@steerable/agent-shell 0.6.51 → 0.6.53

package/dist/brand.d.ts

@@ -18,6 +18,11 @@ export interface Brand {
     agentName: string;
     /** 一句话定位（fallback prompt 用） */
     tagline: string;
+    /**
+     * 新对话落地页 / 空会话首屏副文案。省略用 shell 默认句；
+     * 空字符串表示不显示。只进渲染层，不进系统提示词。
+     */
+    homeHint?: string;
     /** 新对话 / 首页未选手动专家时绑定的内置智能体 id */
     defaultAgentId: string;
 }

package/dist/goal-store.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 会话目标。每个 chat 一份，写在用户数据目录的 goals.json。
+ *
+ * 修订号做乐观并发：update_goal 必须带上一次读到的 revision。
+ */
+export type GoalPhase = 'active' | 'paused' | 'blocked' | 'complete';
+export type GoalAction = 'edit' | 'pause' | 'resume' | 'complete' | 'blocked';
+export declare const GOAL_ACTIONS: readonly GoalAction[];
+export interface StoredGoal {
+    id: string;
+    chatId: string;
+    revision: number;
+    objective: string;
+    phase: GoalPhase;
+    blockedReason?: string;
+    updatedAt: number;
+}
+export interface GoalToolResult {
+    success: boolean;
+    goal?: StoredGoal | null;
+    error?: string;
+    needsFollowup?: boolean;
+}
+export declare class GoalStore {
+    private readonly filePath;
+    private pending;
+    constructor(filePath: string);
+    static default(): GoalStore;
+    get(chatId: string): Promise<GoalToolResult>;
+    create(chatId: string, objective: string): Promise<GoalToolResult>;
+    update(input: {
+        chatId: string;
+        id: string;
+        revision: number;
+        action: string;
+        objective?: string;
+        reason?: string;
+    }): Promise<GoalToolResult>;
+    private queue;
+    private load;
+    private read;
+    private write;
+}

package/dist/goal-store.js

@@ -0,0 +1,155 @@
+/**
+ * 会话目标。每个 chat 一份，写在用户数据目录的 goals.json。
+ *
+ * 修订号做乐观并发：update_goal 必须带上一次读到的 revision。
+ */
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { getUserDataDir } from './runtime.js';
+export const GOAL_ACTIONS = [
+    'edit',
+    'pause',
+    'resume',
+    'complete',
+    'blocked',
+];
+export class GoalStore {
+    filePath;
+    pending = Promise.resolve();
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    static default() {
+        return new GoalStore(path.join(getUserDataDir(), 'goals.json'));
+    }
+    async get(chatId) {
+        const data = await this.load();
+        return { success: true, goal: data.goals[chatId] ?? null };
+    }
+    async create(chatId, objective) {
+        const text = objective.trim();
+        if (!text)
+            return { success: false, error: 'objective 不能为空', needsFollowup: true };
+        return this.queue(async () => {
+            const data = await this.read();
+            const existing = data.goals[chatId];
+            if (existing && existing.phase !== 'complete') {
+                return {
+                    success: false,
+                    error: `本会话已有未完成目标（${existing.id}，revision ${existing.revision}）。先 update_goal 完成或改写它。`,
+                    goal: existing,
+                    needsFollowup: true,
+                };
+            }
+            const goal = {
+                id: randomUUID(),
+                chatId,
+                revision: 1,
+                objective: text,
+                phase: 'active',
+                updatedAt: Date.now(),
+            };
+            data.goals[chatId] = goal;
+            await this.write(data);
+            return { success: true, goal };
+        });
+    }
+    async update(input) {
+        if (!GOAL_ACTIONS.includes(input.action)) {
+            return {
+                success: false,
+                error: `action 必须是 ${GOAL_ACTIONS.join(' | ')}`,
+                needsFollowup: true,
+            };
+        }
+        const action = input.action;
+        return this.queue(async () => {
+            const data = await this.read();
+            const current = data.goals[input.chatId];
+            if (!current || current.id !== input.id) {
+                return { success: false, error: '目标不存在或 id 不匹配。先 get_goal。', needsFollowup: true };
+            }
+            if (current.revision !== input.revision) {
+                return {
+                    success: false,
+                    error: `revision 已变（当前 ${current.revision}）。重新 get_goal 后再更新。`,
+                    goal: current,
+                    needsFollowup: true,
+                };
+            }
+            const next = applyAction(current, action, input.objective, input.reason);
+            if ('error' in next)
+                return { success: false, error: next.error, goal: current, needsFollowup: true };
+            data.goals[input.chatId] = next;
+            await this.write(data);
+            return { success: true, goal: next };
+        });
+    }
+    queue(fn) {
+        const run = this.pending.then(fn, fn);
+        this.pending = run.then(() => undefined, () => undefined);
+        return run;
+    }
+    async load() {
+        return this.queue(() => this.read());
+    }
+    async read() {
+        try {
+            const raw = await readFile(this.filePath, 'utf8');
+            const parsed = JSON.parse(raw);
+            if (!parsed || typeof parsed !== 'object' || !parsed.goals)
+                return { goals: {} };
+            return parsed;
+        }
+        catch (err) {
+            const code = err.code;
+            if (code === 'ENOENT')
+                return { goals: {} };
+            throw err;
+        }
+    }
+    async write(data) {
+        await mkdir(path.dirname(this.filePath), { recursive: true });
+        await writeFile(this.filePath, `${JSON.stringify(data, null, 2)}\n`, 'utf8');
+    }
+}
+function applyAction(current, action, objective, reason) {
+    const next = { ...current, revision: current.revision + 1, updatedAt: Date.now() };
+    if (action === 'edit') {
+        const text = objective?.trim() ?? '';
+        if (!text)
+            return { error: 'edit 需要 objective' };
+        next.objective = text;
+        return next;
+    }
+    if (action === 'pause') {
+        if (current.phase !== 'active')
+            return { error: `只有 active 目标可以暂停（当前 ${current.phase}）` };
+        next.phase = 'paused';
+        return next;
+    }
+    if (action === 'resume') {
+        if (current.phase !== 'paused' && current.phase !== 'blocked') {
+            return { error: `只有 paused 或 blocked 目标可以恢复（当前 ${current.phase}）` };
+        }
+        next.phase = 'active';
+        delete next.blockedReason;
+        return next;
+    }
+    if (action === 'complete') {
+        if (current.phase === 'complete')
+            return { error: '目标已经完成' };
+        next.phase = 'complete';
+        return next;
+    }
+    const text = reason?.trim() ?? '';
+    if (!text)
+        return { error: 'blocked 需要 reason' };
+    if (current.phase !== 'active' && current.phase !== 'paused') {
+        return { error: `当前阶段 ${current.phase} 不能标为 blocked` };
+    }
+    next.phase = 'blocked';
+    next.blockedReason = text;
+    return next;
+}

package/dist/host/runtime.js

@@ -16,6 +16,7 @@ import { LocalScriptRegistry } from '../local-script-registry.js';
 import { TerminalManager } from '../terminal-manager.js';
 import { ToolRouter } from '../tool-router.js';
 import { McpServerRegistry, } from '../mcp-server-registry.js';
+import { mcpExecutor } from '../mcp-executor.js';
 import { ProjectRegistry } from '../project-registry.js';
 import { getProductConfig } from '../product-config.js';
 import { LocalBackendRouter } from '../local-backend/router.js';
@@ -120,7 +121,13 @@ export async function createHostRuntime(options) {
         if (!projectId)
             return null;
         const project = projectRegistry.get(projectId);
-        return project ? { name: project.name, folderPath: project.folderPath } : null;
+        return project
+            ? {
+                name: project.name,
+                folderPath: project.folderPath,
+                sourceFolders: project.sourceFolders ?? [],
+            }
+            : null;
     };
     // 场景包装配（2.3）：产品组装根（products/<id>/active.ts）在 import 期
     // 把包装配函数注册进 pack-assembly 注册表；这里统一装配。宿主不 import
@@ -214,8 +221,8 @@ export async function createHostRuntime(options) {
                 store: defaultStore,
                 toolRouter,
                 resolveProjectRoot: async (chatId) => localBackendRouter.resolveChatWorkspaceRoot(chatId),
-                // 项目模式下文件读写被围栏在项目目录内；会话附件目录是额外放行的
-                // 只读根，保证用户上传的文件即使在项目会话里也能被 agent 读回。
+                // 读：项目家目录之外，附件目录和源文件夹（含各自子目录）也可读。
+                // 写：源文件夹及其子目录与家目录同一档；附件目录保持只读。
                 resolveAdditionalReadRoots: async (chatId) => {
                     const project = await localBackendRouter.resolveChatProject(chatId);
                     return [
@@ -223,6 +230,10 @@ export async function createHostRuntime(options) {
                         ...(project?.sourceFolders ?? []),
                     ];
                 },
+                resolveAdditionalWriteRoots: async (chatId) => {
+                    const project = await localBackendRouter.resolveChatProject(chatId);
+                    return project?.sourceFolders ?? [];
+                },
                 approvalHandler: approvalBridge.handler,
                 askUserHandler: askUserBridge.handler,
                 // P2b: resume 时 sidecar 把记录里的读证据推给 LocalExecutor 的
@@ -254,6 +265,7 @@ export async function createHostRuntime(options) {
             for (const handle of [...packHandles.values()].reverse()) {
                 await handle.dispose?.();
             }
+            await mcpExecutor.shutdownAll();
             await shutdownHostSidecar();
             await closeStorage();
         },

package/dist/host-tools.d.ts

@@ -34,7 +34,7 @@ export type ResolvedSettingsChrome = Record<SettingsItemId, boolean>;
  */
 export declare function resolveSettingsChrome(value?: unknown, tools?: ResolvedHostTools): ResolvedSettingsChrome;
 export declare function hasGeneralSettingsChrome(chrome?: ResolvedSettingsChrome): boolean;
-export declare const LOCAL_FS_TOOL_NAMES: readonly ["local_exec_shell", "local_read_file", "view_image", "local_write_file", "local_edit_file", "present_files", "local_open_path", "local_run_snippet", "local_list_scripts", "local_run_script"];
+export declare const LOCAL_FS_TOOL_NAMES: readonly ["local_exec_shell", "local_read_file", "view_image", "local_write_file", "local_edit_file", "present_files", "local_open_path", "local_run_snippet", "local_list_scripts", "local_run_script", "grep", "glob", "pwsh"];
 export declare function resolveHostToolSurface(value: boolean | {
     capability?: boolean;
     chrome?: boolean;

package/dist/host-tools.js

@@ -84,6 +84,9 @@ export const LOCAL_FS_TOOL_NAMES = [
     'local_run_snippet',
     'local_list_scripts',
     'local_run_script',
+    'grep',
+    'glob',
+    'pwsh',
 ];
 const FAMILY_TOOL_PREFIX = {
     terminal: [],
@@ -97,6 +100,9 @@ const FAMILY_TOOL_PREFIX = {
         'worktree_create',
         'worktree_list',
         'worktree_remove',
+        'job_list',
+        'job_output',
+        'job_kill',
     ],
     mcp: ['mcp_list_tools', 'mcp_tool_exec'],
     web: ['web_search', 'web_fetch'],

package/dist/local-backend/portable-bundle.d.ts

@@ -69,9 +69,14 @@ export interface PortableWebSearchSection {
 }
 export interface PortableMcpSection {
     name: string;
-    command: string;
-    args: string[];
+    transport: 'stdio' | 'streamable-http';
+    command?: string;
+    args?: string[];
     cwd?: string;
+    url?: string;
+    headers?: Record<string, string>;
+    headersFromEnv?: Record<string, string>;
+    bearerTokenEnvVar?: string;
     enabled: boolean;
     envIncluded: boolean;
     env?: Record<string, string>;
@@ -178,11 +183,20 @@ export declare function webSearchSectionFromSettings(settings: {
 }, includeSecrets: boolean): PortableWebSearchSection;
 export declare function mcpSectionFromServer(server: {
     name: string;
+    transport: 'stdio';
     command: string;
     args: string[];
     cwd?: string;
     enabled: boolean;
     env: Record<string, string>;
+} | {
+    name: string;
+    transport: 'streamable-http';
+    url: string;
+    headers: Record<string, string>;
+    headersFromEnv: Record<string, string>;
+    bearerTokenEnvVar?: string;
+    enabled: boolean;
 }, includeSecrets: boolean): PortableMcpSection;
 /**
  * 把消息正文和 metadata 里的旧附件绝对路径换成新会话里的路径。

package/dist/local-backend/portable-bundle.js

@@ -106,15 +106,27 @@ export function webSearchSectionFromSettings(settings, includeSecrets) {
     };
 }
 export function mcpSectionFromServer(server, includeSecrets) {
-    return {
-        name: server.name,
-        command: server.command,
-        args: [...server.args],
-        cwd: server.cwd,
-        enabled: server.enabled,
-        envIncluded: includeSecrets,
-        ...(includeSecrets ? { env: { ...server.env } } : {}),
-    };
+    return server.transport === 'stdio'
+        ? {
+            name: server.name,
+            transport: 'stdio',
+            command: server.command,
+            args: [...server.args],
+            cwd: server.cwd,
+            enabled: server.enabled,
+            envIncluded: includeSecrets,
+            ...(includeSecrets ? { env: { ...server.env } } : {}),
+        }
+        : {
+            name: server.name,
+            transport: 'streamable-http',
+            url: server.url,
+            headers: { ...server.headers },
+            headersFromEnv: { ...server.headersFromEnv },
+            bearerTokenEnvVar: server.bearerTokenEnvVar,
+            enabled: server.enabled,
+            envIncluded: false,
+        };
 }
 /**
  * 把消息正文和 metadata 里的旧附件绝对路径换成新会话里的路径。

package/dist/local-backend/portable-service.js

@@ -180,22 +180,36 @@ async function applyMcp(mcp, servers) {
         return 'MCP 注册表不可用';
     for (const server of servers) {
         const name = server.name?.trim();
-        const command = server.command?.trim();
-        if (!name || !command)
+        if (!name)
             continue;
-        const input = {
-            name,
-            command,
-            args: Array.isArray(server.args) ? server.args.map((arg) => String(arg)) : [],
-            cwd: server.cwd,
-            enabled: server.enabled !== false,
-            ...(server.envIncluded && server.env ? { env: server.env } : {}),
-        };
+        const input = server.transport === 'streamable-http'
+            ? {
+                name,
+                transport: 'streamable-http',
+                url: server.url?.trim() ?? '',
+                headers: server.headers ?? {},
+                headersFromEnv: server.headersFromEnv ?? {},
+                bearerTokenEnvVar: server.bearerTokenEnvVar,
+                enabled: server.enabled !== false,
+            }
+            : {
+                name,
+                transport: 'stdio',
+                command: server.command?.trim() ?? '',
+                args: Array.isArray(server.args) ? server.args.map((arg) => String(arg)) : [],
+                cwd: server.cwd,
+                enabled: server.enabled !== false,
+                ...(server.envIncluded && server.env ? { env: server.env } : {}),
+            };
+        if ((input.transport === 'stdio' && !input.command) ||
+            (input.transport === 'streamable-http' && !input.url)) {
+            continue;
+        }
         const existing = mcp.list().find((item) => item.name.toLowerCase() === name.toLowerCase());
         if (existing)
             mcp.update(existing.id, input);
         else
-            mcp.create({ ...input, env: input.env ?? {} });
+            mcp.create(input);
     }
     return null;
 }

package/dist/local-backend/router.js

@@ -10,6 +10,7 @@ import { buildWorldState, getActiveCoreLoopStreamId, streamCoreLoopTurn, } from
 import { driveWithAutoContinue, resolveAutoContinueMax, } from './auto-continue-helper.js';
 import { buildAmbientDelegateRoster, buildDelegateDispatchInstruction, buildDelegateRosterHint, buildMentionDelegateRoster, BUILTIN_SUBAGENT_PROFILES, mergeTurnSubagentParam, } from './subagent-profiles.js';
 import { resolveMentionedAgentIds } from './mention-targets.js';
+import { presentToolCall } from '../tool-presentation.js';
 import { readSidecarHistoryEntries, timelineFromHistoryEntries, } from './task-process.js';
 import { appendTimelineDelta, freezeTimelineReasoning, sealLastTimelineBlock, syncTimelineTools, } from './turn-timeline.js';
 import { turnDurationMs } from './turn-duration.js';
@@ -50,6 +51,14 @@ import { matchPackBackendRoute } from './pack-backend-routes.js';
 import { collectTurnFiles } from './turn-files.js';
 import { resolveMentionedPaths } from './mentioned-paths.js';
 import { getAuthProvider } from '../auth/index.js';
+function stringRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return {};
+    return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+        key,
+        String(item),
+    ]));
+}
 function parseSourceFolders(value) {
     if (!Array.isArray(value))
         return [];
@@ -1139,7 +1148,7 @@ export class LocalBackendRouter {
             const servers = registry.list().map((s) => {
                 const cached = registry.getCachedTools(s.id);
                 return {
-                    ...s,
+                    ...registry.toPublicEntry(s),
                     serverKey: registry.serverKey(s),
                     toolCount: cached?.tools.length ?? 0,
                     toolsPreview: cached?.tools.slice(0, 8).map((t) => t.name) ?? [],
@@ -1155,19 +1164,35 @@ export class LocalBackendRouter {
                 return { status: 503, data: { error: 'MCP 注册表不可用' } };
             try {
                 const payload = this.toRecord(request.body);
-                const entry = registry.create({
-                    name: String(payload.name ?? ''),
-                    command: String(payload.command ?? ''),
-                    args: Array.isArray(payload.args) ? payload.args.map((a) => String(a)) : [],
-                    env: payload.env && typeof payload.env === 'object' && !Array.isArray(payload.env)
-                        ? Object.fromEntries(Object.entries(payload.env).map(([k, v]) => [k, String(v)]))
-                        : {},
-                    cwd: typeof payload.cwd === 'string' ? payload.cwd : undefined,
-                    enabled: payload.enabled !== false,
-                });
+                const entry = payload.transport === 'streamable-http'
+                    ? registry.create({
+                        name: String(payload.name ?? ''),
+                        transport: 'streamable-http',
+                        url: String(payload.url ?? ''),
+                        headers: stringRecord(payload.headers),
+                        headersFromEnv: stringRecord(payload.headersFromEnv),
+                        bearerTokenEnvVar: typeof payload.bearerTokenEnvVar === 'string'
+                            ? payload.bearerTokenEnvVar
+                            : undefined,
+                        reconnect: payload.reconnect &&
+                            typeof payload.reconnect === 'object' &&
+                            !Array.isArray(payload.reconnect)
+                            ? payload.reconnect
+                            : undefined,
+                        enabled: payload.enabled !== false,
+                    })
+                    : registry.create({
+                        name: String(payload.name ?? ''),
+                        transport: 'stdio',
+                        command: String(payload.command ?? ''),
+                        args: Array.isArray(payload.args) ? payload.args.map((a) => String(a)) : [],
+                        env: stringRecord(payload.env),
+                        cwd: typeof payload.cwd === 'string' ? payload.cwd : undefined,
+                        enabled: payload.enabled !== false,
+                    });
                 // 后台拉一次工具列表，下一轮对话即可用；失败不阻塞创建
                 void registry.refreshTools(entry.id).catch(() => { });
-                return { status: 200, data: { server: entry } };
+                return { status: 200, data: { server: registry.toPublicEntry(entry) } };
             }
             catch (err) {
                 return { status: 400, data: { error: err instanceof Error ? err.message : String(err) } };
@@ -1187,7 +1212,7 @@ export class LocalBackendRouter {
                 return {
                     status: 200,
                     data: {
-                        added: result.added,
+                        added: result.added.map((entry) => registry.toPublicEntry(entry)),
                         skipped: result.skipped,
                     },
                 };
@@ -1210,17 +1235,32 @@ export class LocalBackendRouter {
                     const payload = this.toRecord(request.body);
                     const updated = registry.update(serverId, {
                         name: typeof payload.name === 'string' ? payload.name : undefined,
+                        transport: payload.transport === 'stdio' || payload.transport === 'streamable-http'
+                            ? payload.transport
+                            : undefined,
                         command: typeof payload.command === 'string' ? payload.command : undefined,
                         args: Array.isArray(payload.args) ? payload.args.map((a) => String(a)) : undefined,
                         env: payload.env && typeof payload.env === 'object' && !Array.isArray(payload.env)
-                            ? Object.fromEntries(Object.entries(payload.env).map(([k, v]) => [k, String(v)]))
+                            ? stringRecord(payload.env)
                             : undefined,
                         cwd: typeof payload.cwd === 'string' ? payload.cwd : undefined,
+                        url: typeof payload.url === 'string' ? payload.url : undefined,
+                        headers: payload.headers && typeof payload.headers === 'object' && !Array.isArray(payload.headers)
+                            ? stringRecord(payload.headers)
+                            : undefined,
+                        headersFromEnv: payload.headersFromEnv &&
+                            typeof payload.headersFromEnv === 'object' &&
+                            !Array.isArray(payload.headersFromEnv)
+                            ? stringRecord(payload.headersFromEnv)
+                            : undefined,
+                        bearerTokenEnvVar: typeof payload.bearerTokenEnvVar === 'string'
+                            ? payload.bearerTokenEnvVar
+                            : undefined,
                         enabled: typeof payload.enabled === 'boolean' ? payload.enabled : undefined,
                     });
                     if (updated.enabled)
                         void registry.refreshTools(updated.id).catch(() => { });
-                    return { status: 200, data: { server: updated } };
+                    return { status: 200, data: { server: registry.toPublicEntry(updated) } };
                 }
                 catch (err) {
                     return { status: 400, data: { error: err instanceof Error ? err.message : String(err) } };
@@ -2448,17 +2488,17 @@ export class LocalBackendRouter {
             ? chatProject.folderPath
             : await this.resolveChatWorkspaceRoot(chatId);
         if (chatProject) {
+            const sourceFolderLine = chatProject.sourceFolders.length > 0
+                ? `源文件夹及其子目录也可读写：${chatProject.sourceFolders.join('、')}。`
+                : '如确需读写家目录外的目录，可请用户把该目录附加为源文件夹。';
             systemPrompt +=
                 `\n\n【项目模式】当前对话绑定项目「${chatProject.name}」，家目录：${chatProject.folderPath}\n` +
-                    `你的文件写入（local_write_file）和命令执行（local_exec_shell）都被限制在该家目录内：` +
-                    `写入路径越界会被拒绝；命令默认在家目录下运行，显式指定的 cwd 越界也会被拒绝。` +
-                    (chatProject.sourceFolders.length > 0
-                        ? `另有源文件夹（只读）：${chatProject.sourceFolders.join('、')}。`
-                        : '') +
-                    `请一律使用项目目录内的路径（相对路径按家目录解析）。` +
-                    `如确需读取项目外的文件，可请用户在项目里附加为源文件夹。\n` +
-                    `例外：本会话的用户上传附件目录 ${chatAttachmentsDirPath(chatId)} 也在项目家目录外，` +
-                    `但它已作为**只读放行根**开放给 local_read_file（用绝对路径可直接读取，不会被项目围栏拒绝）。` +
+                    `文件写入（local_write_file / local_edit_file）和命令写入可以落在家目录及其全部子目录内。` +
+                    `${sourceFolderLine}` +
+                    `这些范围之外的写入会被拒绝。命令未指定 cwd 时在家目录运行；显式 cwd 必须落在上述可写目录（含子目录）内。` +
+                    `相对路径按家目录解析。\n` +
+                    `例外：本会话的用户上传附件目录 ${chatAttachmentsDirPath(chatId)} 只读，不在可写范围内，` +
+                    `但 local_read_file 可以用绝对路径读取。` +
                     /* shell-neutral:allow generic document extensions, not product identity */ `用户附到本条消息的文件都放在那里；需要转换（docx / pdf / xlsx / pptx 等）时，` +
                     `把该绝对路径交给 local_exec_shell 的转换脚本处理即可，**不要**因为它在项目家目录外就拒绝读取或要求用户重新拷贝。`;
             // W6-5 + W6-7a：项目级规则文件（AGENTS.md / CLAUDE.md）是不可信输入，
@@ -2481,7 +2521,7 @@ export class LocalBackendRouter {
         else {
             systemPrompt +=
                 `\n\n【对话工作区】当前对话没有绑定项目。工作区：${workspaceRoot}\n` +
-                    `你的文件写入（local_write_file）和命令执行（local_exec_shell）都被限制在该目录内：` +
+                    `你的文件写入（local_write_file）和命令执行（local_exec_shell）都被限制在该目录及其子目录内：` +
                     `写入路径越界会被拒绝；命令默认在工作区下运行，显式指定的 cwd 越界也会被拒绝。` +
                     `请一律使用工作区内的路径（相对路径按工作区解析）。` +
                     `用户若要把对话绑到已有项目，可在输入框上方选择项目。`;
@@ -2940,7 +2980,7 @@ export class LocalBackendRouter {
         // spec (default.harness.yaml) is the single source of truth for
         // maxRounds / maxToolErrors, and an explicit request param overrides it.
         // W4-2: per-exec sandbox for shell tool calls, default-on. Writable
-        // roots = 项目家目录，或无项目时 Documents/<应用>/conversations/<chatId>。
+        // roots = 项目家目录（或无项目时的对话工作区）+ 源文件夹。每个根含其子目录。
         // `execPolicy: 'full'`（输入框「完整权限」）关闭这一层，让 mkdir
         // Downloads 这类工作区外写入不再被 Seatbelt 拦成 Operation not permitted。
         const chatProject = await this.resolveChatProject(chatId);
@@ -2952,6 +2992,7 @@ export class LocalBackendRouter {
             // 工作区）。
             ...collectPackExecWritableRoots(chatId),
             workspaceRoot,
+            ...(chatProject?.sourceFolders ?? []),
         ], { policy: clampExecPolicy(parseExecPolicy(payload.execPolicy), getResolvedHostTools()) });
         // W4-1: approval algebra, host mode — every tool call is gated by the
         // Electron approval UI over the reverse channel. The durable scope
@@ -2989,6 +3030,7 @@ export class LocalBackendRouter {
         const turnFileRoots = [
             ...collectPackExecWritableRoots(chatId),
             workspaceRoot,
+            ...(chatProject?.sourceFolders ?? []),
         ];
         try {
             const coreLoopOptions = {
@@ -3077,7 +3119,7 @@ export class LocalBackendRouter {
                     ...(toolPolicy.mode === 'all' ? {} : { toolPolicy }),
                 },
                 execSandbox,
-                approval,
+                approval: approval ? { ...approval, writableRoots: turnFileRoots } : undefined,
                 // delegate-on-pool 统一:模型的多代理面收敛为单工具
                 // delegate_subagent(默认开)。内置画像集(explore/research/coder)
                 // 带工具域/轮次/并发/系统提示,模型按画像 description 选委派
@@ -3110,6 +3152,7 @@ export class LocalBackendRouter {
                         tool: call.tool,
                         mode: chatMode,
                         arguments: call.arguments,
+                        view: presentToolCall(call.tool, call.arguments),
                         threw: false,
                     });
                     syncTimelineTools(timeline, executedActions);
@@ -3124,6 +3167,7 @@ export class LocalBackendRouter {
                         tool: action.tool,
                         mode: chatMode,
                         arguments: action.arguments,
+                        view: presentToolCall(action.tool, action.arguments, action.result),
                         result: action.result,
                         success: action.success,
                         error: action.error,

package/dist/local-backend/subagent-profiles.js

@@ -20,8 +20,12 @@ import { loadSkills } from './skill-loader.js';
 /** 只读工具域：探索与调研画像共享的「摸不到写操作」基线。 */
 const READ_ONLY_TOOLS = [
     'local_read_file',
+    'view_image',
     'local_list_scripts',
     'local_open_path',
+    'grep',
+    'glob',
+    'get_goal',
     'web_search',
     'web_fetch',
     'mcp_list_tools',

package/dist/local-backend/task-service.d.ts

@@ -54,6 +54,7 @@ export interface TaskServiceDeps {
     resolveChatProject: (chatId: string) => Promise<{
         name: string;
         folderPath: string;
+        sourceFolders?: string[];
     } | null>;
     /**
      * 无项目对话的可写根（Documents/<应用>/conversations/<chatId>）。
@@ -120,6 +121,11 @@ export declare class TaskService {
     private executeTask;
     /** task_status 工具：单任务或本 chat 全部任务的快照。 */
     status(chatId: string, taskId?: string): Promise<Record<string, unknown>>;
+    /**
+     * job_kill：结束 running 或 blocked 任务。running 先打标记再取消流，
+     * 终态回写看到标记后保持 failed，避免流的正常完成把杀死盖掉。
+     */
+    kill(chatId: string, taskId: string, reason?: string): Promise<Record<string, unknown>>;
     /** task_result 工具：取终态任务的完整结果。 */
     result(chatId: string, taskId: string): Promise<Record<string, unknown>>;
     /** 喂给模型的任务视图（完整字段，answer 截断防爆上下文）。 */