaCommandRegistry(ctx);
         this.channelRegistry = new FreyaChannelRegistry();
         const pluginRegistry = new FreyaPluginRegistry(toolRegistry, llmRegistry, this.channelRegistry);
         const skillRegistry = new FreyaSkillRegistry();

package/core/dist/tools/tool-registry.d.ts

@@ -1,22 +1,27 @@
-import type { FreyaTool, FreyaToolbox } from '@eoasmxd/freya-sdk';
+import type { FreyaContext, FreyaTool, FreyaToolbox } from '@eoasmxd/freya-sdk';
 import type { FreyaPromptRegistry } from '../prompt/prompt-registry.js';
 /**
  * 内核工具注册表。
- * 统一聚合内置工具箱与来自插件体系的外部工具/工具箱。
+ * 统一聚合内置工具箱与来自插件体系的外部工具箱。
  */
 export declare class FreyaToolRegistry {
+    private context?;
     private toolboxes;
-    /** 注册一个工具箱（内置或外部插件）。 */
+    constructor(context?: FreyaContext | undefined);
+    setContext(context: FreyaContext): void;
+    /** 判断指定工具箱当前是否已注册且处于可用启用状态 */
+    isToolboxEnabled(toolboxId: string): boolean;
+    /** 注册工具箱 */
     registerToolbox(toolbox: FreyaToolbox): void;
     /** 注销工具箱 */
     unregisterToolbox(id: string): void;
-    /** 获取指定 ID 的工具箱中的所有原子工具。 */
+    /** 获取指定 ID 的工具箱中的所有原子工具 */
     getToolsInBox(id: string): FreyaTool[];
-    /** 聚合所有来源的工具，返回完整工具字典。 */
+    /** 聚合所有来源的已启用工具 */
     getAllTools(): Map<string, FreyaTool>;
-    /** 根据当前会话已激活的工具箱列表，动态过滤获取所需的工具字典 */
+    /** 根据当前会话已激活的工具箱列表，过滤获取所需的工具字典 */
     getFilteredTools(activeToolboxIds: string[]): Map<string, FreyaTool>;
-    /** 聚合所有来源的工具提示词引导说明，延迟解析 key → 内容 */
+    /** 聚合所有已启用的工具箱提示词引导说明 */
     getToolInstructions(promptRegistry: FreyaPromptRegistry): string[];
     getRegisteredToolboxIds(): string[];
 }

package/core/dist/tools/tool-registry.js

@@ -1,10 +1,32 @@
 /**
  * 内核工具注册表。
- * 统一聚合内置工具箱与来自插件体系的外部工具/工具箱。
+ * 统一聚合内置工具箱与来自插件体系的外部工具箱。
  */
 export class FreyaToolRegistry {
+    context;
     toolboxes = [];
-    /** 注册一个工具箱（内置或外部插件）。 */
+    constructor(context) {
+        this.context = context;
+    }
+    setContext(context) {
+        this.context = context;
+    }
+    /** 判断指定工具箱当前是否已注册且处于可用启用状态 */
+    isToolboxEnabled(toolboxId) {
+        if (toolboxId === 'meta') {
+            return true;
+        }
+        const isRegistered = this.toolboxes.some((tb) => tb.getId() === toolboxId);
+        if (!isRegistered) {
+            return false;
+        }
+        const toolsConfig = this.context?.config?.tools?.builtin;
+        if (toolsConfig && typeof toolsConfig[toolboxId]?.enabled === 'boolean') {
+            return toolsConfig[toolboxId].enabled;
+        }
+        return true;
+    }
+    /** 注册工具箱 */
     registerToolbox(toolbox) {
         const newId = toolbox.getId();
         const existingIndex = this.toolboxes.findIndex((tb) => tb.getId() === newId || tb === toolbox);
@@ -19,27 +41,36 @@ export class FreyaToolRegistry {
     unregisterToolbox(id) {
         this.toolboxes = this.toolboxes.filter((tb) => tb.getId() !== id);
     }
-    /** 获取指定 ID 的工具箱中的所有原子工具。 */
+    /** 获取指定 ID 的工具箱中的所有原子工具 */
     getToolsInBox(id) {
+        if (!this.isToolboxEnabled(id)) {
+            return [];
+        }
         const tb = this.toolboxes.find((t) => t.getId() === id);
         return tb ? tb.getTools() : [];
     }
-    /** 聚合所有来源的工具，返回完整工具字典。 */
+    /** 聚合所有来源的已启用工具 */
     getAllTools() {
         const tools = new Map();
         for (const toolbox of this.toolboxes) {
+            if (!this.isToolboxEnabled(toolbox.getId())) {
+                continue;
+            }
             for (const tool of toolbox.getTools()) {
                 tools.set(tool.getDefinition().name, tool);
             }
         }
         return tools;
     }
-    /** 根据当前会话已激活的工具箱列表，动态过滤获取所需的工具字典 */
+    /** 根据当前会话已激活的工具箱列表，过滤获取所需的工具字典 */
     getFilteredTools(activeToolboxIds) {
         const activeSet = new Set(activeToolboxIds || []);
         const tools = new Map();
         for (const toolbox of this.toolboxes) {
             const toolboxId = toolbox.getId();
+            if (!this.isToolboxEnabled(toolboxId)) {
+                continue;
+            }
             if (toolboxId === 'meta' || activeSet.has(toolboxId)) {
                 for (const tool of toolbox.getTools()) {
                     tools.set(tool.getDefinition().name, tool);
@@ -48,22 +79,27 @@ export class FreyaToolRegistry {
         }
         return tools;
     }
-    /** 聚合所有来源的工具提示词引导说明，延迟解析 key → 内容 */
+    /** 聚合所有已启用的工具箱提示词引导说明 */
     getToolInstructions(promptRegistry) {
         const instructions = [];
         for (const toolbox of this.toolboxes) {
+            const toolboxId = toolbox.getId();
+            if (!this.isToolboxEnabled(toolboxId)) {
+                continue;
+            }
             const key = toolbox.getInstructionPrompt?.();
             if (!key)
                 continue;
             const resolved = promptRegistry.get(key);
             if (resolved) {
-                const toolboxId = toolbox.getId();
                 instructions.push(`### 工具箱能力说明 [激活ID: "${toolboxId}"]\n${resolved}`);
             }
         }
         return instructions;
     }
     getRegisteredToolboxIds() {
-        return this.toolboxes.map((tb) => tb.getId());
+        return this.toolboxes
+            .map((tb) => tb.getId())
+            .filter((id) => this.isToolboxEnabled(id));
     }
 }

package/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eoasmxd/freya-core",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "private": false,
   "license": "MIT",
   "publishConfig": {
@@ -16,7 +16,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1",
+    "@eoasmxd/freya-sdk": "^0.4.3",
     "ws": "^8.18.0"
   },
   "devDependencies": {

package/doc/_index.md

@@ -16,7 +16,7 @@ description: "Freya 项目技术文档与开发使用指南。"
   提供系统首次启动配置、插件管理与日常操作快捷指令。
 
 - 🛠️ **[安装与构建运行](installation-guide.md)**
-  提供开发环境要求、本地依赖安装、项目编译打包与服务运行调试指南。
+  提供 NPM 全局安装、Docker 容器化部署、源码编译打包与服务运行维护指南。
 
 ### 🏗️ 技术规范与设计参考
 

package/doc/installation-guide.md

@@ -49,24 +49,59 @@ freya stop
 
 ---
 
-## 3. 方式二：从源码克隆编译与维护（开发模式）
+## 3. 方式二：通过 Docker 容器化部署与维护（推荐）
+
+适合希望免去 Node.js 环境配置、开箱即用、或在云服务器/NAS 上实现轻量化私有部署的用户。
+
+### 3.1 启动服务并持久化存储
+在终端执行以下命令拉取官方最新镜像并常驻启动（Web 服务映射至 3000 端口，并将宿主机当前目录下的 `freya-data` 挂载到容器内持久化数据目录）：
+
+```bash
+docker run -d \
+  --name freya \
+  -p 3000:3000 \
+  -v $(pwd)/freya-data:/data \
+  --restart unless-stopped \
+  ghcr.io/eoasmxd/freya:latest
+```
+
+*也可以使用本地源码直接构建镜像并运行：*
+```bash
+docker build -t freya .
+docker run -d --name freya -p 3000:3000 -v $(pwd)/freya-data:/data freya
+```
+
+### 3.2 停止与重启服务
+* **临时停止**：`docker stop freya`
+* **重新唤醒**：`docker start freya`
+* **重启服务**：`docker restart freya`
+
+### 3.3 容器版本平滑更新
+当发布了新的镜像版本时，执行以下三步即可无损升级：
+1. **拉取最新镜像**：`docker pull ghcr.io/eoasmxd/freya:latest`
+2. **销毁旧容器**：`docker rm -f freya`（用户配置与会话记忆均保留在 `./freya-data` 挂载目录中，数据安全无损）
+3. **重新拉起服务**：重新执行 3.1 中的 `docker run` 命令即可。
+
+---
+
+## 4. 方式三：从源码克隆编译与维护（开发模式）
 
 适合需要进行二次开发、编写自定义插件或深入学习 Freya 微内核架构的开发者。
 
-### 3.1 安装依赖
+### 4.1 安装依赖
 克隆项目后，在根目录下安装全量 workspace 依赖：
 ```bash
 pnpm install
 ```
 
-### 3.2 编译打包
+### 4.2 编译打包
 执行代码级编译与物理打包汇总：
 ```bash
 pnpm build
 ```
 *该命令会编译 core/sdk/ui 与所有插件，并在根目录下生成最终分发包 `dist/`。*
 
-### 3.3 启动服务
+### 4.3 启动服务
 根据开发测试需求选择启动模式：
 * **前台开发运行**（带 CLI 终端交互）：
   ```bash
@@ -77,13 +112,13 @@ pnpm build
   pnpm freya --no-cli
   ```
 
-### 3.4 停止服务
+### 4.4 停止服务
 若需要结束后台常驻的子进程，在根目录下执行：
 ```bash
 pnpm stop
 ```
 
-### 3.5 手动版本更新与代码同步
+### 4.5 手动版本更新与代码同步
 当拉取代码仓库最新修改时，在根目录下执行：
 1. **停止后台进程**：`pnpm stop`
 2. **拉取最新源码**：`git pull origin main`

package/freya.js

@@ -97,11 +97,16 @@ async function getCliEnabled(args) {
   return true;
 }
 
+function isForegroundMode(args) {
+  return args.includes('--foreground') || process.env.FREYA_FOREGROUND === 'true';
+}
+
 await checkSingleInstance();
 
 const cliEnabled = await getCliEnabled(process.argv);
+const isForeground = isForegroundMode(process.argv);
 
-if (!cliEnabled) {
+if (!cliEnabled && !isForeground) {
   const child = fork(coreIndex, process.argv.slice(2), {
     detached: true,
     stdio: 'ignore',
@@ -129,6 +134,16 @@ if (!cliEnabled) {
     }
   });
 
+  const forwardSignal = (signal) => {
+    if (child.pid) {
+      try {
+        process.kill(child.pid, signal);
+      } catch { }
+    }
+  };
+  process.on('SIGTERM', () => forwardSignal('SIGTERM'));
+  process.on('SIGINT', () => forwardSignal('SIGINT'));
+
   child.on('exit', (code) => {
     process.exit(code ?? 0);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eoasmxd/freya",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "license": "MIT",
   "type": "module",
   "description": "Freya - 微内核智能体系统",
@@ -35,10 +35,10 @@
     "src"
   ],
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1",
+    "@eoasmxd/freya-sdk": "^0.4.3",
     "ws": "^8.18.0",
     "mysql2": "^3.11.0",
-    "qrcode-terminal": "^0.12.0"
+    "qrcode": "^1.5.4"
   },
   "scripts": {
     "start": "node freya.js",

package/plugins/plugin-gemini/package.json

@@ -18,7 +18,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-openai/package.json

@@ -18,7 +18,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-telegram-channel/package.json

@@ -19,7 +19,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-fs/package.json

@@ -21,7 +21,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-memory/package.json

@@ -21,7 +21,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-mysql/package.json

@@ -23,7 +23,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1",
+    "@eoasmxd/freya-sdk": "^0.4.3",
     "mysql2": "^3.11.0"
   },
   "devDependencies": {

package/plugins/plugin-tool-web/package.json

@@ -22,7 +22,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1"
+    "@eoasmxd/freya-sdk": "^0.4.3"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-wecom-channel/package.json

@@ -19,7 +19,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1",
+    "@eoasmxd/freya-sdk": "^0.4.3",
     "ws": "^8.18.0"
   },
   "devDependencies": {

package/plugins/plugin-weixin-channel/dist/index.js

@@ -1,8 +1,7 @@
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
-// @ts-ignore
-import qrcodeTerminal from "qrcode-terminal";
+import QRCode from "qrcode";
 const WEIXIN_MIME_MAP = {
     ".pdf": "application/pdf",
     ".txt": "text/plain",
@@ -228,45 +227,20 @@ export default class FreyaWeixinChannelPlugin {
             if (!qrcode) {
                 throw new Error("获取微信登录二维码失败：服务端未返回 qrcode");
             }
-            const matrix = [];
-            qrcodeTerminal.generate(scanUrl, { small: false }, (code) => {
-                const lines = code.split("\n");
-                for (const line of lines) {
-                    const cleanLine = line.replace(/[\r\n]/g, "");
-                    if (!cleanLine)
-                        continue;
-                    const row = [];
-                    const re = /\x1b\[(40|47)m  \x1b\[0m/g;
-                    let match;
-                    while ((match = re.exec(cleanLine)) !== null) {
-                        row.push(match[1] === "40" ? 1 : 0);
-                    }
-                    if (row.length > 0) {
-                        matrix.push(row);
-                    }
-                }
+            const qrAscii = await QRCode.toString(scanUrl, {
+                type: "utf8",
+                errorCorrectionLevel: "M",
+                margin: 2
             });
-            const size = matrix.length;
-            let svgContent = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${size} ${size}" width="180" height="180" style="shape-rendering:crispEdges;">`;
-            svgContent += `<rect width="${size}" height="${size}" fill="#ffffff"/>`;
-            for (let y = 0; y < size; y++) {
-                const row = matrix[y];
-                for (let x = 0; x < row.length; x++) {
-                    if (row[x] === 1) {
-                        svgContent += `<rect x="${x}" y="${y}" width="1" height="1" fill="#000000"/>`;
-                    }
-                }
-            }
-            svgContent += `</svg>`;
-            const base64Svg = Buffer.from(svgContent).toString("base64");
-            const qrDataUri = `data:image/svg+xml;base64,${base64Svg}`;
             this.pollWeixinQrStatus(ctx, accountId, config, qrcode).catch((err) => {
                 ctx.logger.error(`微信账号 [${accountId}] 后台监听扫码绑定失败:`, err.message);
             });
-            return `⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
+            return (`⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
                 `**[微信扫码] 请使用微信扫描下方二维码绑定账号 [${accountId}]**：\n\n` +
-                `![微信登录二维码](${qrDataUri})\n\n` +
-                `*(提示：若二维码未能正常显示，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`;
+                "```text\n" +
+                qrAscii +
+                "\n```\n\n" +
+                `*(提示：若字符二维码未能正常显示或无法扫描，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`);
         }
         catch (err) {
             ctx.logger.error(`微信账号 [${accountId}] 拉取扫码登录失败:`, err.message);

package/plugins/plugin-weixin-channel/package.json

@@ -18,11 +18,12 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.1",
-    "qrcode-terminal": "^0.12.0"
+    "@eoasmxd/freya-sdk": "^0.4.3",
+    "qrcode": "^1.5.4"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
+    "@types/qrcode": "^1.5.5",
     "typescript": "^5.5.0"
   }
 }

package/src/packages/core/src/agent/agent-executor.ts

@@ -216,6 +216,11 @@ export class FreyaAgentExecutor {
     const deactivatedIds: string[] = [];
 
     for (const id of activeToolboxIds) {
+      if (!this.toolRegistry.isToolboxEnabled(id)) {
+        deactivatedIds.push(id);
+        this.context.logger.info(`[FreyaAgentExecutor] 工具箱 [${id}] 已被全局禁用，自动从当前会话卸载。`);
+        continue;
+      }
       const boxTools = this.toolRegistry.getToolsInBox(id);
       const isUsed = boxTools.some((tool) => executedToolNames.has(tool.getDefinition().name));
 

package/src/packages/core/src/command/command-executor.ts

@@ -32,6 +32,14 @@ export class FreyaCommandExecutor {
       return true;
     }
 
+    if (!this.registry.isCommandEnabled(commandName)) {
+      this.context.eventBus.emit('session:reply:error', {
+        sessionId,
+        message: `❌ 权限拒绝：系统指令 "/${commandName}" 已被系统管理员全局禁用。`
+      });
+      return true;
+    }
+
     try {
       const replyContent = await cmd.execute(args, sessionId, this.context, connectionId);
       if (replyContent) {

package/src/packages/core/src/command/command-registry.ts

@@ -1,11 +1,45 @@
 import type { FreyaCommand, FreyaContext } from '@eoasmxd/freya-sdk';
 
+const BUILTIN_COMMAND_CATEGORY_MAP: Record<string, string> = {
+  approve: 'auth',
+  reject: 'auth',
+  session: 'session',
+  model: 'model',
+  models: 'model'
+};
+
 /** 系统指令注册表：维护主指令与别名的映射字典 */
 export class FreyaCommandRegistry {
   private commands = new Map<string, FreyaCommand>();
   private aliasMap = new Map<string, string>();
   private pluginCommandsMap = new Map<string, string[]>();
 
+  constructor(private context?: FreyaContext) {}
+
+  setContext(context: FreyaContext): void {
+    this.context = context;
+  }
+
+  /** 判断指定指令当前是否已注册且处于可用启用状态 */
+  isCommandEnabled(name: string): boolean {
+    const lowerName = name.toLowerCase();
+    const primaryName = this.aliasMap.get(lowerName) || lowerName;
+
+    if (!this.commands.has(primaryName)) {
+      return false;
+    }
+
+    const category = BUILTIN_COMMAND_CATEGORY_MAP[primaryName];
+    if (category) {
+      const commandsConfig = (this.context?.config as any)?.commands?.builtin;
+      if (commandsConfig && typeof commandsConfig[category]?.enabled === 'boolean') {
+        return commandsConfig[category].enabled;
+      }
+    }
+
+    return true;
+  }
+
   /** 注册新的系统指令并建立别名路由 */
   register(command: FreyaCommand, pluginId?: string): void {
     const name = command.name.toLowerCase();
@@ -63,6 +97,6 @@ export class FreyaCommandRegistry {
   }
 
   list(): FreyaCommand[] {
-    return Array.from(this.commands.values());
+    return Array.from(this.commands.values()).filter((cmd) => this.isCommandEnabled(cmd.name));
   }
 }

package/src/packages/core/src/config/config-manager.ts

@@ -697,6 +697,41 @@ export class FreyaConfigManager {
         min: 10,
         max: 300,
         category: '安全'
+      },
+      {
+        key: 'tools.builtin.config.enabled',
+        defaultValue: true,
+        description: '是否启用系统核心配置工具箱（允许大模型查看与修改系统配置）',
+        type: 'boolean',
+        category: '系统工具'
+      },
+      {
+        key: 'tools.builtin.session.enabled',
+        defaultValue: true,
+        description: '是否启用会话与子任务管理工具箱（允许大模型查阅会话历史与派生子任务）',
+        type: 'boolean',
+        category: '系统工具'
+      },
+      {
+        key: 'commands.builtin.auth.enabled',
+        defaultValue: true,
+        description: '是否启用敏感操作授权审批指令（/approve 与 /reject）',
+        type: 'boolean',
+        category: '系统指令'
+      },
+      {
+        key: 'commands.builtin.session.enabled',
+        defaultValue: true,
+        description: '是否启用会话管理与路由指令（/session 及其子命令）',
+        type: 'boolean',
+        category: '系统指令'
+      },
+      {
+        key: 'commands.builtin.model.enabled',
+        defaultValue: true,
+        description: '是否启用模型查看与切换指令（/model 及其子命令）',
+        type: 'boolean',
+        category: '系统指令'
       }
     ];
 

package/src/packages/core/src/kernel.ts

@@ -49,11 +49,11 @@ export class FreyaKernel {
     ctx.eventBus = new FreyaEventBus();
 
     const configSchemaRegistry = new FreyaConfigSchemaRegistry();
-    const toolRegistry = new FreyaToolRegistry();
+    const toolRegistry = new FreyaToolRegistry(ctx);
     const llmRegistry = new FreyaLLMRegistry();
     const promptRegistry = new FreyaPromptRegistry();
 
-    const commandRegistry = new FreyaCommandRegistry();
+    const commandRegistry = new FreyaCommandRegistry(ctx);
     this.channelRegistry = new FreyaChannelRegistry();
     const pluginRegistry = new FreyaPluginRegistry(toolRegistry, llmRegistry, this.channelRegistry);
     const skillRegistry = new FreyaSkillRegistry();

package/src/packages/core/src/tools/tool-registry.ts

@@ -1,14 +1,39 @@
-import type { FreyaTool, FreyaToolbox } from '@eoasmxd/freya-sdk';
+import type { FreyaContext, FreyaTool, FreyaToolbox } from '@eoasmxd/freya-sdk';
 import type { FreyaPromptRegistry } from '../prompt/prompt-registry.js';
 
 /**
  * 内核工具注册表。
- * 统一聚合内置工具箱与来自插件体系的外部工具/工具箱。
+ * 统一聚合内置工具箱与来自插件体系的外部工具箱。
  */
 export class FreyaToolRegistry {
   private toolboxes: FreyaToolbox[] = [];
 
-  /** 注册一个工具箱（内置或外部插件）。 */
+  constructor(private context?: FreyaContext) {}
+
+  setContext(context: FreyaContext): void {
+    this.context = context;
+  }
+
+  /** 判断指定工具箱当前是否已注册且处于可用启用状态 */
+  isToolboxEnabled(toolboxId: string): boolean {
+    if (toolboxId === 'meta') {
+      return true;
+    }
+
+    const isRegistered = this.toolboxes.some((tb) => tb.getId() === toolboxId);
+    if (!isRegistered) {
+      return false;
+    }
+
+    const toolsConfig = (this.context?.config as any)?.tools?.builtin;
+    if (toolsConfig && typeof toolsConfig[toolboxId]?.enabled === 'boolean') {
+      return toolsConfig[toolboxId].enabled;
+    }
+
+    return true;
+  }
+
+  /** 注册工具箱 */
   registerToolbox(toolbox: FreyaToolbox): void {
     const newId = toolbox.getId();
     const existingIndex = this.toolboxes.findIndex((tb) => tb.getId() === newId || tb === toolbox);
@@ -25,16 +50,22 @@ export class FreyaToolRegistry {
     this.toolboxes = this.toolboxes.filter((tb) => tb.getId() !== id);
   }
 
-  /** 获取指定 ID 的工具箱中的所有原子工具。 */
+  /** 获取指定 ID 的工具箱中的所有原子工具 */
   getToolsInBox(id: string): FreyaTool[] {
+    if (!this.isToolboxEnabled(id)) {
+      return [];
+    }
     const tb = this.toolboxes.find((t) => t.getId() === id);
     return tb ? tb.getTools() : [];
   }
 
-  /** 聚合所有来源的工具，返回完整工具字典。 */
+  /** 聚合所有来源的已启用工具 */
   getAllTools(): Map<string, FreyaTool> {
     const tools = new Map<string, FreyaTool>();
     for (const toolbox of this.toolboxes) {
+      if (!this.isToolboxEnabled(toolbox.getId())) {
+        continue;
+      }
       for (const tool of toolbox.getTools()) {
         tools.set(tool.getDefinition().name, tool);
       }
@@ -42,13 +73,16 @@ export class FreyaToolRegistry {
     return tools;
   }
 
-  /** 根据当前会话已激活的工具箱列表，动态过滤获取所需的工具字典 */
+  /** 根据当前会话已激活的工具箱列表，过滤获取所需的工具字典 */
   getFilteredTools(activeToolboxIds: string[]): Map<string, FreyaTool> {
     const activeSet = new Set(activeToolboxIds || []);
     const tools = new Map<string, FreyaTool>();
 
     for (const toolbox of this.toolboxes) {
       const toolboxId = toolbox.getId();
+      if (!this.isToolboxEnabled(toolboxId)) {
+        continue;
+      }
       if (toolboxId === 'meta' || activeSet.has(toolboxId)) {
         for (const tool of toolbox.getTools()) {
           tools.set(tool.getDefinition().name, tool);
@@ -58,16 +92,19 @@ export class FreyaToolRegistry {
     return tools;
   }
 
-  /** 聚合所有来源的工具提示词引导说明，延迟解析 key → 内容 */
+  /** 聚合所有已启用的工具箱提示词引导说明 */
   getToolInstructions(promptRegistry: FreyaPromptRegistry): string[] {
     const instructions: string[] = [];
     for (const toolbox of this.toolboxes) {
+      const toolboxId = toolbox.getId();
+      if (!this.isToolboxEnabled(toolboxId)) {
+        continue;
+      }
       const key = toolbox.getInstructionPrompt?.();
       if (!key) continue;
 
       const resolved = promptRegistry.get(key);
       if (resolved) {
-        const toolboxId = toolbox.getId();
         instructions.push(`### 工具箱能力说明 [激活ID: "${toolboxId}"]\n${resolved}`);
       }
     }
@@ -75,6 +112,9 @@ export class FreyaToolRegistry {
   }
 
   getRegisteredToolboxIds(): string[] {
-    return this.toolboxes.map((tb) => tb.getId());
+    return this.toolboxes
+      .map((tb) => tb.getId())
+      .filter((id) => this.isToolboxEnabled(id));
   }
 }
+

package/src/plugins/plugin-weixin-channel/src/index.ts

@@ -2,8 +2,7 @@ import type { ChannelPlugin, FreyaAttachment, FreyaCommand, FreyaContext } from
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
-// @ts-ignore
-import qrcodeTerminal from "qrcode-terminal";
+import QRCode from "qrcode";
 
 interface WeixinBotConfig {
   id: string;
@@ -279,48 +278,24 @@ export default class FreyaWeixinChannelPlugin implements ChannelPlugin {
         throw new Error("获取微信登录二维码失败：服务端未返回 qrcode");
       }
 
-      const matrix: number[][] = [];
-      qrcodeTerminal.generate(scanUrl, { small: false }, (code: string) => {
-        const lines = code.split("\n");
-        for (const line of lines) {
-          const cleanLine = line.replace(/[\r\n]/g, "");
-          if (!cleanLine) continue;
-          const row: number[] = [];
-          const re = /\x1b\[(40|47)m  \x1b\[0m/g;
-          let match;
-          while ((match = re.exec(cleanLine)) !== null) {
-            row.push(match[1] === "40" ? 1 : 0);
-          }
-          if (row.length > 0) {
-            matrix.push(row);
-          }
-        }
+      const qrAscii = await QRCode.toString(scanUrl, {
+        type: "utf8",
+        errorCorrectionLevel: "M",
+        margin: 2
       });
 
-      const size = matrix.length;
-      let svgContent = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${size} ${size}" width="180" height="180" style="shape-rendering:crispEdges;">`;
-      svgContent += `<rect width="${size}" height="${size}" fill="#ffffff"/>`;
-      for (let y = 0; y < size; y++) {
-        const row = matrix[y];
-        for (let x = 0; x < row.length; x++) {
-          if (row[x] === 1) {
-            svgContent += `<rect x="${x}" y="${y}" width="1" height="1" fill="#000000"/>`;
-          }
-        }
-      }
-      svgContent += `</svg>`;
-
-      const base64Svg = Buffer.from(svgContent).toString("base64");
-      const qrDataUri = `data:image/svg+xml;base64,${base64Svg}`;
-
       this.pollWeixinQrStatus(ctx, accountId, config, qrcode).catch((err) => {
         ctx.logger.error(`微信账号 [${accountId}] 后台监听扫码绑定失败:`, err.message);
       });
 
-      return `⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
+      return (
+        `⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
         `**[微信扫码] 请使用微信扫描下方二维码绑定账号 [${accountId}]**：\n\n` +
-        `![微信登录二维码](${qrDataUri})\n\n` +
-        `*(提示：若二维码未能正常显示，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`;
+        "```text\n" +
+        qrAscii +
+        "\n```\n\n" +
+        `*(提示：若字符二维码未能正常显示或无法扫描，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`
+      );
     } catch (err: any) {
       ctx.logger.error(`微信账号 [${accountId}] 拉取扫码登录失败:`, err.message);
       return `❌ 拉取微信登录二维码失败: ${err.message}`;