@jingyi0605/codingns 0.7.4 → 0.8.0

package/dist/server/modules/assistant-capability/assistant-capability-service.js

@@ -3,6 +3,90 @@ import { AppError } from "../../shared/errors/app-error.js";
 import { nowIso } from "../../shared/utils/time.js";
 import { recordButlerProxyMessageOrigin } from "../sessions/session-message-origin-utils.js";
 import { createProviderDisabledError } from "../provider/provider-disabled.js";
+const WORKSPACE_SCOPED_DEFAULT_CAPABILITIES = new Set([
+    "capabilities.list",
+    "projects.get",
+    "sessions.get",
+    "sessions.messages.list",
+    "sessions.runtime.get",
+    "terminals.create",
+    "terminals.list",
+    "terminals.history.read",
+    "office.document.create",
+    "office.document.update",
+    "office.document.export",
+    "office.document.task.get",
+    "office.browser.profile.list",
+    "office.browser.profile.create",
+    "office.browser.profile.get",
+    "office.browser.task.create",
+    "office.browser.task.get",
+    "office.ops.target.list",
+    "office.ops.target.create",
+    "office.ops.target.get",
+    "office.ops.ssh-task.create",
+    "office.ops.browser-task.create",
+    "office.ops.task.get",
+    "worktrees.tree",
+    "worktrees.create",
+    "worktrees.merge-preview",
+    "worktrees.cleanup"
+]);
+const WORKSPACE_SCOPED_CONFIRMATION_CAPABILITIES = new Set([
+    "terminals.input.send",
+    "terminals.close",
+    "office.ops.task.execute",
+    "debug-targets.analyze",
+    "debug-targets.framework-analysis.refresh",
+    "debug-targets.launch-plan.create",
+    "debug-targets.run",
+    "worktrees.merge-into-parent"
+]);
+const PROJECT_SCOPED_CAPABILITIES = new Set([
+    "projects.get",
+    "projects.sessions.list",
+    "projects.sessions.start",
+    "worktrees.tree",
+    "worktrees.create",
+    "worktrees.merge-preview",
+    "worktrees.merge-into-parent",
+    "worktrees.cleanup"
+]);
+const WORKSPACE_SCOPED_CAPABILITIES = new Set([
+    "capabilities.list",
+    "sessions.get",
+    "sessions.messages.list",
+    "sessions.runtime.get",
+    "terminals.create",
+    "terminals.list",
+    "terminals.history.read",
+    "terminals.input.send",
+    "terminals.close",
+    "office.document.create",
+    "office.document.update",
+    "office.document.export",
+    "office.document.task.get",
+    "office.browser.profile.list",
+    "office.browser.profile.create",
+    "office.browser.profile.get",
+    "office.browser.task.create",
+    "office.browser.task.get",
+    "office.ops.target.list",
+    "office.ops.target.create",
+    "office.ops.target.get",
+    "office.ops.ssh-task.create",
+    "office.ops.browser-task.create",
+    "office.ops.task.get",
+    "office.ops.task.execute",
+    "debug-targets.analyze",
+    "debug-targets.framework-analysis.get",
+    "debug-targets.framework-analysis.refresh",
+    "debug-targets.launch-plan.create",
+    "debug-targets.run",
+    "debug-targets.runtime-latest.get",
+    "debug-targets.runtimes.list",
+    "debug-runtimes.get"
+]);
 const ASSISTANT_CAPABILITIES = [
     {
         name: "capabilities.list",
@@ -226,6 +310,108 @@ const ASSISTANT_CAPABILITIES = [
         enabled: true,
         summary: "关闭指定受控终端"
     },
+    {
+        name: "office.document.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建办公文档并返回文档摘要"
+    },
+    {
+        name: "office.document.update",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "更新办公文档并返回最新修订摘要"
+    },
+    {
+        name: "office.document.export",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建或执行文档导出任务，并返回任务状态与回执"
+    },
+    {
+        name: "office.document.task.get",
+        mode: "read",
+        enabled: true,
+        summary: "读取办公文档导出任务状态、产物与回执"
+    },
+    {
+        name: "office.browser.profile.list",
+        mode: "read",
+        enabled: true,
+        summary: "列出办公浏览器 Profile"
+    },
+    {
+        name: "office.browser.profile.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建独立或接管模式的办公浏览器 Profile"
+    },
+    {
+        name: "office.browser.profile.get",
+        mode: "read",
+        enabled: true,
+        summary: "读取办公浏览器 Profile 详情"
+    },
+    {
+        name: "office.browser.task.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建并可选执行办公浏览器任务"
+    },
+    {
+        name: "office.browser.task.get",
+        mode: "read",
+        enabled: true,
+        summary: "读取办公浏览器任务状态、产物与回执"
+    },
+    {
+        name: "office.ops.target.list",
+        mode: "read",
+        enabled: true,
+        summary: "列出办公运维目标"
+    },
+    {
+        name: "office.ops.target.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建 SSH 或网页控制台运维目标"
+    },
+    {
+        name: "office.ops.target.get",
+        mode: "read",
+        enabled: true,
+        summary: "读取办公运维目标详情"
+    },
+    {
+        name: "office.ops.ssh-task.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建 SSH 运维任务"
+    },
+    {
+        name: "office.ops.task.execute",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "执行已创建并准备好的 SSH 运维任务"
+    },
+    {
+        name: "office.task.approval.reply",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "处理办公任务审批，批准后任务可以继续执行"
+    },
+    {
+        name: "office.ops.browser-task.create",
+        mode: "proxy_execute",
+        enabled: true,
+        summary: "创建浏览器运维任务"
+    },
+    {
+        name: "office.ops.task.get",
+        mode: "read",
+        enabled: true,
+        summary: "读取办公运维任务状态、产物与回执"
+    },
     {
         name: "debug-targets.compatibility-matrix.get",
         mode: "read",
@@ -377,6 +563,7 @@ export class AssistantCapabilityService {
     terminalService;
     debugTargetService;
     workspaceService;
+    workspaceWorktreeRepository;
     worktreeManager;
     worktreeSyncService;
     worktreeMergeService;
@@ -384,7 +571,13 @@ export class AssistantCapabilityService {
     sessionMessageOriginRepository;
     butlerFollowUpService;
     providerControlRepository;
-    constructor(butlerProjectService, butlerSessionService, butlerControlSessionService, assistantAutomationService, assistantSandboxService, butlerControlTimerService, sessionHistoryService, sessionLiveRuntimeService, terminalService, debugTargetService, workspaceService, worktreeManager, worktreeSyncService, worktreeMergeService, worktreeCleanupService, sessionMessageOriginRepository = null, butlerFollowUpService = null, providerControlRepository = null) {
+    documentRuntimeService;
+    officeServiceForDocumentTask;
+    officePreviewLinkService;
+    browserRuntimeService;
+    opsRuntimeService;
+    capabilityDefinitions = augmentAssistantCapabilities(ASSISTANT_CAPABILITIES);
+    constructor(butlerProjectService, butlerSessionService, butlerControlSessionService, assistantAutomationService, assistantSandboxService, butlerControlTimerService, sessionHistoryService, sessionLiveRuntimeService, terminalService, debugTargetService, workspaceService, workspaceWorktreeRepository, worktreeManager, worktreeSyncService, worktreeMergeService, worktreeCleanupService, sessionMessageOriginRepository = null, butlerFollowUpService = null, providerControlRepository = null, documentRuntimeService = null, officeServiceForDocumentTask = null, officePreviewLinkService = null, browserRuntimeService = null, opsRuntimeService = null) {
         this.butlerProjectService = butlerProjectService;
         this.butlerSessionService = butlerSessionService;
         this.butlerControlSessionService = butlerControlSessionService;
@@ -396,6 +589,7 @@ export class AssistantCapabilityService {
         this.terminalService = terminalService;
         this.debugTargetService = debugTargetService;
         this.workspaceService = workspaceService;
+        this.workspaceWorktreeRepository = workspaceWorktreeRepository;
         this.worktreeManager = worktreeManager;
         this.worktreeSyncService = worktreeSyncService;
         this.worktreeMergeService = worktreeMergeService;
@@ -403,14 +597,19 @@ export class AssistantCapabilityService {
         this.sessionMessageOriginRepository = sessionMessageOriginRepository;
         this.butlerFollowUpService = butlerFollowUpService;
         this.providerControlRepository = providerControlRepository;
+        this.documentRuntimeService = documentRuntimeService;
+        this.officeServiceForDocumentTask = officeServiceForDocumentTask;
+        this.officePreviewLinkService = officePreviewLinkService;
+        this.browserRuntimeService = browserRuntimeService;
+        this.opsRuntimeService = opsRuntimeService;
     }
-    listCapabilities() {
+    listCapabilities(context) {
         return this.createReceipt("capabilities.list", {
             kind: "none",
             id: null
         }, {
             version: "2026-04-16",
-            items: ASSISTANT_CAPABILITIES
+            items: this.listVisibleCapabilities(context)
         });
     }
     listProjects(input) {
@@ -450,6 +649,291 @@ export class AssistantCapabilityService {
             items
         });
     }
+    createOfficeDocument(input) {
+        const detail = this.requireDocumentRuntimeService().createDocument({
+            userId: input.userId,
+            workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+            title: input.title,
+            templateId: normalizeAssistantText(input.templateId) ?? undefined,
+            templateKey: normalizeAssistantText(input.templateKey) ?? undefined,
+            content: input.content,
+            outline: input.outline,
+            summary: input.summary ?? undefined
+        });
+        return this.createReceipt("office.document.create", {
+            kind: "workspace",
+            id: detail.document.workspaceId
+        }, {
+            document: summarizeOfficeDocumentDetail(detail)
+        });
+    }
+    updateOfficeDocument(input) {
+        const detail = this.requireDocumentRuntimeService().updateDocument({
+            documentId: input.documentId,
+            userId: input.userId,
+            title: input.title ?? undefined,
+            templateId: normalizeAssistantText(input.templateId) ?? undefined,
+            content: input.content,
+            outline: input.outline,
+            summary: input.summary ?? undefined,
+            status: input.status
+        });
+        return this.createReceipt("office.document.update", {
+            kind: "workspace",
+            id: detail.document.workspaceId
+        }, {
+            document: summarizeOfficeDocumentDetail(detail)
+        });
+    }
+    async exportOfficeDocument(input) {
+        const createResult = this.requireDocumentRuntimeService().createExportTask({
+            documentId: input.documentId,
+            userId: input.userId,
+            workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+            format: input.format ?? "docx",
+            riskLevel: input.riskLevel
+        });
+        const execution = input.execute === false
+            ? null
+            : await this.requireDocumentRuntimeService().executeExportTask(createResult.task.id, input.userId);
+        const detail = this.requireOfficeTaskService().getTaskDetail(createResult.task.id, input.userId);
+        return this.createReceipt("office.document.export", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            }),
+            execution
+        });
+    }
+    getOfficeDocumentTask(taskId, userId) {
+        const detail = this.requireOfficeTaskService().getTaskDetail(taskId, userId);
+        return this.createReceipt("office.document.task.get", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId
+            })
+        });
+    }
+    listOfficeBrowserProfiles(userId, workspaceId) {
+        const items = this.requireBrowserRuntimeService().listProfiles(userId, normalizeAssistantText(workspaceId) ?? undefined);
+        return this.createReceipt("office.browser.profile.list", {
+            kind: "workspace",
+            id: normalizeAssistantText(workspaceId)
+        }, {
+            items
+        });
+    }
+    getOfficeBrowserProfile(profileId, userId) {
+        const profile = this.requireBrowserRuntimeService().getProfile(profileId, userId);
+        return this.createReceipt("office.browser.profile.get", {
+            kind: "workspace",
+            id: profile.workspaceId
+        }, {
+            profile
+        });
+    }
+    createOfficeBrowserProfile(input) {
+        const browserRuntimeService = this.requireBrowserRuntimeService();
+        const profile = input.mode === "cdp_attached"
+            ? browserRuntimeService.attachCdpProfile({
+                userId: input.userId,
+                workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+                engine: input.engine ?? "chrome",
+                mode: "cdp_attached",
+                displayName: input.displayName ?? undefined,
+                ownershipScope: input.ownershipScope ?? undefined,
+                cdpEndpoint: input.cdpEndpoint ?? undefined
+            })
+            : browserRuntimeService.createProfile({
+                userId: input.userId,
+                workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+                engine: input.engine ?? "chrome",
+                mode: "persistent",
+                displayName: input.displayName ?? undefined,
+                ownershipScope: input.ownershipScope ?? undefined,
+                cdpEndpoint: input.cdpEndpoint ?? undefined
+            });
+        return this.createReceipt("office.browser.profile.create", {
+            kind: "workspace",
+            id: profile.workspaceId
+        }, {
+            profile
+        });
+    }
+    async createOfficeBrowserTask(input) {
+        const createResult = this.requireBrowserRuntimeService().createBrowserTask({
+            userId: input.userId,
+            workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+            title: input.title,
+            profileId: normalizeAssistantText(input.profileId) ?? undefined,
+            riskLevel: input.riskLevel,
+            executionBackend: input.executionBackend,
+            input: input.input
+        });
+        const execution = input.execute === false
+            ? null
+            : await this.requireBrowserRuntimeService().executeBrowserTask(createResult.task.id, input.userId);
+        const detail = this.requireOfficeTaskService().getTaskDetail(createResult.task.id, input.userId);
+        return this.createReceipt("office.browser.task.create", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            }),
+            execution
+        });
+    }
+    getOfficeBrowserTask(taskId, userId) {
+        const detail = this.requireOfficeTaskService().getTaskDetail(taskId, userId);
+        return this.createReceipt("office.browser.task.get", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId
+            })
+        });
+    }
+    listOfficeOpsTargets(userId, workspaceId, kind, status) {
+        const items = this.requireOpsRuntimeService().listTargets({
+            userId,
+            workspaceId: normalizeAssistantText(workspaceId) ?? undefined,
+            kind: kind ?? undefined,
+            status: status ?? undefined
+        });
+        return this.createReceipt("office.ops.target.list", {
+            kind: "workspace",
+            id: normalizeAssistantText(workspaceId)
+        }, {
+            items
+        });
+    }
+    getOfficeOpsTarget(targetId, userId) {
+        const target = this.requireOpsRuntimeService().getTarget(targetId, userId);
+        return this.createReceipt("office.ops.target.get", {
+            kind: "workspace",
+            id: target.workspaceId
+        }, {
+            target
+        });
+    }
+    createOfficeOpsTarget(input) {
+        const target = this.requireOpsRuntimeService().createTarget({
+            userId: input.userId,
+            workspaceId: normalizeAssistantText(input.workspaceId) ?? undefined,
+            kind: input.kind,
+            displayName: input.displayName,
+            environment: input.environment ?? undefined,
+            config: input.config,
+            credentialRef: input.credentialRef ?? undefined
+        });
+        return this.createReceipt("office.ops.target.create", {
+            kind: "workspace",
+            id: target.workspaceId
+        }, {
+            target
+        });
+    }
+    async createOfficeOpsSshTask(input) {
+        const createResult = this.requireOpsRuntimeService().createSshTask({
+            userId: input.userId,
+            title: input.title,
+            targetId: input.targetId,
+            riskLevel: input.riskLevel,
+            input: input.input
+        });
+        const execution = input.execute === false
+            ? null
+            : createResult.task.status === "ready"
+                ? await this.requireOpsRuntimeService().executeSshTask(createResult.task.id, input.userId)
+                : null;
+        const detail = this.requireOfficeTaskService().getTaskDetail(createResult.task.id, input.userId);
+        return this.createReceipt("office.ops.ssh-task.create", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            }),
+            execution
+        });
+    }
+    async executeOfficeOpsTask(input) {
+        const execution = await this.requireOpsRuntimeService().executeSshTask(input.taskId, input.userId);
+        const detail = this.requireOfficeTaskService().getTaskDetail(input.taskId, input.userId);
+        return this.createReceipt("office.ops.task.execute", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            execution,
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            })
+        });
+    }
+    replyOfficeTaskApproval(input) {
+        const approval = this.requireOfficeApprovalService().replyApproval({
+            approvalId: input.approvalId,
+            userId: input.userId,
+            status: input.status,
+            decisionNote: input.decisionNote ?? undefined
+        });
+        const detail = this.requireOfficeTaskService().getTaskDetail(approval.taskId, input.userId);
+        return this.createReceipt("office.task.approval.reply", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            approval,
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            })
+        });
+    }
+    createOfficeOpsBrowserTask(input) {
+        const createResult = this.requireOpsRuntimeService().createBrowserTask({
+            userId: input.userId,
+            title: input.title,
+            targetId: input.targetId,
+            profileId: normalizeAssistantText(input.profileId) ?? undefined,
+            executionBackend: input.executionBackend,
+            riskLevel: input.riskLevel,
+            input: input.input
+        });
+        const detail = this.requireOfficeTaskService().getTaskDetail(createResult.task.id, input.userId);
+        return this.createReceipt("office.ops.browser-task.create", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId: input.userId
+            })
+        });
+    }
+    getOfficeOpsTask(taskId, userId) {
+        const detail = this.requireOfficeTaskService().getTaskDetail(taskId, userId);
+        return this.createReceipt("office.ops.task.get", {
+            kind: "workspace",
+            id: detail.task.workspaceId
+        }, {
+            task: summarizeOfficeTaskDetail(detail, {
+                officePreviewLinkService: this.officePreviewLinkService,
+                userId
+            })
+        });
+    }
     async startProjectSession(input) {
         const config = this.resolveSessionLaunchConfig(input);
         const session = await this.butlerSessionService.startSession(input.projectId, {
@@ -526,6 +1010,7 @@ export class AssistantCapabilityService {
         });
     }
     async listSessionMessages(input) {
+        this.sessionHistoryService.getSession(input.sessionId, input.userId);
         const page = await this.sessionHistoryService.readSessionHistory(input.sessionId, input.cursor, input.limit, input.direction, input.userId);
         return this.createReceipt("sessions.messages.list", {
             kind: "session",
@@ -535,6 +1020,7 @@ export class AssistantCapabilityService {
         });
     }
     async getSessionRuntime(sessionId, userId) {
+        this.sessionHistoryService.getSession(sessionId, userId);
         const runtime = await this.sessionLiveRuntimeService.getSessionRuntime(sessionId, userId);
         return this.createReceipt("sessions.runtime.get", {
             kind: "session",
@@ -931,6 +1417,40 @@ export class AssistantCapabilityService {
             timer
         });
     }
+    async createTerminal(input) {
+        const workspaceId = input.projectId?.trim()
+            ? this.butlerProjectService.getById(input.projectId).workspaceId
+            : input.workspaceId?.trim() || "";
+        if (!workspaceId) {
+            throw new AppError({
+                statusCode: 400,
+                errorCode: "INVALID_INPUT",
+                detail: "创建终端必须提供 workspaceId 或 projectId",
+                field: "workspaceId"
+            });
+        }
+        const terminal = await this.terminalService.createTerminal({
+            workspaceId,
+            name: normalizeAssistantText(input.name) ?? undefined,
+            cwd: normalizeAssistantText(input.cwd) ?? undefined,
+            shell: normalizeAssistantText(input.shell) ?? undefined,
+            createdByUserId: input.userId
+        });
+        return this.createReceipt("terminals.create", {
+            kind: input.projectId?.trim() ? "project" : "workspace",
+            id: input.projectId?.trim() || workspaceId
+        }, {
+            workspaceId,
+            terminal: {
+                id: terminal.id,
+                workspaceId: terminal.workspaceId,
+                name: terminal.name,
+                cwd: terminal.cwd,
+                shell: terminal.shell,
+                status: terminal.status
+            }
+        });
+    }
     async listTerminals(input) {
         const workspaceId = input.projectId?.trim()
             ? this.butlerProjectService.getById(input.projectId).workspaceId
@@ -1209,6 +1729,186 @@ export class AssistantCapabilityService {
             payload
         };
     }
+    getCapabilityDefinition(capability) {
+        return this.capabilityDefinitions.find((item) => item.name === capability) ?? null;
+    }
+    listVisibleCapabilities(context) {
+        const profile = context?.capabilityProfile ?? resolveAssistantCapabilityProfile(context?.callerKind);
+        return this.capabilityDefinitions
+            .filter((item) => item.enabled)
+            .filter((item) => profile ? item.allowedProfiles.includes(profile) : true)
+            .map((item) => toVisibleCapabilityDescriptor(item));
+    }
+    assertExecutionAllowed(capability, context, target) {
+        const definition = this.getCapabilityDefinition(capability);
+        if (!definition) {
+            return;
+        }
+        const profile = context.capabilityProfile ?? resolveAssistantCapabilityProfile(context.callerKind);
+        if (profile && !definition.allowedProfiles.includes(profile)) {
+            throw new AppError({
+                statusCode: 403,
+                errorCode: "ASSISTANT_CAPABILITY_NOT_ALLOWED",
+                detail: `当前调用者无权使用能力 ${capability}`
+            });
+        }
+        if (profile === "workspace-scoped" && definition.requiresConfirmation) {
+            this.assertConfirmationSatisfied(capability, context);
+        }
+        if (profile !== "workspace-scoped") {
+            return;
+        }
+        if (definition.scopeKind === "workspace") {
+            const userId = this.requireExecutionUserId(context, capability);
+            const targetWorkspaceId = target?.workspaceId
+                ?? (target?.projectId ? this.butlerProjectService.getById(target.projectId).workspaceId : null)
+                ?? (target?.sessionId ? this.sessionHistoryService.getSession(target.sessionId, userId).workspaceId : null)
+                ?? (target?.terminalId ? this.terminalService.getTerminalOrThrow(target.terminalId).workspaceId : null);
+            const documentWorkspaceId = target?.documentId
+                ? this.requireDocumentRuntimeService().getDocumentDetail(target.documentId, userId).document.workspaceId
+                : null;
+            const officeTaskWorkspaceId = target?.officeTaskId
+                ? this.requireOfficeTaskService().getTaskDetail(target.officeTaskId, userId).task.workspaceId
+                : null;
+            const browserProfileWorkspaceId = target?.browserProfileId
+                ? this.requireBrowserRuntimeService().getProfile(target.browserProfileId, userId).workspaceId
+                : null;
+            const debugTargetWorkspaceId = target?.debugTargetId
+                ? this.debugTargetService.getTargetWorkspaceId(target.debugTargetId)
+                : null;
+            const debugRuntimeWorkspaceId = target?.debugRuntimeId
+                ? this.debugTargetService.getRuntimeWorkspaceId(target.debugRuntimeId)
+                : null;
+            this.assertConsistentWorkspaceTargets(capability, [
+                targetWorkspaceId,
+                documentWorkspaceId,
+                officeTaskWorkspaceId,
+                browserProfileWorkspaceId,
+                debugTargetWorkspaceId,
+                debugRuntimeWorkspaceId
+            ]);
+            const resolvedWorkspaceId = target?.worktreeWorkspaceId
+                ? this.resolveRootWorkspaceId(target.worktreeWorkspaceId)
+                : debugRuntimeWorkspaceId
+                    ?? debugTargetWorkspaceId
+                    ?? browserProfileWorkspaceId
+                    ?? officeTaskWorkspaceId
+                    ?? documentWorkspaceId
+                    ?? targetWorkspaceId;
+            this.assertWorkspaceScopedTarget(context.workspaceId, resolvedWorkspaceId, capability);
+            return;
+        }
+        if (definition.scopeKind === "project") {
+            if (capability.startsWith("worktrees.")) {
+                this.assertWorktreeExecutionAllowed(capability, context, target?.worktreeWorkspaceId ?? target?.workspaceId);
+                return;
+            }
+            const projectId = target?.projectId
+                ?? (target?.worktreeWorkspaceId
+                    ? (() => {
+                        const rootWorkspaceId = this.resolveRootWorkspaceId(target.worktreeWorkspaceId);
+                        return rootWorkspaceId ? this.resolveWorkspaceProject(rootWorkspaceId).id : null;
+                    })()
+                    : null)
+                ?? context.projectId;
+            if (!projectId) {
+                throw new AppError({
+                    statusCode: 403,
+                    errorCode: "ASSISTANT_PROJECT_SCOPE_REQUIRED",
+                    detail: `能力 ${capability} 必须绑定当前项目作用域`
+                });
+            }
+            const project = this.butlerProjectService.getById(projectId);
+            this.assertWorkspaceScopedTarget(context.workspaceId, project.workspaceId, capability);
+            if (context.projectId && context.projectId !== projectId) {
+                throw new AppError({
+                    statusCode: 403,
+                    errorCode: "ASSISTANT_PROJECT_SCOPE_MISMATCH",
+                    detail: `能力 ${capability} 不能跨项目执行`
+                });
+            }
+        }
+    }
+    assertWorkspaceScopedTarget(scopedWorkspaceId, targetWorkspaceId, capability) {
+        if (!scopedWorkspaceId || !targetWorkspaceId || scopedWorkspaceId !== targetWorkspaceId) {
+            throw new AppError({
+                statusCode: 403,
+                errorCode: "ASSISTANT_WORKSPACE_SCOPE_MISMATCH",
+                detail: `能力 ${capability} 不能跨工作区执行`
+            });
+        }
+    }
+    assertConfirmationSatisfied(capability, context) {
+        if (normalizeAssistantText(context.confirmationToken) === "confirmed") {
+            return;
+        }
+        throw new AppError({
+            statusCode: 409,
+            errorCode: "ASSISTANT_CONFIRMATION_REQUIRED",
+            detail: `能力 ${capability} 需要用户显式确认后才能执行`,
+            data: {
+                capability,
+                confirmationRequired: true
+            }
+        });
+    }
+    assertConsistentWorkspaceTargets(capability, workspaceIds) {
+        const normalized = workspaceIds.filter((item) => Boolean(item));
+        if (normalized.length <= 1) {
+            return;
+        }
+        const first = normalized[0];
+        if (normalized.some((item) => item !== first)) {
+            throw new AppError({
+                statusCode: 403,
+                errorCode: "ASSISTANT_WORKSPACE_SCOPE_MISMATCH",
+                detail: `能力 ${capability} 的目标资源不属于同一工作区`
+            });
+        }
+    }
+    assertWorktreeExecutionAllowed(capability, context, targetWorkspaceId) {
+        if (!targetWorkspaceId) {
+            throw new AppError({
+                statusCode: 403,
+                errorCode: "ASSISTANT_PROJECT_SCOPE_REQUIRED",
+                detail: `能力 ${capability} 必须绑定当前项目作用域`
+            });
+        }
+        const scopedRootWorkspaceId = this.resolveRootWorkspaceId(context.workspaceId);
+        const targetRootWorkspaceId = this.resolveRootWorkspaceId(targetWorkspaceId);
+        this.assertWorkspaceScopedTarget(scopedRootWorkspaceId, targetRootWorkspaceId, capability);
+    }
+    resolveRootWorkspaceId(workspaceId) {
+        const normalizedWorkspaceId = normalizeAssistantText(workspaceId);
+        if (!normalizedWorkspaceId) {
+            return null;
+        }
+        return this.workspaceWorktreeRepository.findByWorkspaceId(normalizedWorkspaceId)?.rootWorkspaceId
+            ?? normalizedWorkspaceId;
+    }
+    requireExecutionUserId(context, capability) {
+        const userId = normalizeAssistantText(context.userId);
+        if (!userId) {
+            throw new AppError({
+                statusCode: 403,
+                errorCode: "ASSISTANT_EXECUTION_CONTEXT_INVALID",
+                detail: `能力 ${capability} 缺少用户上下文`
+            });
+        }
+        return userId;
+    }
+    resolveWorkspaceProject(workspaceId) {
+        const candidates = this.butlerProjectService.list({ workspaceId });
+        const project = candidates.find((item) => item.lifecycleStatus === "active") ?? candidates[0] ?? null;
+        if (!project) {
+            throw new AppError({
+                statusCode: 404,
+                errorCode: "BUTLER_PROJECT_NOT_FOUND",
+                detail: "当前工作区没有可用项目，不能执行项目级能力"
+            });
+        }
+        return project;
+    }
     requireFollowUpService() {
         if (this.butlerFollowUpService) {
             return this.butlerFollowUpService;
@@ -1219,6 +1919,56 @@ export class AssistantCapabilityService {
             detail: "当前实例没有启用会话跟进能力"
         });
     }
+    requireDocumentRuntimeService() {
+        if (this.documentRuntimeService) {
+            return this.documentRuntimeService;
+        }
+        throw new AppError({
+            statusCode: 503,
+            errorCode: "ASSISTANT_OFFICE_DOCUMENT_CAPABILITY_UNAVAILABLE",
+            detail: "当前实例没有启用办公文档能力"
+        });
+    }
+    requireBrowserRuntimeService() {
+        if (this.browserRuntimeService) {
+            return this.browserRuntimeService;
+        }
+        throw new AppError({
+            statusCode: 503,
+            errorCode: "ASSISTANT_OFFICE_BROWSER_CAPABILITY_UNAVAILABLE",
+            detail: "当前实例没有启用办公浏览器能力"
+        });
+    }
+    requireOpsRuntimeService() {
+        if (this.opsRuntimeService) {
+            return this.opsRuntimeService;
+        }
+        throw new AppError({
+            statusCode: 503,
+            errorCode: "ASSISTANT_OFFICE_OPS_CAPABILITY_UNAVAILABLE",
+            detail: "当前实例没有启用办公运维能力"
+        });
+    }
+    requireOfficeTaskService() {
+        if (this.officeServiceForDocumentTask) {
+            return this.officeServiceForDocumentTask;
+        }
+        throw new AppError({
+            statusCode: 503,
+            errorCode: "ASSISTANT_OFFICE_DOCUMENT_CAPABILITY_UNAVAILABLE",
+            detail: "当前实例没有启用办公文档能力"
+        });
+    }
+    requireOfficeApprovalService() {
+        if (this.officeServiceForDocumentTask) {
+            return this.officeServiceForDocumentTask;
+        }
+        throw new AppError({
+            statusCode: 503,
+            errorCode: "ASSISTANT_OFFICE_APPROVAL_CAPABILITY_UNAVAILABLE",
+            detail: "当前实例没有启用办公审批能力"
+        });
+    }
     resolveSessionLaunchConfig(input) {
         const controlSession = this.butlerControlSessionService.getCurrentSession(input.userId);
         const providerId = input.providerId?.trim()
@@ -1301,6 +2051,85 @@ function summarizeAssistantText(content) {
     }
     return normalized.length > 48 ? `${normalized.slice(0, 45)}...` : normalized;
 }
+function summarizeOfficeDocumentDetail(detail) {
+    return {
+        id: detail.document.id,
+        workspaceId: detail.document.workspaceId,
+        title: detail.document.title,
+        status: detail.document.status,
+        template: {
+            id: detail.template.id,
+            key: detail.template.templateKey,
+            version: detail.template.templateVersion,
+            displayName: detail.template.displayName
+        },
+        currentRevision: detail.currentRevision
+            ? {
+                id: detail.currentRevision.id,
+                revisionSeq: detail.currentRevision.revisionSeq,
+                summary: detail.currentRevision.summary,
+                createdAt: detail.currentRevision.createdAt
+            }
+            : null,
+        revisionCount: detail.revisions.length,
+        openCommentCount: detail.comments.filter((item) => item.status === "open").length,
+        updatedAt: detail.document.updatedAt
+    };
+}
+function summarizeOfficeTaskDetail(detail, options) {
+    return {
+        id: detail.task.id,
+        taskType: detail.task.taskType,
+        title: detail.task.title,
+        status: detail.task.status,
+        riskLevel: detail.task.riskLevel,
+        workspaceId: detail.task.workspaceId,
+        targetRefKind: detail.task.targetRefKind,
+        targetRefId: detail.task.targetRefId,
+        createdAt: detail.task.createdAt,
+        startedAt: detail.task.startedAt,
+        finishedAt: detail.task.finishedAt,
+        steps: detail.steps.map((step) => ({
+            id: step.id,
+            stepSeq: step.stepSeq,
+            stepType: step.stepType,
+            title: step.title,
+            status: step.status,
+            errorMessage: step.errorMessage,
+            startedAt: step.startedAt,
+            finishedAt: step.finishedAt
+        })),
+        artifacts: detail.artifacts.map((artifact) => ({
+            id: artifact.id,
+            kind: artifact.kind,
+            name: artifact.name,
+            contentType: artifact.contentType,
+            previewPath: buildAssistantOfficeArtifactPreviewPath(artifact.id, options),
+            previewUrl: null,
+            metadataJson: artifact.metadataJson,
+            createdAt: artifact.createdAt
+        })),
+        receipts: detail.receipts.map((receipt) => ({
+            id: receipt.id,
+            receiptType: receipt.receiptType,
+            summary: receipt.summary,
+            payloadJson: receipt.payloadJson,
+            createdAt: receipt.createdAt
+        }))
+    };
+}
+function buildAssistantOfficeArtifactPreviewPath(artifactId, options) {
+    const normalizedUserId = options?.userId?.trim();
+    if (!options?.officePreviewLinkService || !normalizedUserId) {
+        return null;
+    }
+    try {
+        return options.officePreviewLinkService.createArtifactLink(artifactId, normalizedUserId).previewPath;
+    }
+    catch {
+        return null;
+    }
+}
 function buildAssistantAutomationTriggerInput(triggerType, input) {
     switch (triggerType) {
         case "once":
@@ -1376,4 +2205,44 @@ function requireAssistantConditionKind(value) {
 function assertNeverAssistantAutomationTriggerType(value) {
     throw new Error(`Unexpected assistant automation triggerType: ${String(value)}`);
 }
+function augmentAssistantCapabilities(items) {
+    return items.map((item) => {
+        const allowedProfiles = (WORKSPACE_SCOPED_DEFAULT_CAPABILITIES.has(item.name)
+            ? ["butler-full", "butler-ui", "workspace-scoped"]
+            : ["butler-full", "butler-ui"]);
+        const scopeKind = (PROJECT_SCOPED_CAPABILITIES.has(item.name)
+            ? "project"
+            : WORKSPACE_SCOPED_CAPABILITIES.has(item.name)
+                ? "workspace"
+                : "none");
+        const requiresConfirmation = item.requiresConfirmation ?? WORKSPACE_SCOPED_CONFIRMATION_CAPABILITIES.has(item.name);
+        return {
+            ...item,
+            allowedProfiles,
+            scopeKind,
+            requiresConfirmation
+        };
+    });
+}
+function toVisibleCapabilityDescriptor(item) {
+    return {
+        name: item.name,
+        mode: item.mode,
+        enabled: item.enabled,
+        summary: item.summary,
+        requiresConfirmation: item.requiresConfirmation
+    };
+}
+function resolveAssistantCapabilityProfile(callerKind) {
+    if (callerKind === "assistant_runtime") {
+        return "butler-full";
+    }
+    if (callerKind === "workspace_session") {
+        return "workspace-scoped";
+    }
+    if (callerKind === "interactive_user") {
+        return "butler-ui";
+    }
+    return null;
+}
 //# sourceMappingURL=assistant-capability-service.js.map