@steerable/agent-shell-web 0.6.68 → 0.6.70

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steerable/agent-shell-web",
-  "version": "0.6.68",
+  "version": "0.6.70",
   "type": "module",
   "description": "Steerable framework — product-neutral renderer SPA source for @steerable/agent-shell (React + Vite). Consumed by product web entry points via the `@/` alias (anchored at this package's src/) and the createProductViteConfig factory. Published as a source package (src/), plus the compiled vite.base config factory (vite.base.js + .d.ts) for Node-side config loading.",
   "license": "Apache-2.0",
@@ -45,8 +45,8 @@
     "react-router-dom": "^6.30.0",
     "rehype-raw": "^7.0.0",
     "remark-gfm": "^4.0.1",
-    "@steerable/agent-protocol": "0.6.68",
-    "@steerable/agent-ui": "0.6.68"
+    "@steerable/agent-protocol": "0.6.70",
+    "@steerable/agent-ui": "0.6.70"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.0",
@@ -59,7 +59,7 @@
     "typescript": "^5.8.3",
     "vite": "^5.4.21",
     "vitest": "^3.2.4",
-    "@steerable/pack-sdk": "0.6.68"
+    "@steerable/pack-sdk": "0.6.70"
   },
   "scripts": {
     "gen": "echo agent-shell-web",

package/src/components/chat/ExecPolicyPicker.tsx

@@ -6,7 +6,8 @@ import { t } from '@/i18n';
 /**
  * ExecPolicyPicker — 输入框上的命令沙箱切换（类 Codex 底部权限档）。
  *
- * 切档立刻记住，下一轮才生效：当前回合的 `execSandbox` 已经随流发出。
+ * 切档立刻记住。排队的下一轮按当时的档开流；插进当前回合的消息会改
+ * 这一回合后面的命令沙箱。已经在跑的那条命令保持它开始时的档。
  * 工作区 = Seatbelt/bwrap 只允许写项目家目录、源文件夹（含各自子目录）或本对话工作区；完整权限
  * = 不下发命令沙箱，本机路径（如 Downloads）不再被 Operation not permitted 拦住。
  */

package/src/lib/chat-transport.ts

@@ -254,10 +254,14 @@ export function createHostChatTransport(chatId: string): HostChatTransport {
     },
     // 轮中转向：仅在 CoreLoop 路径（STEERABLE_USE_CORELOOP=1）且回合仍
     // 运行时生效；否则主进程软失败，useChatStream 保留草稿。
-    steer: async (content: string) => {
+    steer: async (content: string, options?: { execPolicy?: 'workspace' | 'full' }) => {
       const bridge = getHostBridge();
       if (!bridge?.localBackend.steerChat) return false;
-      return await bridge.localBackend.steerChat(chatId, content);
+      return await bridge.localBackend.steerChat(
+        chatId,
+        content,
+        options?.execPolicy ? { execPolicy: options.execPolicy } : undefined,
+      );
     },
     stream: async (input: ChatStreamSendInput, onEvent) => {
       const bridge = getHostBridge();

package/src/lib/host-bridge.ts

@@ -159,8 +159,15 @@ export interface HostBridge {
       onEvent: (payload: LocalBackendStreamEvent) => void,
     ) => Promise<string | null>;
     cancelStream: (streamId: string) => void;
-    /** 轮中转向：注入一条用户消息到运行中的 CoreLoop 回合；false = 无可转向回合。 */
-    steerChat?: (chatId: string, content: string) => Promise<boolean>;
+    /**
+     * 轮中转向：注入一条用户消息到运行中的 CoreLoop 回合；false = 无可转向回合。
+     * `execPolicy` 改这一回合后面的命令沙箱（工作区 / 完整权限）。
+     */
+    steerChat?: (
+      chatId: string,
+      content: string,
+      options?: { execPolicy?: 'workspace' | 'full' },
+    ) => Promise<boolean>;
   };
   /** 会话附件：把源文件路径 / base64 字节拷贝进会话空间（`attachments:save`）。 */
   attachments?: {

package/src/lib/http-bridge.ts

@@ -257,8 +257,12 @@ export function createHttpBridge(): HostBridge {
         http<T>(input.method, input.path, input.body),
       startStream,
       cancelStream,
-      steerChat: async (chatId, content) => {
-        const result = await http<{ ok?: boolean }>('POST', '/host/steer', { chatId, content });
+      steerChat: async (chatId, content, options) => {
+        const result = await http<{ ok?: boolean }>('POST', '/host/steer', {
+          chatId,
+          content,
+          ...(options?.execPolicy ? { execPolicy: options.execPolicy } : {}),
+        });
         return result.ok === true;
       },
     },

package/src/pages/AgentPage.tsx

@@ -101,6 +101,31 @@ function readStoredMode(): ChatMode {
   return clampWebChatMode(localStorage.getItem(CHAT_MODE_STORAGE_KEY));
 }
 
+interface ComposerTurnSettings {
+  execPolicy: ExecPolicy;
+  mode: ChatMode;
+  modelOverride: string | null;
+  effortOverride: string | null;
+}
+
+/**
+ * 排队和插队失败后的新回合不经过输入框的正常提交，这里在真正开流时
+ * 补上当前输入框的命令沙箱、模式、模型和编排开关。
+ */
+function applyComposerTurnSettings<T extends { metadata?: Record<string, unknown> }>(
+  input: T,
+  settings: ComposerTurnSettings,
+): T {
+  const metadata: Record<string, unknown> = { ...(input.metadata ?? {}) };
+  metadata.execPolicy = settings.execPolicy;
+  if (settings.mode === "plan") metadata.mode = "plan";
+  else delete metadata.mode;
+  if (settings.modelOverride) metadata.model = settings.modelOverride;
+  if (settings.effortOverride) metadata.reasoningEffort = settings.effortOverride;
+  metadata.orchestration = isOrchestrationSettingEnabled();
+  return { ...input, metadata };
+}
+
 function extractPersistedActions(
   messages: ChatMessageWithMetadata[] | undefined,
 ): Record<string, ExecutedAction[]> {
@@ -388,10 +413,29 @@ function AgentChatView({
   const chatProject = chat?.projectId
     ? (projects.find((p) => p.id === chat.projectId) ?? null)
     : null;
-  const transport = useMemo(
-    () => createHostChatTransport(chatId),
-    [chatId],
-  );
+  // 插队 / 排队在开流或注入时读这里，而不是排队那一刻的闭包。
+  const composerSettingsRef = useRef<ComposerTurnSettings>({
+    execPolicy: readStoredExecPolicy(),
+    mode: readStoredMode(),
+    modelOverride: null,
+    effortOverride: null,
+  });
+  const transport = useMemo(() => {
+    const inner = createHostChatTransport(chatId);
+    return {
+      cancelActive: () => inner.cancelActive(),
+      stream: (
+        input: { content: string; metadata?: Record<string, unknown> },
+        onEvent: (event: SSEEvent) => void,
+      ) => inner.stream(applyComposerTurnSettings(input, composerSettingsRef.current), onEvent),
+      steer: (content: string) => {
+        if (!inner.steer) return Promise.resolve(false);
+        return inner.steer(content, {
+          execPolicy: composerSettingsRef.current.execPolicy,
+        });
+      },
+    };
+  }, [chatId]);
 
   // 4.6a 后台任务：header 角标与消息列尾部的终态卡共用这一份订阅，两处
   // 因此不会各拉一次任务表、也不会显示互相错位的状态。
@@ -874,6 +918,12 @@ function AgentChatView({
   // ModelPicker 自取（GET /api/v2/llm/models → sidecar models.list）。
   const [modelOverride, setModelOverride] = useState<string | null>(null);
   const [effortOverride, setEffortOverride] = useState<string | null>(null);
+  composerSettingsRef.current = {
+    execPolicy,
+    mode,
+    modelOverride,
+    effortOverride,
+  };
 
   const handleSubmit = useCallback(
     (input: { content: string; metadata?: Record<string, unknown> }) => {