@yeaft/webchat-agent 1.0.443 → 1.0.445

package/cli.js

@@ -74,11 +74,13 @@ if (command === 'doctor') {
 } else if (command === 'local') {
   await handleLocalCommand(subArgs);
 } else if (command === 'container') {
+  let formatContainerError = error => error.code || error.message;
   try {
-    const { runContainerCli } = await import('./container-cli.js');
-    await runContainerCli(subArgs);
+    const containerCli = await import('./container-cli.js');
+    formatContainerError = containerCli.formatContainerError;
+    await containerCli.runContainerCli(subArgs);
   } catch (error) {
-    console.error(`Container Agent failed: ${error.code || error.message}`);
+    console.error(`Container Agent failed: ${formatContainerError(error)}`);
     process.exit(1);
   }
 } else if (command === 'upgrade') {

package/connection/message-router.js

@@ -30,7 +30,7 @@ import { getLlmConfig, updateLlmConfig, getYeaftSettings, updateYeaftSettings, g
 import { loadConfig } from '../yeaft/config.js';
 import { discoverLlmModels } from '../llm-model-discovery.js';
 import { fetchModelsDev } from '../yeaft/llm/models-dev.js';
-import { handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, handleYeaftPluginCatalog, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
+import { handleYeaftSessionSend, handleYeaftAskUserAnswer, handleYeaftSubAgentPrompt, handleYeaftTaskCancel, handleYeaftModeSwitch, handleYeaftModelSwitch, resetYeaftSession, refreshLiveSessionConfig, handleYeaftLoadHistory, handleYeaftLoadHistoryOutline, handleYeaftSearchHistory, handleYeaftLoadHistoryWindow, handleYeaftLoadMoreHistory, handleYeaftAbortThread, handleYeaftAbortAll, handleYeaftAbortTurn, handleYeaftVpSubscribe, handleYeaftVpCreate, handleYeaftVpUpdate, handleYeaftVpDelete, handleYeaftVpRead, handleYeaftListSessions, handleYeaftProjectContextSync, handleYeaftProjectMutation, handleYeaftCreateSession, handleYeaftRenameSession, handleYeaftUpdateSession, handleYeaftUpdateSessionConfig, handleYeaftArchiveSession, handleYeaftDeleteSession, handleYeaftSessionAddMember, handleYeaftSessionRemoveMember, handleYeaftSessionSetDefaultVp, handleYeaftScanWorkdirSessions, handleYeaftRestoreSession, handleYeaftDreamTrigger, handleYeaftFetchToolStats, handleYeaftFetchDebugHistory, handleYeaftMcpList, handleYeaftMcpAdd, handleYeaftMcpRemove, handleYeaftMcpReload, handleYeaftPluginCatalog, handleYeaftManagedSkill, broadcastLanguageChange, broadcastYeaftSessionSnapshotEager, broadcastYeaftVpSnapshotEager, preloadYeaftSkillSlashCommands } from '../yeaft/web-bridge.js';
 import { startYeaftStatusRefresh, forceRefreshYeaftStatus } from '../yeaft/status-cache.js';
 import { handleWorkCenterRequest } from '../yeaft/work-center/bridge.js';
 import { handleBrowserRuntimeMessage } from '../browser-runtime/messages.js';
@@ -639,6 +639,10 @@ export async function handleMessage(msg) {
       handleYeaftPluginCatalog(msg);
       break;
 
+    case 'yeaft_managed_skill':
+      handleYeaftManagedSkill(msg);
+      break;
+
     case 'yeaft_vp_create':
     case 'unify_vp_create':
       handleYeaftVpCreate(msg);

package/container-cli.js

@@ -2,6 +2,7 @@
 import { spawn } from 'node:child_process';
 import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 import {
   createContainerAgent,
   DEFAULT_AGENT_SLICE,
@@ -18,6 +19,25 @@ import {
   writeAgentSecretFile,
 } from './container-manager.js';
 
+function shellQuote(value) {
+  return `'${String(value).replaceAll("'", "'\\''")}'`;
+}
+
+function agentCliEntry() {
+  return fileURLToPath(new URL('./cli.js', import.meta.url));
+}
+
+export function setupLimitsCommand() {
+  return `sudo ${shellQuote(process.execPath)} ${shellQuote(agentCliEntry())} container setup-limits`;
+}
+
+export function formatContainerError(error) {
+  const code = String(error?.code || '').trim();
+  const message = String(error?.message || '').trim();
+  if (code && message && code !== message) return `${code}: ${message}`;
+  return code || message || String(error);
+}
+
 function help() {
   console.log(`
 Usage:
@@ -34,6 +54,8 @@ Resource protection (default): install attaches the container to the shared
 containers at 90% of host CPU and 70% of host memory. The slice is initialized
 automatically on first install (as root directly, otherwise via sudo; you are
 prompted for the sudo password once). Pass --no-slice to opt out of protection.
+If setup-limits must be run manually for a user-local install, use the
+absolute Node/CLI path printed by this command: ${setupLimitsCommand()}.
 
 --disk-size <size>: per-volume capacity quota for the data and workspace volumes, e.g.
   20G or 80% of the Docker data-root filesystem. Requires Docker overlay2 on xfs with
@@ -90,7 +112,7 @@ export async function ensureAgentSliceAuto({
   if (!interactive) {
     throw new Error(
       `Agent slice '${DEFAULT_AGENT_SLICE}' is not initialized and this shell is not interactive; ` +
-      'run "sudo yeaft-agent container setup-limits" once, ' +
+      `run ${setupLimitsCommand()} once, ` +
       'or pass --no-slice to install without shared resource limits',
     );
   }
@@ -98,7 +120,7 @@ export async function ensureAgentSliceAuto({
   if (code !== 0) {
     throw new Error(
       `Failed to initialize Agent slice '${DEFAULT_AGENT_SLICE}' via sudo (exit ${code}); ` +
-      'run "sudo yeaft-agent container setup-limits" manually, ' +
+      `run ${setupLimitsCommand()} manually, ` +
       'or pass --no-slice to install without shared resource limits',
     );
   }
@@ -106,14 +128,10 @@ export async function ensureAgentSliceAuto({
 
 function runSudoSetupLimits({ spawnImpl = spawn } = {}) {
   return new Promise((resolvePromise, reject) => {
-    // `sudo env PATH=...` keeps user-installed runtimes (nvm etc.) reachable
-    // even when sudoers sets a secure_path. Re-invoking the current entry
-    // script avoids depending on the npm bin being in sudo's PATH.
-    const entry = process.argv[1] ? resolve(process.argv[1]) : null;
-    const args = ['env', `PATH=${process.env.PATH || ''}`];
-    if (entry) args.push(process.execPath, entry);
-    else args.push('yeaft-agent');
-    args.push('container', 'setup-limits');
+    // Use absolute paths for both the runtime and this installed module. This
+    // bypasses sudo's secure_path entirely and works for npm-global installs
+    // that only exist in the invoking user's PATH.
+    const args = [process.execPath, agentCliEntry(), 'container', 'setup-limits'];
     const child = spawnImpl('sudo', args, { stdio: 'inherit' });
     child.once('error', reject);
     child.once('close', code => resolvePromise(code ?? 1));
@@ -161,7 +179,7 @@ export async function runContainerCli(args) {
     });
   } else if (action === 'setup-limits') {
     if (typeof process.getuid === 'function' && process.getuid() !== 0) {
-      throw new Error('setup-limits must run as root; use sudo');
+      throw new Error(`setup-limits must run as root; use ${setupLimitsCommand()}`);
     }
     const resources = await detectHostResources();
     result = await ensureAgentSlice({
@@ -191,7 +209,7 @@ export async function runContainerCli(args) {
 
 if (process.argv[1] && import.meta.url === new URL(`file://${resolve(process.argv[1])}`).href) {
   runContainerCli(process.argv.slice(2)).catch(error => {
-    console.error(`Container Agent failed: ${error.code || error.message}`);
+    console.error(`Container Agent failed: ${formatContainerError(error)}`);
     process.exitCode = 1;
   });
 }

package/container-manager.js

@@ -17,6 +17,23 @@ export class ContainerAgentError extends Error {
   }
 }
 
+function isCgroupWritePermissionError(error) {
+  const code = String(error?.code || '').toUpperCase();
+  const message = String(error?.message || '');
+  return ['EACCES', 'EPERM', 'EROFS'].includes(code)
+    || /EACCES|EPERM|EROFS|permission denied|operation not permitted|read-only file system/i.test(message);
+}
+
+function wrapCgroupWriteError(error, slicePath) {
+  if (!isCgroupWritePermissionError(error)) return error;
+  return new ContainerAgentError(
+    'CONTAINER_AGENT_CGROUP_PERMISSION_DENIED',
+    `Cannot write cgroup v2 slice at ${slicePath} (${error.code || 'permission denied'}). ` +
+      'The host cgroup hierarchy is not writable or delegated to this process; ' +
+      'run setup-limits as host root with a read-write cgroup v2 mount, or pass --no-slice to install without shared resource limits',
+  );
+}
+
 export function normalizeContainerAgentName(name) {
   const value = String(name || '').trim();
   if (!NAME_PATTERN.test(value)) throw new ContainerAgentError('CONTAINER_AGENT_INVALID_NAME');
@@ -276,8 +293,9 @@ export async function ensureAgentSlice({
   try {
     const text = await fsImpl.readFile('/sys/fs/cgroup/cgroup.controllers', 'utf8');
     controllers = String(text || '').trim().split(/\s+/).filter(Boolean);
-  } catch {
-    // Treat missing controller list as "no controllers writable".
+  } catch (error) {
+    if (isCgroupWritePermissionError(error)) throw wrapCgroupWriteError(error, '/sys/fs/cgroup');
+    // Treat a missing controller list as "no controllers writable".
   }
   const wanted = ['cpu', 'memory', 'pids'].filter(name => controllers.includes(name));
   if (wanted.length === 0) {
@@ -286,35 +304,39 @@ export async function ensureAgentSlice({
       'cgroup v2 controllers (cpu/memory/pids) are unavailable; setup-limits requires a host running cgroup v2 and root access to /sys/fs/cgroup',
     );
   }
-  await fsImpl.mkdir(slicePath, { recursive: true, mode: 0o755 });
-  await fsImpl.writeFile(
-    `${slicePath}/cgroup.subtree_control`,
-    wanted.map(name => `+${name}`).join(' '),
-    'utf8',
-  );
-  const detected = resources || await detectHostResources({ readFileImpl: fsImpl.readFile });
-  const limits = buildSliceLimits({ cpuPercent, memoryPercent, pidsLimit }, detected);
-  if (wanted.includes('cpu') && limits.cpuQuotaUs > 0) {
-    await fsImpl.writeFile(`${slicePath}/cpu.max`, `${limits.cpuQuotaUs} ${limits.cpuPeriodUs}`, 'utf8');
-  }
-  if (wanted.includes('memory') && limits.memoryMaxBytes > 0) {
-    await fsImpl.writeFile(`${slicePath}/memory.max`, String(limits.memoryMaxBytes), 'utf8');
-    // No swap escape hatch: the 70% RAM hard cap is the whole memory budget.
-    await fsImpl.writeFile(`${slicePath}/memory.swap.max`, '0', 'utf8');
-  }
-  if (wanted.includes('pids') && limits.pidsMax > 0) {
-    await fsImpl.writeFile(`${slicePath}/pids.max`, String(limits.pidsMax), 'utf8');
+  try {
+    await fsImpl.mkdir(slicePath, { recursive: true, mode: 0o755 });
+    await fsImpl.writeFile(
+      `${slicePath}/cgroup.subtree_control`,
+      wanted.map(name => `+${name}`).join(' '),
+      'utf8',
+    );
+    const detected = resources || await detectHostResources({ readFileImpl: fsImpl.readFile });
+    const limits = buildSliceLimits({ cpuPercent, memoryPercent, pidsLimit }, detected);
+    if (wanted.includes('cpu') && limits.cpuQuotaUs > 0) {
+      await fsImpl.writeFile(`${slicePath}/cpu.max`, `${limits.cpuQuotaUs} ${limits.cpuPeriodUs}`, 'utf8');
+    }
+    if (wanted.includes('memory') && limits.memoryMaxBytes > 0) {
+      await fsImpl.writeFile(`${slicePath}/memory.max`, String(limits.memoryMaxBytes), 'utf8');
+      // No swap escape hatch: the 70% RAM hard cap is the whole memory budget.
+      await fsImpl.writeFile(`${slicePath}/memory.swap.max`, '0', 'utf8');
+    }
+    if (wanted.includes('pids') && limits.pidsMax > 0) {
+      await fsImpl.writeFile(`${slicePath}/pids.max`, String(limits.pidsMax), 'utf8');
+    }
+    const marker = {
+      slice,
+      cpuQuotaUs: limits.cpuQuotaUs,
+      cpuPeriodUs: limits.cpuPeriodUs,
+      memoryMaxBytes: limits.memoryMaxBytes,
+      pidsMax: limits.pidsMax,
+      updatedAt: new Date().toISOString(),
+    };
+    await fsImpl.writeFile(`${slicePath}/${SLICE_READY_MARKER}`, JSON.stringify(marker, null, 2), 'utf8');
+    return { slice, limits, controllers: wanted };
+  } catch (error) {
+    throw wrapCgroupWriteError(error, slicePath);
   }
-  const marker = {
-    slice,
-    cpuQuotaUs: limits.cpuQuotaUs,
-    cpuPeriodUs: limits.cpuPeriodUs,
-    memoryMaxBytes: limits.memoryMaxBytes,
-    pidsMax: limits.pidsMax,
-    updatedAt: new Date().toISOString(),
-  };
-  await fsImpl.writeFile(`${slicePath}/${SLICE_READY_MARKER}`, JSON.stringify(marker, null, 2), 'utf8');
-  return { slice, limits, controllers: wanted };
 }
 
 /**

package/index.js

@@ -6,8 +6,6 @@ import { homedir } from 'os';
 import { createAssetOutbox } from './yeaft/asset-outbox.js';
 import { existsSync, readFileSync, writeFileSync, mkdirSync, cpSync, chmodSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
-import { exec } from 'child_process';
-import { promisify } from 'util';
 import { fileURLToPath } from 'url';
 import ctx from './context.js';
 import {
@@ -33,14 +31,12 @@ import {
   runAfterManagedCliRuntimeCleanup,
   summarizeManagedCliResults,
 } from './yeaft/managed-cli.js';
-
-const execAsync = promisify(exec);
-
-// Startup maintenance is non-interactive. Without windowsHide, each exec()
-// creates a visible cmd.exe window on Windows before the Agent connects.
-function execHiddenAsync(command, options = {}) {
-  return execAsync(command, { ...options, windowsHide: true });
-}
+import {
+  execHiddenFileAsync,
+  resolveNpmInvocation,
+  shouldRunPeriodicCheck,
+  writePeriodicCheckMarker,
+} from './startup-maintenance.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
@@ -177,7 +173,7 @@ async function detectCapabilities() {
   // agent build can speak plaintext WS frames. New servers see this and
   // flip `agent.encryptOutbound = false`, stopping outbound encryption
   // to this peer. Old servers ignore the unknown capability token.
-  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', SAFE_REMOTE_UPGRADE_CAPABILITY, 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'file_reference_resolution', 'yeaft_plugins'];
+  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', SAFE_REMOTE_UPGRADE_CAPABILITY, 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'file_reference_resolution', 'yeaft_plugins', 'yeaft_managed_skills'];
   if (process.platform === 'linux') capabilities.push('work_item_attachments');
   const pty = await loadNodePty();
   if (pty) capabilities.push('terminal');
@@ -199,7 +195,8 @@ async function ensureDependencies() {
   if (!existsSync(nodeModulesPath)) {
     console.log('[Startup] node_modules not found, running npm install...');
     try {
-      await execHiddenAsync('npm install', { cwd: agentDir, timeout: 120000 });
+      const npm = resolveNpmInvocation();
+      await execHiddenFileAsync(npm.command, [...npm.argsPrefix, 'install'], { cwd: agentDir, timeout: 120000 });
       console.log('[Startup] npm install completed');
     } catch (e) {
       console.warn('[Startup] npm install failed:', e.message);
@@ -222,6 +219,7 @@ async function ensureYeaftSkills() {
   const installedFile = join(pluginsDir, 'installed_plugins.json');
   const settingsFile = join(claudeDir, 'settings.json');
   const cacheDir = join(pluginsDir, 'cache', MARKETPLACE_NAME, PLUGIN_NAME, PLUGIN_VERSION);
+  const updateCheckMarker = join(pluginsDir, '.yeaft-skills-update-check.json');
 
   try {
     // --- Layer 1: Clone or update the marketplace repo ---
@@ -230,38 +228,49 @@ async function ensureYeaftSkills() {
     if (!existsSync(installDir)) {
       console.log('[Startup] yeaft-skills not found, installing as marketplace plugin...');
       mkdirSync(marketplacesDir, { recursive: true });
-      await execHiddenAsync(`git clone ${REPO_URL} "${installDir}"`, { timeout: 60000 });
+      await execHiddenFileAsync('git', ['clone', REPO_URL, installDir], { timeout: 60000 });
+      writePeriodicCheckMarker(updateCheckMarker);
       needsCacheUpdate = true;
       console.log('[Startup] yeaft-skills installed');
     } else {
-      console.log('[Startup] yeaft-skills found, checking for updates...');
-      // Record HEAD before pull to detect changes
-      let headBefore = '';
-      try {
-        const { stdout: h } = await execHiddenAsync('git rev-parse HEAD', { cwd: installDir, timeout: 5000 });
-        headBefore = h.trim();
-      } catch { /* ignore */ }
-      const { stdout } = await execHiddenAsync('git pull --ff-only', {
-        cwd: installDir,
-        timeout: 30000
-      });
-      if (stdout.includes('Already up to date')) {
-        console.log('[Startup] yeaft-skills is up to date');
-      } else {
-        needsCacheUpdate = true;
-        console.log('[Startup] yeaft-skills updated');
-      }
-      // Double-check: compare HEAD after pull
-      if (!needsCacheUpdate && headBefore) {
+      if (shouldRunPeriodicCheck(updateCheckMarker)) {
+        console.log('[Startup] yeaft-skills found, checking for updates...');
+        // Record HEAD before pull to detect changes
+        let headBefore = '';
         try {
-          const { stdout: h2 } = await execHiddenAsync('git rev-parse HEAD', { cwd: installDir, timeout: 5000 });
-          if (h2.trim() !== headBefore) needsCacheUpdate = true;
+          const { stdout: h } = await execHiddenFileAsync('git', ['rev-parse', 'HEAD'], { cwd: installDir, timeout: 5000 });
+          headBefore = h.trim();
         } catch { /* ignore */ }
+        try {
+          const { stdout } = await execHiddenFileAsync('git', ['pull', '--ff-only'], {
+            cwd: installDir,
+            timeout: 30000
+          });
+          if (stdout.includes('Already up to date')) {
+            console.log('[Startup] yeaft-skills is up to date');
+          } else {
+            needsCacheUpdate = true;
+            console.log('[Startup] yeaft-skills updated');
+          }
+          writePeriodicCheckMarker(updateCheckMarker);
+        } catch (e) {
+          writePeriodicCheckMarker(updateCheckMarker);
+          console.warn('[Startup] yeaft-skills update check failed; using cached checkout:', e.message);
+        }
+        // Double-check: compare HEAD after pull
+        if (!needsCacheUpdate && headBefore) {
+          try {
+            const { stdout: h2 } = await execHiddenFileAsync('git', ['rev-parse', 'HEAD'], { cwd: installDir, timeout: 5000 });
+            if (h2.trim() !== headBefore) needsCacheUpdate = true;
+          } catch { /* ignore */ }
+        }
+      } else {
+        console.log('[Startup] yeaft-skills update check skipped; recently checked');
       }
     }
     // Get current commit SHA for installed_plugins.json
     try {
-      const { stdout: sha } = await execHiddenAsync('git rev-parse HEAD', { cwd: installDir, timeout: 5000 });
+      const { stdout: sha } = await execHiddenFileAsync('git', ['rev-parse', 'HEAD'], { cwd: installDir, timeout: 5000 });
       gitSha = sha.trim();
     } catch { /* non-critical */ }
 

package/local-runtime/agent/container-manager.js

@@ -17,6 +17,23 @@ export class ContainerAgentError extends Error {
   }
 }
 
+function isCgroupWritePermissionError(error) {
+  const code = String(error?.code || '').toUpperCase();
+  const message = String(error?.message || '');
+  return ['EACCES', 'EPERM', 'EROFS'].includes(code)
+    || /EACCES|EPERM|EROFS|permission denied|operation not permitted|read-only file system/i.test(message);
+}
+
+function wrapCgroupWriteError(error, slicePath) {
+  if (!isCgroupWritePermissionError(error)) return error;
+  return new ContainerAgentError(
+    'CONTAINER_AGENT_CGROUP_PERMISSION_DENIED',
+    `Cannot write cgroup v2 slice at ${slicePath} (${error.code || 'permission denied'}). ` +
+      'The host cgroup hierarchy is not writable or delegated to this process; ' +
+      'run setup-limits as host root with a read-write cgroup v2 mount, or pass --no-slice to install without shared resource limits',
+  );
+}
+
 export function normalizeContainerAgentName(name) {
   const value = String(name || '').trim();
   if (!NAME_PATTERN.test(value)) throw new ContainerAgentError('CONTAINER_AGENT_INVALID_NAME');
@@ -276,8 +293,9 @@ export async function ensureAgentSlice({
   try {
     const text = await fsImpl.readFile('/sys/fs/cgroup/cgroup.controllers', 'utf8');
     controllers = String(text || '').trim().split(/\s+/).filter(Boolean);
-  } catch {
-    // Treat missing controller list as "no controllers writable".
+  } catch (error) {
+    if (isCgroupWritePermissionError(error)) throw wrapCgroupWriteError(error, '/sys/fs/cgroup');
+    // Treat a missing controller list as "no controllers writable".
   }
   const wanted = ['cpu', 'memory', 'pids'].filter(name => controllers.includes(name));
   if (wanted.length === 0) {
@@ -286,35 +304,39 @@ export async function ensureAgentSlice({
       'cgroup v2 controllers (cpu/memory/pids) are unavailable; setup-limits requires a host running cgroup v2 and root access to /sys/fs/cgroup',
     );
   }
-  await fsImpl.mkdir(slicePath, { recursive: true, mode: 0o755 });
-  await fsImpl.writeFile(
-    `${slicePath}/cgroup.subtree_control`,
-    wanted.map(name => `+${name}`).join(' '),
-    'utf8',
-  );
-  const detected = resources || await detectHostResources({ readFileImpl: fsImpl.readFile });
-  const limits = buildSliceLimits({ cpuPercent, memoryPercent, pidsLimit }, detected);
-  if (wanted.includes('cpu') && limits.cpuQuotaUs > 0) {
-    await fsImpl.writeFile(`${slicePath}/cpu.max`, `${limits.cpuQuotaUs} ${limits.cpuPeriodUs}`, 'utf8');
-  }
-  if (wanted.includes('memory') && limits.memoryMaxBytes > 0) {
-    await fsImpl.writeFile(`${slicePath}/memory.max`, String(limits.memoryMaxBytes), 'utf8');
-    // No swap escape hatch: the 70% RAM hard cap is the whole memory budget.
-    await fsImpl.writeFile(`${slicePath}/memory.swap.max`, '0', 'utf8');
-  }
-  if (wanted.includes('pids') && limits.pidsMax > 0) {
-    await fsImpl.writeFile(`${slicePath}/pids.max`, String(limits.pidsMax), 'utf8');
+  try {
+    await fsImpl.mkdir(slicePath, { recursive: true, mode: 0o755 });
+    await fsImpl.writeFile(
+      `${slicePath}/cgroup.subtree_control`,
+      wanted.map(name => `+${name}`).join(' '),
+      'utf8',
+    );
+    const detected = resources || await detectHostResources({ readFileImpl: fsImpl.readFile });
+    const limits = buildSliceLimits({ cpuPercent, memoryPercent, pidsLimit }, detected);
+    if (wanted.includes('cpu') && limits.cpuQuotaUs > 0) {
+      await fsImpl.writeFile(`${slicePath}/cpu.max`, `${limits.cpuQuotaUs} ${limits.cpuPeriodUs}`, 'utf8');
+    }
+    if (wanted.includes('memory') && limits.memoryMaxBytes > 0) {
+      await fsImpl.writeFile(`${slicePath}/memory.max`, String(limits.memoryMaxBytes), 'utf8');
+      // No swap escape hatch: the 70% RAM hard cap is the whole memory budget.
+      await fsImpl.writeFile(`${slicePath}/memory.swap.max`, '0', 'utf8');
+    }
+    if (wanted.includes('pids') && limits.pidsMax > 0) {
+      await fsImpl.writeFile(`${slicePath}/pids.max`, String(limits.pidsMax), 'utf8');
+    }
+    const marker = {
+      slice,
+      cpuQuotaUs: limits.cpuQuotaUs,
+      cpuPeriodUs: limits.cpuPeriodUs,
+      memoryMaxBytes: limits.memoryMaxBytes,
+      pidsMax: limits.pidsMax,
+      updatedAt: new Date().toISOString(),
+    };
+    await fsImpl.writeFile(`${slicePath}/${SLICE_READY_MARKER}`, JSON.stringify(marker, null, 2), 'utf8');
+    return { slice, limits, controllers: wanted };
+  } catch (error) {
+    throw wrapCgroupWriteError(error, slicePath);
   }
-  const marker = {
-    slice,
-    cpuQuotaUs: limits.cpuQuotaUs,
-    cpuPeriodUs: limits.cpuPeriodUs,
-    memoryMaxBytes: limits.memoryMaxBytes,
-    pidsMax: limits.pidsMax,
-    updatedAt: new Date().toISOString(),
-  };
-  await fsImpl.writeFile(`${slicePath}/${SLICE_READY_MARKER}`, JSON.stringify(marker, null, 2), 'utf8');
-  return { slice, limits, controllers: wanted };
 }
 
 /**

package/local-runtime/server/config.js

@@ -141,9 +141,10 @@ export const CONFIG = {
     image: process.env.SANDBOX_AGENT_IMAGE || 'ghcr.io/yeaft/yeaft-web-code-agent-agent:dev',
     serverUrl: process.env.SANDBOX_SERVER_URL || '',
     stateDir: process.env.SANDBOX_STATE_DIR || join(homedir(), '.yeaft', 'container-agents'),
-    // Shared cgroup slice (created by `yeaft-agent container setup-limits` on the
-    // Host) that caps the sum of all sandbox containers' CPU/memory usage. Empty
-    // means no cgroup-parent is passed and sandbox containers are unprotected.
+    // Shared cgroup slice (created by the absolute Node/CLI command printed by
+    // `yeaft-agent container setup-limits` on the Host) that caps the sum of all
+    // sandbox containers' CPU/memory usage. Empty means no cgroup-parent is
+    // passed and sandbox containers are unprotected.
     cgroupParent: process.env.SANDBOX_CGROUP_PARENT || ''
   },
 

package/local-runtime/server/handlers/agent-output.js

@@ -882,6 +882,23 @@ export async function handleAgentOutput(agentId, agent, msg) {
       break;
     }
 
+    case 'yeaft_managed_skill_result': {
+      const targetClient = msg._requestClientId ? webClients.get(msg._requestClientId) : null;
+      if (targetClient?.authenticated && (CONFIG.skipAuth || targetClient.userId === agent.ownerId)) {
+        await sendToWebClient(targetClient, {
+          type: 'yeaft_managed_skill_result',
+          agentId,
+          requestId: msg.requestId || null,
+          scope: msg.scope || null,
+          sessionId: msg.sessionId || null,
+          result: msg.result || null,
+          catalog: msg.catalog || { tools: [], skills: [], skillSources: [], mcpServers: [] },
+          error: msg.error || null,
+        });
+      }
+      break;
+    }
+
     case 'yeaft_tool_stats':
       // 2026-05-13: relay tool-call counters from the agent to the web
       // client that requested them. Whitelist `snapshot`/`registered`/

package/local-runtime/server/handlers/client-conversation.js

@@ -31,6 +31,10 @@ import {
   agentSupportsYeaftPlugins,
   YEAFT_PLUGINS_UNSUPPORTED_ERROR,
 } from '../yeaft-plugin-capability.js';
+import {
+  agentSupportsYeaftManagedSkills,
+  YEAFT_MANAGED_SKILLS_UNSUPPORTED_ERROR,
+} from '../yeaft-managed-skill-capability.js';
 
 
 function isRetiredCollabSessionId(id) {
@@ -56,6 +60,14 @@ function emptyYeaftPluginCatalog(error = null) {
   };
 }
 
+function emptyYeaftManagedSkillResult(error = null) {
+  return {
+    type: 'yeaft_managed_skill_result',
+    catalog: { tools: [], skills: [], skillSources: [], mcpServers: [] },
+    ...(error ? { error } : {}),
+  };
+}
+
 async function sendVpSnapshotError(client, msg, error) {
   await sendToWebClient(client, {
     type: 'yeaft_output',
@@ -1650,6 +1662,15 @@ export async function handleClientConversation(clientId, client, msg, checkAgent
           });
           return true;
         }
+        if (relayType === 'yeaft_managed_skill'
+            && !agentSupportsYeaftManagedSkills(agents.get(relayAgentId))) {
+          await sendToWebClient(client, {
+            ...emptyYeaftManagedSkillResult(YEAFT_MANAGED_SKILLS_UNSUPPORTED_ERROR),
+            agentId: relayAgentId,
+            requestId: msg.requestId || null,
+          });
+          return true;
+        }
         const relayAgent = agents.get(relayAgentId);
         if (!relayAgent || relayAgent.ws?.readyState !== 1) {
           if (relayType === 'yeaft_fetch_tool_stats') {
@@ -1676,7 +1697,9 @@ export async function handleClientConversation(clientId, client, msg, checkAgent
         // Direct catalog replies are request-scoped. Carry the browser client
         // identity through the Agent so another owner tab cannot accidentally
         // consume a response for this picker request.
-        if (relayType === 'yeaft_plugin_catalog') rest._requestClientId = clientId;
+        if (relayType === 'yeaft_plugin_catalog' || relayType === 'yeaft_managed_skill') {
+          rest._requestClientId = clientId;
+        }
         if (rest.type === 'yeaft_session_send' || rest.type === 'yeaft_session_chat') {
           trackUserTurn(client.userId, Buffer.byteLength(JSON.stringify(msg)));
           const sessionId = typeof rest.sessionId === 'string' ? rest.sessionId.trim() : '';

package/local-runtime/server/yeaft-managed-skill-capability.js

@@ -0,0 +1,11 @@
+import { YEAFT_PLUGINS_CAPABILITY } from './yeaft-plugin-capability.js';
+
+export const YEAFT_MANAGED_SKILLS_CAPABILITY = 'yeaft_managed_skills';
+export const YEAFT_MANAGED_SKILLS_UNSUPPORTED_ERROR = 'The selected Agent does not support Skill management; upgrade and restart the Agent';
+
+export function agentSupportsYeaftManagedSkills(agent) {
+  if (agent?.capabilityMetadataProvided !== true) return false;
+  const capabilities = Array.isArray(agent.capabilities) ? agent.capabilities : [];
+  return capabilities.includes(YEAFT_PLUGINS_CAPABILITY)
+    && capabilities.includes(YEAFT_MANAGED_SKILLS_CAPABILITY);
+}

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.443"}
+{"version":"1.0.445"}