@steerable/agent-shell-web 0.6.31 → 0.6.33

package/src/lib/host-tools.ts

@@ -0,0 +1,206 @@
+/**
+ * 渲染层读构建期注入的宿主工具族 / 安全询问。
+ * 解析规则与 ts/src/host-tools.ts 对齐：缺省全开；对象必须显式 chrome:true。
+ */
+
+export type HostToolFamilyId =
+  | 'terminal'
+  | 'local-fs'
+  | 'projects'
+  | 'background-tasks'
+  | 'mcp'
+  | 'web'
+  | 'plugins';
+
+export interface HostToolFamilySurface {
+  capability: boolean;
+  chrome: boolean;
+}
+
+export type HostToolsConfig = Partial<
+  Record<HostToolFamilyId, boolean | { capability?: boolean; chrome?: boolean }>
+>;
+
+export type ResolvedHostTools = Record<HostToolFamilyId, HostToolFamilySurface>;
+
+const FAMILY_IDS: readonly HostToolFamilyId[] = [
+  'terminal',
+  'local-fs',
+  'projects',
+  'background-tasks',
+  'mcp',
+  'web',
+  'plugins',
+];
+
+function resolveSurface(
+  value: boolean | { capability?: boolean; chrome?: boolean } | undefined,
+): HostToolFamilySurface {
+  if (value === undefined || value === true) return { capability: true, chrome: true };
+  if (value === false) return { capability: false, chrome: false };
+  return {
+    capability: value.capability !== false,
+    chrome: value.chrome === true,
+  };
+}
+
+export function resolveWebHostTools(config?: HostToolsConfig | null): ResolvedHostTools {
+  const out = {} as ResolvedHostTools;
+  for (const id of FAMILY_IDS) {
+    out[id] = resolveSurface(config?.[id]);
+  }
+  return out;
+}
+
+function readHostToolsConfig(): HostToolsConfig {
+  const raw = import.meta.env.VITE_HOST_TOOLS;
+  if (!raw) return {};
+  try {
+    const parsed = typeof raw === 'string' ? (JSON.parse(raw) as unknown) : raw;
+    return parsed && typeof parsed === 'object' ? (parsed as HostToolsConfig) : {};
+  } catch {
+    return {};
+  }
+}
+
+let cached: ResolvedHostTools | null = null;
+
+export function getWebHostTools(): ResolvedHostTools {
+  cached ??= resolveWebHostTools(readHostToolsConfig());
+  return cached;
+}
+
+export function hostToolChrome(id: HostToolFamilyId): boolean {
+  return getWebHostTools()[id].chrome;
+}
+
+export function hostToolCapability(id: HostToolFamilyId): boolean {
+  return getWebHostTools()[id].capability;
+}
+
+export function isWebApprovalEnabled(): boolean {
+  return import.meta.env.VITE_APPROVAL !== 'off';
+}
+
+export type ChatModeId = 'agent' | 'plan';
+
+const DEFAULT_CHAT_MODES: ChatModeId[] = ['agent', 'plan'];
+
+export function resolveWebChatModes(value?: unknown): ChatModeId[] {
+  if (!Array.isArray(value)) return [...DEFAULT_CHAT_MODES];
+  const allowed = DEFAULT_CHAT_MODES.filter((id) => value.includes(id));
+  return allowed.length > 0 ? allowed : ['agent'];
+}
+
+function readChatModesConfig(): unknown {
+  const raw = import.meta.env.VITE_CHAT_MODES;
+  if (!raw) return undefined;
+  try {
+    return typeof raw === 'string' ? JSON.parse(raw) : raw;
+  } catch {
+    return undefined;
+  }
+}
+
+let cachedModes: ChatModeId[] | null = null;
+
+export function getWebChatModes(): ChatModeId[] {
+  cachedModes ??= resolveWebChatModes(readChatModesConfig());
+  return cachedModes;
+}
+
+export function clampWebChatMode(requested: unknown): ChatModeId {
+  return requested === 'plan' && getWebChatModes().includes('plan') ? 'plan' : 'agent';
+}
+
+export const SETTINGS_ITEM_IDS = [
+  'agents',
+  'skills',
+  'mcp',
+  'appearance',
+  'llm',
+  'web-search',
+  'usage',
+  'diagnose',
+  'security',
+  'insights',
+  'telemetry',
+] as const;
+
+export type SettingsItemId = (typeof SETTINGS_ITEM_IDS)[number];
+
+export const GENERAL_SETTINGS_ITEM_IDS = [
+  'appearance',
+  'llm',
+  'web-search',
+  'usage',
+  'diagnose',
+  'security',
+  'insights',
+  'telemetry',
+] as const;
+
+export type SettingsChromeConfig = Partial<Record<SettingsItemId, boolean>>;
+
+export type ResolvedSettingsChrome = Record<SettingsItemId, boolean>;
+
+function settingsFollowsHostTool(id: SettingsItemId, tools: ResolvedHostTools): boolean {
+  if (id === 'skills') return tools.plugins.chrome;
+  if (id === 'mcp') return tools.mcp.chrome;
+  if (id === 'web-search') return tools.web.chrome;
+  return true;
+}
+
+export function resolveWebSettingsChrome(
+  value?: unknown,
+  tools: ResolvedHostTools = resolveWebHostTools(),
+): ResolvedSettingsChrome {
+  const config =
+    value && typeof value === 'object' && !Array.isArray(value)
+      ? (value as Record<string, unknown>)
+      : {};
+  const out = {} as ResolvedSettingsChrome;
+  for (const id of SETTINGS_ITEM_IDS) {
+    out[id] = config[id] !== false && settingsFollowsHostTool(id, tools);
+  }
+  return out;
+}
+
+function readSettingsConfig(): unknown {
+  const raw = import.meta.env.VITE_SETTINGS;
+  if (!raw) return undefined;
+  try {
+    return typeof raw === 'string' ? JSON.parse(raw) : raw;
+  } catch {
+    return undefined;
+  }
+}
+
+let cachedSettings: ResolvedSettingsChrome | null = null;
+
+export function getWebSettingsChrome(): ResolvedSettingsChrome {
+  cachedSettings ??= resolveWebSettingsChrome(readSettingsConfig(), getWebHostTools());
+  return cachedSettings;
+}
+
+export function settingsChrome(id: SettingsItemId): boolean {
+  return getWebSettingsChrome()[id];
+}
+
+export function hasGeneralSettingsChrome(): boolean {
+  const chrome = getWebSettingsChrome();
+  return GENERAL_SETTINGS_ITEM_IDS.some((id) => chrome[id]);
+}
+
+export function sanitizeRightPanelKind(kind: string | null | undefined): string | null {
+  if (!kind) return null;
+  if (kind === 'terminal') return hostToolChrome('terminal') ? 'terminal' : null;
+  return kind;
+}
+
+/** 测试用：清掉缓存，让下次按新 env 重读。 */
+export function resetWebHostToolsForTests(): void {
+  cached = null;
+  cachedModes = null;
+  cachedSettings = null;
+}

package/src/lib/http-bridge.ts

@@ -44,6 +44,15 @@ function authHeaders(): Record<string, string> {
   return token ? { Authorization: `Bearer ${token}` } : {};
 }
 
+function httpErrorMessage(data: unknown, status: number): string {
+  if (data && typeof data === 'object') {
+    const rec = data as { error?: unknown; detail?: unknown };
+    if (typeof rec.error === 'string' && rec.error.trim()) return rec.error;
+    if (typeof rec.detail === 'string' && rec.detail.trim()) return rec.detail;
+  }
+  return `Request failed (${status})`;
+}
+
 async function http<T>(method: string, path: string, body?: unknown): Promise<T> {
   const res = await fetch(path, {
     method,
@@ -53,11 +62,9 @@ async function http<T>(method: string, path: string, body?: unknown): Promise<T>
     },
     body: body !== undefined ? JSON.stringify(body) : undefined,
   });
-  const data = (await res.json().catch(() => null)) as T & { detail?: string };
+  const data = (await res.json().catch(() => null)) as T;
   if (!res.ok) {
-    const err = new Error(
-      (data as { detail?: string } | null)?.detail || `Request failed (${res.status})`,
-    ) as Error & { status?: number };
+    const err = new Error(httpErrorMessage(data, res.status)) as Error & { status?: number };
     err.status = res.status;
     throw err;
   }
@@ -197,9 +204,15 @@ export function createHttpBridge(): ElectronBridge {
     platform: boot.platform,
 
     local: {
-      // 浏览器没有系统目录选择器（showDirectoryPicker 不给路径）。返回
-      // canceled 让 UI 走"手动输入路径"的既有分支。
-      selectDirectory: async () => ({ canceled: true, filePaths: [] }),
+      // 浏览器 File System Access API 不给真实路径。改走宿主
+      // `/host/local/select-directory`（本机系统选择器）；取消或无 GUI
+      // 时返回 canceled，UI 再走手动输入路径。
+      selectDirectory: async (options) =>
+        http<{ canceled: boolean; filePaths: string[] }>(
+          'POST',
+          '/host/local/select-directory',
+          options ?? {},
+        ),
       saveTextFile: async (options) => {
         const blob = new Blob([options.content], { type: 'application/json' });
         const url = URL.createObjectURL(blob);

package/src/lib/local-api.ts

@@ -353,7 +353,7 @@ export interface ResolvedLocalPath {
 
 /**
  * 批量确认正文里提到的路径是否真实存在（用于决定行内代码要不要变成可点击）。
- * 相对路径由后端按对话绑定的项目根解析，无项目时按 home；不存在的候选不回。
+ * 相对路径由后端按对话绑定的项目根解析，无项目时按对话工作区；不存在的候选不回。
  */
 export async function resolveLocalPaths(candidates: string[], chatId?: string | null) {
   return bridge().localBackend.request<{ resolved: ResolvedLocalPath[] }>({
@@ -489,7 +489,7 @@ export async function createProject(input: {
 
 export async function updateProject(
   projectId: string,
-  updates: { name?: string; folderPath?: string },
+  updates: { name?: string; folderPath?: string; sourceFolders?: string[] },
 ) {
   return bridge().localBackend.request<{ success: boolean; project: LocalProject }>({
     method: 'PUT',

package/src/pages/AgentPage.tsx

@@ -22,6 +22,7 @@ import {
   readStoredExecPolicy,
   type ExecPolicy,
 } from "@/lib/exec-policy";
+import { clampWebChatMode, hostToolChrome, settingsChrome } from "@/lib/host-tools";
 import type { ExecutedAction } from "@/components/chat/ExecutedActionsCard";
 import { inspectTaskTitle, type InspectTaskInput } from "@/components/chat/executed-actions-model";
 import type { ChildInfo } from "@/components/chat/OrchestrationChildrenCard";
@@ -85,10 +86,8 @@ type ChatMessageWithMetadata = ChatMessage & LocalChatMessage;
 const CHAT_MODE_STORAGE_KEY = "agent-chat-mode";
 
 function readStoredMode(): ChatMode {
-  if (typeof localStorage === "undefined") return "agent";
-  return localStorage.getItem(CHAT_MODE_STORAGE_KEY) === "plan"
-    ? "plan"
-    : "agent";
+  if (typeof localStorage === "undefined") return clampWebChatMode("agent");
+  return clampWebChatMode(localStorage.getItem(CHAT_MODE_STORAGE_KEY));
 }
 
 function extractPersistedActions(
@@ -374,8 +373,9 @@ function AgentChatView({
   // 当前会话绑定的项目 — Codex 式 cwd 指示：输入框上方显示项目名徽章，
   // 点击可关联到其他项目 / 修改项目目录 / 移出项目。无项目会话不显示。
   const [projects, setProjects] = useState<LocalProject[]>([]);
+  const showProjectsChrome = hostToolChrome("projects");
   const fetchProjects = useCallback(async () => {
-    if (!isElectron()) return;
+    if (!isElectron() || !hostToolChrome("projects")) return;
     try {
       const res = await listProjects();
       setProjects(res.projects ?? []);
@@ -516,9 +516,10 @@ function AgentChatView({
   );
 
   const handleModeChange = useCallback((next: ChatMode) => {
-    setMode(next);
+    const clamped = clampWebChatMode(next);
+    setMode(clamped);
     if (typeof localStorage !== "undefined") {
-      localStorage.setItem(CHAT_MODE_STORAGE_KEY, next);
+      localStorage.setItem(CHAT_MODE_STORAGE_KEY, clamped);
     }
   }, []);
 
@@ -1121,7 +1122,9 @@ function AgentChatView({
         suggestedReplies={visibleSuggestedReplies}
         onSelectSuggestion={handleSelectSuggestion}
         onOpenSettings={
-          isElectron() ? () => setLlmSettingsOpen(true) : undefined
+          isElectron() && settingsChrome("llm")
+            ? () => setLlmSettingsOpen(true)
+            : undefined
         }
         inputToolbarExtras={
           <ModelPicker
@@ -1134,25 +1137,31 @@ function AgentChatView({
         }
         mode={mode}
         onModeChange={handleModeChange}
-        execPolicy={execPolicy}
-        onExecPolicyChange={handleExecPolicyChange}
+        execPolicy={hostToolChrome("local-fs") ? execPolicy : "workspace"}
+        onExecPolicyChange={
+          hostToolChrome("local-fs") ? handleExecPolicyChange : undefined
+        }
         inputLeadingChrome={
-          <ChatProjectBadge
-            chatId={chatId}
-            project={chatProject}
-            projects={projects}
-            onProjectsChanged={fetchProjects}
-            onChatProjectChanged={ctx.refreshChats}
-          />
+          showProjectsChrome ? (
+            <ChatProjectBadge
+              chatId={chatId}
+              project={chatProject}
+              projects={projects}
+              onProjectsChanged={fetchProjects}
+              onChatProjectChanged={ctx.refreshChats}
+            />
+          ) : undefined
         }
         inputBanner={
           <>
             {/* W6-5 项目信任门控：项目含规则文件但未信任时提示授权。 */}
+            {showProjectsChrome ? (
             <ProjectTrustBanner
               chatId={chatId}
               project={chatProject}
               onTrustChanged={fetchProjects}
             />
+            ) : null}
             {planReady && !isStreaming ? (
             <div className="mx-2.5 mb-1 flex items-center justify-between gap-2 rounded-agent-md border border-amber-400/50 bg-amber-400/10 px-2.5 py-1.5 text-xs">
               <div className="flex items-center gap-2 text-amber-700 dark:text-amber-300">
@@ -1183,7 +1192,7 @@ function AgentChatView({
           </>
         }
       />
-      {isElectron() && (
+      {isElectron() && settingsChrome("llm") && (
         <LocalLlmSettingsModal
           open={llmSettingsOpen}
           onClose={() => setLlmSettingsOpen(false)}
@@ -1234,8 +1243,9 @@ function EmptyChatGate() {
   useEffect(() => {
     setSelectedProjectId(projectIdFromUrl);
   }, [projectIdFromUrl]);
+  const showProjectsChrome = hostToolChrome("projects");
   const fetchProjects = useCallback(async () => {
-    if (!isElectron()) return;
+    if (!isElectron() || !hostToolChrome("projects")) return;
     try {
       const res = await listProjects();
       setProjects(res.projects ?? []);
@@ -1258,9 +1268,10 @@ function EmptyChatGate() {
     null;
 
   const handleModeChange = useCallback((next: ChatMode) => {
-    setMode(next);
+    const clamped = clampWebChatMode(next);
+    setMode(clamped);
     if (typeof localStorage !== "undefined") {
-      localStorage.setItem(CHAT_MODE_STORAGE_KEY, next);
+      localStorage.setItem(CHAT_MODE_STORAGE_KEY, clamped);
     }
   }, []);
 
@@ -1316,7 +1327,7 @@ function EmptyChatGate() {
     setCreateError(null);
     try {
       const id = await ctx.createChat({
-        ...(selectedProjectId ? { projectId: selectedProjectId } : {}),
+        ...(selectedProjectId && showProjectsChrome ? { projectId: selectedProjectId } : {}),
         ...(ctx.selectedAgentId ? { agentId: ctx.selectedAgentId } : {}),
       });
       if (!id) throw new Error("创建对话失败，请重试");
@@ -1365,7 +1376,9 @@ function EmptyChatGate() {
             selectedAgentId={ctx.selectedAgentId}
             onSelectAgent={handleSelectAgent}
             onOpenSettings={
-              isElectron() ? () => setLlmSettingsOpen(true) : undefined
+              isElectron() && settingsChrome("llm")
+                ? () => setLlmSettingsOpen(true)
+                : undefined
             }
             toolbarExtras={
               <ModelPicker
@@ -1377,7 +1390,7 @@ function EmptyChatGate() {
               />
             }
             leadingChrome={
-              isElectron() ? (
+              isElectron() && showProjectsChrome ? (
                 <ProjectPickerButton
                   projects={projects}
                   value={selectedProjectId}
@@ -1388,8 +1401,10 @@ function EmptyChatGate() {
             }
             mode={mode}
             onModeChange={handleModeChange}
-            execPolicy={execPolicy}
-            onExecPolicyChange={handleExecPolicyChange}
+            execPolicy={hostToolChrome("local-fs") ? execPolicy : "workspace"}
+            onExecPolicyChange={
+              hostToolChrome("local-fs") ? handleExecPolicyChange : undefined
+            }
             files={files}
             onFilesChange={setFiles}
             onMentionReferencesChange={setMentionReferences}
@@ -1411,7 +1426,7 @@ function EmptyChatGate() {
           </p>
         )}
       </div>
-      {isElectron() && (
+      {isElectron() && settingsChrome("llm") && (
         <LocalLlmSettingsModal
           open={llmSettingsOpen}
           onClose={() => setLlmSettingsOpen(false)}

package/src/pages/SettingsPage.tsx

@@ -19,12 +19,15 @@ import { TelemetrySettingsPanel } from '@/components/settings/TelemetrySettingsP
 import { UsagePanel } from '@/components/settings/UsagePanel';
 import { WebSearchSettingsPanel } from '@/components/settings/WebSearchSettingsPanel';
 import { getPackSettingsPanels } from '@/packs/registry';
+import { settingsChrome } from '@/lib/host-tools';
 import type { AgentOutletContext } from '@/layouts/AgentLayout';
 
 type SettingsSection = 'skills' | 'mcp' | 'agents' | 'general';
 
 function resolveSection(raw: string | null): SettingsSection {
-  if (raw === 'skills' || raw === 'mcp' || raw === 'agents') return raw;
+  if (raw === 'skills' && settingsChrome('skills')) return 'skills';
+  if (raw === 'mcp' && settingsChrome('mcp')) return 'mcp';
+  if (raw === 'agents' && settingsChrome('agents')) return 'agents';
   return 'general';
 }
 
@@ -61,7 +64,7 @@ export function SettingsPage() {
     <div className="flex h-full w-full flex-col overflow-hidden">
       <header className="flex h-9 flex-shrink-0 items-center justify-between gap-2 border-b border-agent-border px-2.5">
         <h1 className="text-xs font-semibold text-agent-foreground">{title}</h1>
-        {section === 'general' && (
+        {section === 'general' && settingsChrome('llm') && (
           <SettingsSaveButton
             testId="settings-header-save"
             saving={llmSaveUi.saving}
@@ -112,6 +115,7 @@ export function SettingsPage() {
 
           {section === 'general' && (
             <>
+              {settingsChrome('appearance') && (
               <section className="space-y-2" data-testid="settings-section-appearance">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuMonitor className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -119,7 +123,9 @@ export function SettingsPage() {
                 </h2>
                 <AppearanceSettingsPanel />
               </section>
+              )}
 
+              {settingsChrome('llm') && (
               <section className="space-y-2" data-testid="settings-section-llm">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuSettings className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -131,7 +137,9 @@ export function SettingsPage() {
                   onSaveUiChange={setLlmSaveUi}
                 />
               </section>
+              )}
 
+              {settingsChrome('web-search') && (
               <section className="space-y-2" data-testid="settings-section-web-search">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuSearch className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -139,7 +147,9 @@ export function SettingsPage() {
                 </h2>
                 <WebSearchSettingsPanel />
               </section>
+              )}
 
+              {settingsChrome('usage') && (
               <section className="space-y-2" data-testid="settings-section-usage">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuChartBar className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -147,7 +157,9 @@ export function SettingsPage() {
                 </h2>
                 <UsagePanel />
               </section>
+              )}
 
+              {settingsChrome('diagnose') && (
               <section className="space-y-2" data-testid="settings-section-diagnose">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuNetwork className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -155,7 +167,9 @@ export function SettingsPage() {
                 </h2>
                 <DiagnoseSettingsPanel />
               </section>
+              )}
 
+              {settingsChrome('security') && (
               <section className="space-y-2" data-testid="settings-section-security">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuShieldCheck className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -163,7 +177,9 @@ export function SettingsPage() {
                 </h2>
                 <SecuritySettingsPanel />
               </section>
+              )}
 
+              {settingsChrome('insights') && (
               <section className="space-y-2" data-testid="settings-section-insights">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuChartBar className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -171,7 +187,9 @@ export function SettingsPage() {
                 </h2>
                 <InsightsSettingsPanel />
               </section>
+              )}
 
+              {settingsChrome('telemetry') && (
               <section className="space-y-2" data-testid="settings-section-telemetry">
                 <h2 className="flex items-center gap-1.5 text-xs font-semibold text-agent-foreground">
                   <LuActivity className="h-3.5 w-3.5 text-agent-muted-foreground" />
@@ -179,6 +197,7 @@ export function SettingsPage() {
                 </h2>
                 <TelemetrySettingsPanel />
               </section>
+              )}
 
               {/* 场景包设置面板（1.2 起由包渲染层贡献）。
                   包经 packs/registry 注册，未激活 flavor 的产物里没有包组件。 */}

package/src/vite-env.d.ts

@@ -1 +1,17 @@
 /// <reference types="vite/client" />
+
+interface ImportMetaEnv {
+  readonly VITE_APP_FLAVOR?: string;
+  readonly VITE_BRAND_NAME?: string;
+  readonly VITE_BRAND_TITLE?: string;
+  readonly VITE_BRAND_TAGLINE?: string;
+  readonly VITE_DEFAULT_AGENT_ID?: string;
+  readonly VITE_HOST_TOOLS?: string;
+  readonly VITE_APPROVAL?: string;
+  readonly VITE_CHAT_MODES?: string;
+  readonly VITE_SETTINGS?: string;
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv;
+}

package/vite.base.js

@@ -53,6 +53,11 @@ export function createProductViteConfig(options) {
             'import.meta.env.VITE_BRAND_TITLE': JSON.stringify(brand?.title ?? ''),
             'import.meta.env.VITE_BRAND_TAGLINE': JSON.stringify(brand?.tagline ?? '一款本地桌面 AI 伙伴'),
             'import.meta.env.VITE_DEFAULT_AGENT_ID': JSON.stringify(brand?.defaultAgentId ?? 'local-assistant'),
+            // 宿主工具族 / 安全询问：与 node 侧 setProductConfig 读同一份 product.json。
+            'import.meta.env.VITE_HOST_TOOLS': JSON.stringify(JSON.stringify(product.hostTools ?? {})),
+            'import.meta.env.VITE_APPROVAL': JSON.stringify(product.approval ?? 'host'),
+            'import.meta.env.VITE_CHAT_MODES': JSON.stringify(JSON.stringify(product.chatModes ?? ['agent', 'plan'])),
+            'import.meta.env.VITE_SETTINGS': JSON.stringify(JSON.stringify(product.settings ?? {})),
         },
         resolve: {
             alias: {