@steerable/agent-shell 0.6.33 → 0.6.35

package/dist/host/runtime.js

@@ -17,6 +17,7 @@ import { TerminalManager } from '../terminal-manager.js';
 import { ToolRouter } from '../tool-router.js';
 import { McpServerRegistry, } from '../mcp-server-registry.js';
 import { ProjectRegistry } from '../project-registry.js';
+import { getProductConfig } from '../product-config.js';
 import { LocalBackendRouter } from '../local-backend/router.js';
 import { WorktreeService } from '../local-backend/worktree-service.js';
 import { TaskService } from '../local-backend/task-service.js';
@@ -85,6 +86,7 @@ export async function createHostRuntime(options) {
         name: 'agent-mcp-servers',
         defaults: { mcpServers: [] },
     }));
+    mcpServerRegistry.seedProductServers(getProductConfig().builtinMcp);
     const projectRegistry = new ProjectRegistry(createJsonStore({
         name: 'agent-projects',
         defaults: { projects: [] },

package/dist/host-tools.d.ts

@@ -7,7 +7,7 @@ export type HostToolFamilyId = (typeof HOST_TOOL_FAMILY_IDS)[number];
 export interface HostToolFamilySurface {
     /** 模型可见工具 + 围栏 / 服务端能力。 */
     capability: boolean;
-    /** 用户入口：按钮、菜单、项目分组、点路径打开、附件上传、可见 PTY。 */
+    /** 用户入口：按钮、菜单、项目分组、点路径打开、可见 PTY。会话附件跟 capability 走。 */
     chrome: boolean;
 }
 /** 产品声明：`true` 两边开，`false` 两边关，对象可拆 chrome / capability。 */

package/dist/host-tools.js

@@ -158,9 +158,11 @@ export function isHostToolCapabilityEnabled(name, tools = resolveHostTools()) {
 export function isHostRouteAllowed(pathname, tools = resolveHostTools()) {
     if (pathname.startsWith('/host/terminal'))
         return tools.terminal.chrome;
-    if (pathname === '/host/attachments/save' || pathname === '/host/local/open-path') {
+    // 会话附件：公文关 chrome（不露访达 / 完整权限）仍要上传材料。
+    if (pathname === '/host/attachments/save')
+        return tools['local-fs'].capability;
+    if (pathname === '/host/local/open-path')
         return tools['local-fs'].chrome;
-    }
     if (pathname.startsWith('/host/local/'))
         return tools['local-fs'].capability;
     return true;
@@ -176,9 +178,10 @@ export function sanitizeRightPanelKind(kind, tools = resolveHostTools()) {
 export function isHostIpcAllowed(channel, tools = resolveHostTools()) {
     if (channel.startsWith('terminal:'))
         return tools.terminal.chrome;
-    if (channel === 'local:open-path' || channel === 'attachments:save') {
+    if (channel === 'attachments:save')
+        return tools['local-fs'].capability;
+    if (channel === 'local:open-path')
         return tools['local-fs'].chrome;
-    }
     if (channel.startsWith('local:'))
         return tools['local-fs'].capability;
     return true;

package/dist/local-backend/skill-loader.d.ts

@@ -14,6 +14,38 @@
  * readable by both. The sidecar is the only chat path and auto-restarts, so
  * it is available both in-turn (prompt assembly) and for the management UI.
  */
+/** shell 随包分发的内置技能目录。产品经 product.json `builtinSkills` 按需引入。 */
+export declare const SHELL_BUILTIN_SKILLS: readonly [{
+    readonly dir: "00-identity";
+    readonly name: "identity";
+}, {
+    readonly dir: "10-goal";
+    readonly name: "goal";
+}, {
+    readonly dir: "11-loop";
+    readonly name: "loop";
+}, {
+    readonly dir: "12-create-skill";
+    readonly name: "create-skill";
+}, {
+    readonly dir: "70-plan-mode";
+    readonly name: "plan-mode";
+}, {
+    readonly dir: "80-tool-usage";
+    readonly name: "tool-usage";
+}, {
+    readonly dir: "81-anti-deferred";
+    readonly name: "anti-deferred-execution";
+}, {
+    readonly dir: "82-data-grounding";
+    readonly name: "data-grounding";
+}, {
+    readonly dir: "85-local-exec";
+    readonly name: "local-exec";
+}, {
+    readonly dir: "86-proactive-coding";
+    readonly name: "proactive-coding";
+}];
 /** builtin = 随应用分发; user = 设置页导入; workspace = 项目/工作区 `skills/`. */
 export type SkillOrigin = 'builtin' | 'user' | 'workspace';
 export declare function getUserSkillsDir(): string;

package/dist/local-backend/skill-loader.js

@@ -17,10 +17,38 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { isShellBuiltinSkillEnabled } from '../product-config.js';
 import { getAppRootDir, getUserDataDir } from '../runtime.js';
 import { getSidecarSupervisor, whenSidecarSupervisor } from '../sidecar/handle.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const DEFAULT_SKILLS_DIR = path.resolve(__dirname, 'skills');
+/** shell 随包分发的内置技能目录。产品经 product.json `builtinSkills` 按需引入。 */
+export const SHELL_BUILTIN_SKILLS = [
+    { dir: '00-identity', name: 'identity' },
+    { dir: '10-goal', name: 'goal' },
+    { dir: '11-loop', name: 'loop' },
+    { dir: '12-create-skill', name: 'create-skill' },
+    { dir: '70-plan-mode', name: 'plan-mode' },
+    { dir: '80-tool-usage', name: 'tool-usage' },
+    { dir: '81-anti-deferred', name: 'anti-deferred-execution' },
+    { dir: '82-data-grounding', name: 'data-grounding' },
+    { dir: '85-local-exec', name: 'local-exec' },
+    { dir: '86-proactive-coding', name: 'proactive-coding' },
+];
+function productWantsShellBuiltinSkills() {
+    return SHELL_BUILTIN_SKILLS.some((skill) => isShellBuiltinSkillEnabled(skill.dir));
+}
+function disabledShellBuiltinSkillNames() {
+    if (!productWantsShellBuiltinSkills())
+        return [];
+    const names = [];
+    for (const skill of SHELL_BUILTIN_SKILLS) {
+        if (!isShellBuiltinSkillEnabled(skill.dir)) {
+            names.push(skill.dir, skill.name);
+        }
+    }
+    return names;
+}
 export function getUserSkillsDir() {
     const dir = path.join(getUserDataDir(), 'skills');
     if (!fs.existsSync(dir)) {
@@ -82,7 +110,9 @@ export function listSkillRoots(skillsDir) {
     const user = path.resolve(getUserSkillsDir());
     const pack = packSkillsDir && fs.existsSync(packSkillsDir) ? [path.resolve(packSkillsDir)] : [];
     const extras = uniqueExisting(workspaceSkillRootsProvider?.() ?? []).filter((dir) => !samePath(dir, builtin) && !samePath(dir, user) && !pack.some((p) => samePath(dir, p)));
-    return [builtin, ...pack, ...extras, user];
+    return productWantsShellBuiltinSkills()
+        ? [builtin, ...pack, ...extras, user]
+        : [...pack, ...extras, user];
 }
 export function classifySkillOrigin(skillsDir) {
     const resolved = path.resolve(skillsDir);
@@ -109,10 +139,14 @@ export async function loadSkills(options = {}) {
         return [];
     }
     try {
+        const exclude = [
+            ...disabledShellBuiltinSkillNames(),
+            ...(options.excludeSkillNames ? Array.from(options.excludeSkillNames) : []),
+        ];
         return await supervisor.listSkills({
             roots: listSkillRoots(options.skillsDir),
             conditions: options.conditions ? Array.from(options.conditions) : undefined,
-            exclude: options.excludeSkillNames ? Array.from(options.excludeSkillNames) : undefined,
+            exclude: exclude.length > 0 ? exclude : undefined,
             ignoreConditions: options.ignoreConditions,
         });
     }

package/dist/mcp-server-registry.d.ts

@@ -70,6 +70,8 @@ export declare class McpServerRegistry {
     constructor(store: McpServerKvStore);
     list(): McpServerEntry[];
     get(idOrName: string): McpServerEntry | null;
+    /** 产品预置 MCP：缺省不引入；已有同名服务不覆盖。 */
+    seedProductServers(specs: CreateMcpServerInput[] | undefined): void;
     create(input: CreateMcpServerInput): McpServerEntry;
     update(id: string, updates: Partial<CreateMcpServerInput>): McpServerEntry;
     delete(id: string): boolean;

package/dist/mcp-server-registry.js

@@ -33,6 +33,14 @@ export class McpServerRegistry {
         const needle = idOrName.trim().toLowerCase();
         return (this.list().find((s) => s.id === idOrName || s.name.toLowerCase() === needle) ?? null);
     }
+    /** 产品预置 MCP：缺省不引入；已有同名服务不覆盖。 */
+    seedProductServers(specs) {
+        for (const spec of specs ?? []) {
+            if (this.get(spec.name))
+                continue;
+            this.create(spec);
+        }
+    }
     create(input) {
         const name = input.name.trim();
         const command = input.command.trim();

package/dist/product-config.d.ts

@@ -68,7 +68,33 @@ export interface ProductConfig {
         temperature?: number;
         maxTotalTokens?: number;
     };
+    /**
+     * shell 内置智能体。按需引入，缺省全关。
+     * `true` 才种子；未声明或 `false` 不写入，已有行归档。
+     */
+    builtinAgents?: Partial<Record<'local-assistant' | 'all-round-assistant', boolean>>;
+    /**
+     * shell 内置技能。按需引入，缺省全关。
+     * `true` 引入全部；对象里 `true` 的目录才引入。设置页入口不受影响。
+     */
+    builtinSkills?: boolean | Partial<Record<string, boolean>>;
+    /**
+     * 产品预置 MCP 服务。按需引入，缺省空。已有同名服务不覆盖。
+     * 设置页入口不受影响。
+     */
+    builtinMcp?: Array<{
+        name: string;
+        command: string;
+        args?: string[];
+        env?: Record<string, string>;
+        cwd?: string;
+        enabled?: boolean;
+    }>;
 }
+/** shell 内置智能体：只有产品显式 `true` 才开。 */
+export declare function isShellBuiltinAgentEnabled(id: 'local-assistant' | 'all-round-assistant', config?: ProductConfig): boolean;
+/** shell 内置技能：`true` 全开；否则只有对象里显式 `true` 的目录开。 */
+export declare function isShellBuiltinSkillEnabled(id: string, config?: ProductConfig): boolean;
 /**
  * 注入产品配置（产品组装根在第一个 import 时调用）。重复注入抛错
  * （组装期笔误，fail fast——与 setProductBrand 同语义）。

package/dist/product-config.js

@@ -9,6 +9,19 @@
  *
  * 本模块只允许依赖 node 内置模块（与 brand.ts 同约束）。
  */
+/** shell 内置智能体：只有产品显式 `true` 才开。 */
+export function isShellBuiltinAgentEnabled(id, config = getProductConfig()) {
+    return config.builtinAgents?.[id] === true;
+}
+/** shell 内置技能：`true` 全开；否则只有对象里显式 `true` 的目录开。 */
+export function isShellBuiltinSkillEnabled(id, config = getProductConfig()) {
+    const value = config.builtinSkills;
+    if (value === true)
+        return true;
+    if (!value || typeof value !== 'object')
+        return false;
+    return value[id] === true;
+}
 let productConfig = null;
 /**
  * 注入产品配置（产品组装根在第一个 import 时调用）。重复注入抛错

package/dist/storage/index.js

@@ -1,5 +1,6 @@
 import { randomUUID } from 'crypto';
 import { ALL_ROUND_ASSISTANT_AGENT_ID, LOCAL_ASSISTANT_AGENT_ID, getBrand, } from '../brand.js';
+import { isShellBuiltinAgentEnabled } from '../product-config.js';
 import { DEFAULT_LLM_SETTINGS, llmSettingsCarryExpiredBakedKey, llmSettingsMatchOllamaDefaults, mergeLlmSettings, } from './llm-settings.js';
 import { MESSAGE_ORDER_DESC } from './message-order.js';
 import { mergeTelemetrySettings, } from './telemetry-settings.js';
@@ -473,92 +474,108 @@ export class SqliteScopedStore {
         @sortOrder, @createdAt, @updatedAt
       )
     `);
-        if (!hasBuiltin) {
-            insertAgent.run({
-                tenantId: this.scope.tenantId,
-                userId: this.scope.userId,
-                id: LOCAL_ASSISTANT_AGENT_ID,
-                slug: LOCAL_ASSISTANT_AGENT_ID,
-                name: '电脑操作员',
-                icon: 'Cpu',
-                color: '#4f46e5',
-                description: '默认本地助手，可调用 shell、文件与 MCP 工具。',
-                rolePrompt: '你是 **电脑操作员**，本地离线助手，回答时清晰、可执行。',
-                forbiddenPrompt: null,
-                skillIds: JSON.stringify([]),
-                toolPolicy: JSON.stringify({ mode: 'all', tools: [] }),
-                allowExternalSkills: 1,
-                loadAllSkills: 0,
-                isBuiltin: 1,
-                isArchived: 0,
-                // 激活包有主打种子（sortOrder 0）时让位到 1。
-                sortOrder: hasHeroSeed ? 1 : 0,
-                createdAt: now,
-                updatedAt: now,
-            });
-        }
-        else {
-            this.db.prepare(`UPDATE chat_agents SET name = ?
-                       WHERE tenant_id = ? AND user_id = ? AND id = ?`)
-                .run('电脑操作员', this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
-            const local = this.db
-                .prepare(`SELECT role_prompt FROM chat_agents
-                  WHERE tenant_id = ? AND user_id = ? AND id = ?`)
-                .get(this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
-            if (local?.role_prompt === '你是本地离线助手，回答时清晰、可执行。') {
-                this.db
-                    .prepare(`UPDATE chat_agents SET role_prompt = ?
+        if (isShellBuiltinAgentEnabled(LOCAL_ASSISTANT_AGENT_ID)) {
+            if (!hasBuiltin) {
+                insertAgent.run({
+                    tenantId: this.scope.tenantId,
+                    userId: this.scope.userId,
+                    id: LOCAL_ASSISTANT_AGENT_ID,
+                    slug: LOCAL_ASSISTANT_AGENT_ID,
+                    name: '电脑操作员',
+                    icon: 'Cpu',
+                    color: '#4f46e5',
+                    description: '默认本地助手，可调用 shell、文件与 MCP 工具。',
+                    rolePrompt: '你是 **电脑操作员**，本地离线助手，回答时清晰、可执行。',
+                    forbiddenPrompt: null,
+                    skillIds: JSON.stringify([]),
+                    toolPolicy: JSON.stringify({ mode: 'all', tools: [] }),
+                    allowExternalSkills: 1,
+                    loadAllSkills: 0,
+                    isBuiltin: 1,
+                    isArchived: 0,
+                    // 激活包有主打种子（sortOrder 0）时让位到 1。
+                    sortOrder: hasHeroSeed ? 1 : 0,
+                    createdAt: now,
+                    updatedAt: now,
+                });
+            }
+            else {
+                this.db.prepare(`UPDATE chat_agents SET name = ?
+                         WHERE tenant_id = ? AND user_id = ? AND id = ?`)
+                    .run('电脑操作员', this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
+                const local = this.db
+                    .prepare(`SELECT role_prompt FROM chat_agents
                     WHERE tenant_id = ? AND user_id = ? AND id = ?`)
-                    .run('你是 **电脑操作员**，本地离线助手，回答时清晰、可执行。', this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
+                    .get(this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
+                if (local?.role_prompt === '你是本地离线助手，回答时清晰、可执行。') {
+                    this.db
+                        .prepare(`UPDATE chat_agents SET role_prompt = ?
+                      WHERE tenant_id = ? AND user_id = ? AND id = ?`)
+                        .run('你是 **电脑操作员**，本地离线助手，回答时清晰、可执行。', this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
+                }
             }
         }
+        else if (hasBuiltin) {
+            this.db
+                .prepare(`UPDATE chat_agents SET is_archived = 1, updated_at = ?
+                  WHERE tenant_id = ? AND user_id = ? AND id = ? AND is_archived = 0`)
+                .run(now, this.scope.tenantId, this.scope.userId, LOCAL_ASSISTANT_AGENT_ID);
+        }
         const hasAllRound = this.db
             .prepare(`SELECT id FROM chat_agents WHERE tenant_id = ? AND user_id = ? AND id = ?`)
             .get(this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
-        if (!hasAllRound) {
-            insertAgent.run({
-                tenantId: this.scope.tenantId,
-                userId: this.scope.userId,
-                id: ALL_ROUND_ASSISTANT_AGENT_ID,
-                slug: ALL_ROUND_ASSISTANT_AGENT_ID,
-                name: '智能助手',
-                icon: '🔮',
-                color: '#a855f7',
-                description: '全能智能体，自动加载全部已安装本地技能和工具，无需限定条件。',
-                rolePrompt: [
-                    '你是 **智能助手**，一个具备高权限且集成了全部本地技能（Skills）的行动体。',
-                    '你具备完整的本地命令执行（local_exec_shell）、文件读写能力，以及当前产品安装的全部场景工具。',
-                    '你的系统提示词中已经无条件加载了所有已安装的本地技能与工具。',
-                    '请根据用户的需求，直接、高效地调用最合适的本地工具或执行脚本来解决任务。'
-                ].join('\n'),
-                forbiddenPrompt: null,
-                skillIds: JSON.stringify([]),
-                toolPolicy: JSON.stringify({ mode: 'all', tools: [] }),
-                allowExternalSkills: 1,
-                // 「智能助手」的定位就是无条件加载全部技能（此前是 router 硬编码）。
-                loadAllSkills: 1,
-                isBuiltin: 1,
-                isArchived: 0,
-                sortOrder: 2,
-                createdAt: now,
-                updatedAt: now,
-            });
-        }
-        else {
-            const agent = this.db.prepare(`SELECT role_prompt FROM chat_agents
-         WHERE tenant_id = ? AND user_id = ? AND id = ?`).get(this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
-            if (agent) {
-                const updatedPrompt = agent.role_prompt.replace(/全能专家助手/g, '智能助手');
-                this.db.prepare(`UPDATE chat_agents SET name = ?, role_prompt = ?
-                         WHERE tenant_id = ? AND user_id = ? AND id = ?`)
-                    .run('智能助手', updatedPrompt, this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+        if (isShellBuiltinAgentEnabled(ALL_ROUND_ASSISTANT_AGENT_ID)) {
+            if (!hasAllRound) {
+                insertAgent.run({
+                    tenantId: this.scope.tenantId,
+                    userId: this.scope.userId,
+                    id: ALL_ROUND_ASSISTANT_AGENT_ID,
+                    slug: ALL_ROUND_ASSISTANT_AGENT_ID,
+                    name: '智能助手',
+                    icon: '🔮',
+                    color: '#a855f7',
+                    description: '全能智能体，自动加载全部已安装本地技能和工具，无需限定条件。',
+                    rolePrompt: [
+                        '你是 **智能助手**，一个具备高权限且集成了全部本地技能（Skills）的行动体。',
+                        '你具备完整的本地命令执行（local_exec_shell）、文件读写能力，以及当前产品安装的全部场景工具。',
+                        '你的系统提示词中已经无条件加载了所有已安装的本地技能与工具。',
+                        '请根据用户的需求，直接、高效地调用最合适的本地工具或执行脚本来解决任务。'
+                    ].join('\n'),
+                    forbiddenPrompt: null,
+                    skillIds: JSON.stringify([]),
+                    toolPolicy: JSON.stringify({ mode: 'all', tools: [] }),
+                    allowExternalSkills: 1,
+                    // 「智能助手」的定位就是无条件加载全部技能（此前是 router 硬编码）。
+                    loadAllSkills: 1,
+                    isBuiltin: 1,
+                    isArchived: 0,
+                    sortOrder: 2,
+                    createdAt: now,
+                    updatedAt: now,
+                });
             }
             else {
-                this.db.prepare(`UPDATE chat_agents SET name = ?
-                         WHERE tenant_id = ? AND user_id = ? AND id = ?`)
-                    .run('智能助手', this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+                const agent = this.db.prepare(`SELECT role_prompt FROM chat_agents
+           WHERE tenant_id = ? AND user_id = ? AND id = ?`).get(this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+                if (agent) {
+                    const updatedPrompt = agent.role_prompt.replace(/全能专家助手/g, '智能助手');
+                    this.db.prepare(`UPDATE chat_agents SET name = ?, role_prompt = ?
+                           WHERE tenant_id = ? AND user_id = ? AND id = ?`)
+                        .run('智能助手', updatedPrompt, this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+                }
+                else {
+                    this.db.prepare(`UPDATE chat_agents SET name = ?
+                           WHERE tenant_id = ? AND user_id = ? AND id = ?`)
+                        .run('智能助手', this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+                }
             }
         }
+        else if (hasAllRound) {
+            this.db
+                .prepare(`UPDATE chat_agents SET is_archived = 1, updated_at = ?
+                  WHERE tenant_id = ? AND user_id = ? AND id = ? AND is_archived = 0`)
+                .run(now, this.scope.tenantId, this.scope.userId, ALL_ROUND_ASSISTANT_AGENT_ID);
+        }
         // ─── 场景包智能体种子（0.3d） ───
         // 激活包：不存在则种子；命中历史代文案（用户从未定制）则静默升级；
         // 被归档但未定制的行重新露出。未激活包：未定制的内置行归档（用户改

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steerable/agent-shell",
-  "version": "0.6.33",
+  "version": "0.6.35",
   "description": "Steerable framework — product-neutral desktop/headless agent host (Tier 5). Electron main + preload + headless HTTP server (BS) sharing one storage/sidecar/tooling core; scenario packs extend it through the @steerable/pack-sdk contract and are composed at build time by the consuming product.",
   "license": "Apache-2.0",
   "homepage": "https://steerableframework.com/",
@@ -53,9 +53,9 @@
     "electron-store": "^8.1.0",
     "he": "^1.2.0",
     "node-pty": "^1.1.0",
-    "@steerable/agent-harness": "0.6.33",
-    "@steerable/pack-sdk": "0.6.33",
-    "@steerable/agent-protocol": "0.6.33"
+    "@steerable/agent-protocol": "0.6.35",
+    "@steerable/pack-sdk": "0.6.35",
+    "@steerable/agent-harness": "0.6.35"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",