tavern-harness 0.1.27 → 0.1.29

package/CHANGELOG.md

@@ -3,6 +3,46 @@
 > 本文件由 `scripts/changelog.mjs` 从 `changelog/v*.md` 生成，请勿手动编辑。
 > 版本对比链接见文末；源文件位于仓库 `changelog/` 目录。
 
+## [0.1.29] - 2026-10-28
+
+### 中文
+
+#### 改进
+
+- 消息编辑器中编辑用户消息后，主按钮由「保存并重新生成」改为「保存并发送」，文案与实际行为一致，操作按钮的文字对齐也更整齐
+- 普通会话的工作区不再包含只读的 `public` 公共目录：文件管理器和工具只能看到当前会话自己的文件，列表中所有内容都可以删除；旧会话残留的 `public` 链接会在下次使用该会话时自动清理
+
+#### 内部
+
+- 将内置 `file_display` 工具移到文件读写工具之后，让模型更早看到它
+- 酒馆手册补充技能编写建议：HTML 技能应把数据与页面分离，更新数据时只写数据文件
+
+### English
+
+#### Changed
+
+- In the message editor, the user-message action is now labeled "Save & send" instead of "Save & regenerate", matching what it actually does; action buttons are also aligned more neatly
+- Regular sessions no longer expose a read-only `public` directory in their workspace: the file manager and tools see only the session's own files, and everything listed can be deleted. Leftover `public` links are removed the next time the session is used
+
+#### Internal
+
+- Moved the built-in `file_display` tool right after the file read/write tools so models notice it earlier
+- Added skill authoring guidance to the tavern handbook: HTML skills should separate data from presentation and only rewrite the data file on updates
+
+## [0.1.28] - 2026-10-28
+
+### 中文
+
+#### 修复
+
+- 修复沙盒里打开的 HTML 预览加载不了图片、样式和字体等文件的问题：预览页面引用的工作区资源现在可以正常读取，生成报告或小工具时不用再把资源全部塞进单个 HTML
+
+### English
+
+#### Fixed
+
+- Fixed HTML previews in the sandboxed viewer failing to load images, stylesheets, and fonts from the workspace; generated reports and small tools can now reference separate asset files instead of inlining everything into one HTML file
+
 ## [0.1.27] - 2026-10-28
 
 ### 中文
@@ -786,6 +826,8 @@
 - Vite + React + Zustand + Dexie stack with browser-side local persistence
 
 <!-- 链接定义 -->
+[0.1.29]: https://github.com/Rannichan/Tavern-Harness/compare/v0.1.28...v0.1.29
+[0.1.28]: https://github.com/Rannichan/Tavern-Harness/compare/v0.1.27...v0.1.28
 [0.1.27]: https://github.com/Rannichan/Tavern-Harness/compare/v0.1.26...v0.1.27
 [0.1.26]: https://github.com/Rannichan/Tavern-Harness/compare/v0.1.25...v0.1.26
 [0.1.25]: https://github.com/Rannichan/Tavern-Harness/compare/v0.1.24...v0.1.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tavern-harness",
-  "version": "0.1.27",
+  "version": "0.1.29",
   "description": "Tavern Harness — 酒馆模式下的本地 AI Agent 助手（MyAgent-Android 的 Web 复刻）",
   "private": false,
   "type": "module",

package/sandbox-server.mjs

@@ -490,18 +490,18 @@ function resolveSessionBase(session) {
   return join(RESOLVED_WORKSPACE_ROOT, raw);
 }
 
-/** 创建会话目录，并为普通会话提供固定的只读公共目录入口。 */
+/** 创建会话目录；普通会话不暴露公共工作区。 */
 function ensureSessionBase(base) {
   mkdirSync(PUBLIC_WORKSPACE, { recursive: true });
   mkdirSync(base, { recursive: true });
   if (base === PUBLIC_WORKSPACE) return;
-  const publicLink = join(base, 'public');
-  if (existsSync(publicLink)) {
-    if (!lstatSync(publicLink).isSymbolicLink() || realpathSync(publicLink) !== realpathSync(PUBLIC_WORKSPACE)) {
-      throw new Error('The session public entry is not a valid link to the public workspace');
-    }
-  } else {
-    symlinkSync(IS_WIN ? PUBLIC_WORKSPACE : '../public', publicLink, IS_WIN ? 'junction' : 'dir');
+  const legacyPublicLink = join(base, 'public');
+  if (
+    existsSync(legacyPublicLink)
+    && lstatSync(legacyPublicLink).isSymbolicLink()
+    && realpathSync(legacyPublicLink) === realpathSync(PUBLIC_WORKSPACE)
+  ) {
+    rmSync(legacyPublicLink);
   }
 }
 
@@ -596,11 +596,10 @@ const server = createServer(async (req, res) => {
       const payload = JSON.parse(body);
       const base = resolveSessionBase(payload?.session);
       const rel = sanitizeWorkspaceRelativePath(payload?.path);
-      const readingPublicLink = base !== PUBLIC_WORKSPACE && (rel === 'public' || rel.startsWith('public/'));
-      if (!readingPublicLink && resolvesOutsideSession(rel, base)) throw new Error('Path is outside the workspace');
+      if (resolvesOutsideSession(rel, base)) throw new Error('Path is outside the workspace');
       const file = resolve(base, rel);
       if (!existsSync(file) || !lstatSync(file).isFile()) throw new Error('File not found');
-      assertInside(readingPublicLink ? PUBLIC_WORKSPACE : base, realpathSync(file));
+      assertInside(base, realpathSync(file));
       const content = await readFilePromise(file);
       if (content.length > 8 * 1024 * 1024) throw new Error('Preview file exceeds the 8MB limit');
       res.end(JSON.stringify({ ok: true, content: content.toString('base64') }));
@@ -635,8 +634,7 @@ const server = createServer(async (req, res) => {
         const rawPath = String(payload?.path ?? '').replace(/\\/g, '/').trim();
         if (!rawPath) throw new Error('Invalid path');
         const rel = sanitizeWorkspaceRelativePath(rawPath);
-        const readingPublicLink = base !== PUBLIC_WORKSPACE && (rel === 'public' || rel.startsWith('public/'));
-        if (!readingPublicLink && resolvesOutsideSession(rel, base)) {
+        if (resolvesOutsideSession(rel, base)) {
           throw new Error('Path is outside the workspace');
         }
         const fp = resolve(base, rel);
@@ -649,9 +647,6 @@ const server = createServer(async (req, res) => {
         const content = String(payload?.content ?? '');
         ensureSessionBase(base);
         const rel = sanitizeWorkspaceRelativePath(rawPath);
-        if (base !== PUBLIC_WORKSPACE && (rel === 'public' || rel.startsWith('public/'))) {
-          throw new Error('The public directory is read-only');
-        }
         if (resolvesOutsideSession(rel, base)) {
           throw new Error('Path is outside the workspace');
         }
@@ -674,18 +669,14 @@ const server = createServer(async (req, res) => {
         const rawPath = String(payload?.path ?? '').replace(/\\/g, '/').trim();
         if (!rawPath) throw new Error('Invalid path');
         const rel = sanitizeWorkspaceRelativePath(rawPath);
-        const deletingPublicLink = base !== PUBLIC_WORKSPACE && (rel === 'public' || rel.startsWith('public/'));
-        if (!deletingPublicLink && resolvesOutsideSession(rel, base)) {
+        if (resolvesOutsideSession(rel, base)) {
           throw new Error('Path is outside the workspace');
         }
         const fp = resolve(base, rel);
         if (!existsSync(fp)) throw new Error('File or directory not found');
         const entry = lstatSync(fp);
-        if (entry.isSymbolicLink() && rel === 'public') {
-          throw new Error('The public workspace link cannot be deleted');
-        }
         if (!entry.isFile() && !entry.isDirectory()) throw new Error('Path is not a file or directory');
-        if (!deletingPublicLink) assertInside(base, realpathSync(fp));
+        assertInside(base, realpathSync(fp));
         if (entry.isDirectory()) {
           rmSync(fp, { recursive: true, force: false });
         } else {
@@ -869,14 +860,6 @@ function extractPathCandidate(value) {
   return candidate || null;
 }
 
-function isPublicLinkReadPath(value, sessionBase) {
-  if (sessionBase === PUBLIC_WORKSPACE) return false;
-  const candidate = extractPathCandidate(value);
-  if (!candidate) return false;
-  const normalized = candidate.replace(/\\/g, '/').trim();
-  return normalized === 'public' || normalized.startsWith('public/');
-}
-
 /** Only the platform null device may be used outside the workspace, and only as a redirect sink. */
 function isNullDeviceSink(value) {
   const candidate = extractPathCandidate(value);
@@ -1097,29 +1080,23 @@ function validateScript(script, sessionBase) {
       const commandWriteTargets = shellWriteTargets(cmd, args);
       const redirectWriteTargets = [...(output ? [output.path] : []), ...(errorOutput ? [errorOutput.path] : [])];
       if (
-        commandWriteTargets.some((arg) => resolvesOutsideSession(arg, sessionBase) || isPublicLinkReadPath(arg, sessionBase))
-        || redirectWriteTargets.some((arg) => (
-          !isNullDeviceSink(arg) && (resolvesOutsideSession(arg, sessionBase) || isPublicLinkReadPath(arg, sessionBase))
-        ))
+        commandWriteTargets.some((arg) => resolvesOutsideSession(arg, sessionBase))
+        || redirectWriteTargets.some((arg) => !isNullDeviceSink(arg) && resolvesOutsideSession(arg, sessionBase))
       ) {
         hasExternalWrite = true;
       }
       const readTargets = [...shellReadTargets(cmd, args), ...(input ? [input] : [])];
-      if (readTargets.some((arg) => (
-        !isPublicLinkReadPath(arg, sessionBase) && resolvesOutsideSession(arg, sessionBase)
-      ))) {
+      if (readTargets.some((arg) => resolvesOutsideSession(arg, sessionBase))) {
         hasExternalRead = true;
       }
-      if ([cmd, ...args].some((arg) => (
-        !isPublicLinkReadPath(arg, sessionBase) && resolvesOutsideSession(arg, sessionBase)
-      ))) {
+      if ([cmd, ...args].some((arg) => resolvesOutsideSession(arg, sessionBase))) {
         hasExternalPath = true;
       }
     }
   }
-  if (hasExternalRead) return 'Script read paths must stay within the current session workspace; public files may only be read through the public link';
-  if (hasExternalWrite) return 'Script write paths must stay within the current session workspace and cannot use the public symlink';
-  if (hasExternalPath) return 'Script paths must stay within the current session workspace; public files may only be read through the public link';
+  if (hasExternalRead) return 'Script read paths must stay within the current session workspace';
+  if (hasExternalWrite) return 'Script write paths must stay within the current session workspace';
+  if (hasExternalPath) return 'Script paths must stay within the current session workspace';
   if (hasNonAllowlistedCommand) return { needConfirmReason: 'non_allowlisted' };
   return null;
 }
@@ -1294,8 +1271,6 @@ async function walkWorkspace(dir, prefix, out) {
     try {
       if (ent.isDirectory()) {
         await walkWorkspace(full, rel, out);
-      } else if (ent.isSymbolicLink() && rel === 'public' && realpathSync(full) === realpathSync(PUBLIC_WORKSPACE)) {
-        await walkWorkspace(full, rel, out);
       } else if (ent.isFile()) {
         out.push(rel);
       }

package/src/assets/tavern-handbook.md

@@ -37,3 +37,6 @@
 1. **Create the minimum number of skills**: Assess responsibilities against the user's needs. If one skill can accomplish the goal, do not split it into or add multiple redundant skills.
 2. **Document skill usage and workflows clearly**: In both World Info and the character persona, clearly record each skill's trigger conditions and usage steps so the character can invoke it as required.
 3. **Verify character skill equipment**: After creating or configuring a game, confirm that each relevant character has every skill required by the workflow. In particular, verify that relevant built-in skills are enabled.
+
+### Skill Creation
+1. **Separate data from presentation in HTML-based skills**: HTML is generally generated once as a static page. When data needs to be updated, the skill should write only the data file, while the page reads that data at runtime.

package/src/components/WorkspaceFileManagerModal.tsx

@@ -10,7 +10,7 @@ import { useStore } from '../store/store';
 //  - 会话头部的工作目录标签点击打开
 //  - 只展示当前会话专属磁盘工作区（sandbox_workspace/）
 //  - 目录点击进入、支持返回上级与面包屑；文件点击复用 file_display 弹窗预览
-//  - 可在确认后删除文件或目录（public 软链接除外）
+//  - 可在确认后删除文件或目录
 // ============================================================
 
 function extOf(path: string): string {
@@ -215,10 +215,8 @@ export function WorkspaceFileManagerModal({ sessionId, onClose }: { sessionId: n
                 <span className="ws-fm-name">..</span>
               </div>
             )}
-            {visible.map((n) => {
-              const isPublicLink = n.isDir && n.path === 'public/';
-              return (
-                <div
+            {visible.map((n) => (
+              <div
                   key={n.path}
                   className="ws-fm-row"
                   role="button"
@@ -258,22 +256,19 @@ export function WorkspaceFileManagerModal({ sessionId, onClose }: { sessionId: n
                         aria-label={t('common.download')}
                         disabled
                       ><span aria-hidden="true">↓</span></button>
-                      {!isPublicLink && (
-                        <button
-                          className="icon-btn ws-fm-delete"
-                          title={t('common.delete')}
-                          aria-label={t('common.delete')}
-                          onClick={(event) => {
-                            event.stopPropagation();
-                            setPendingDelete(n);
-                          }}
-                        ><Icon name="trash" size={13} /></button>
-                      )}
+                      <button
+                        className="icon-btn ws-fm-delete"
+                        title={t('common.delete')}
+                        aria-label={t('common.delete')}
+                        onClick={(event) => {
+                          event.stopPropagation();
+                          setPendingDelete(n);
+                        }}
+                      ><Icon name="trash" size={13} /></button>
                     </span>
                   )}
-                </div>
-              );
-            })}
+              </div>
+            ))}
             {visible.length === 0 && <div className="ws-fm-empty">{t('header.fileManagerEmpty')}</div>}
           </div>
         )}

package/src/core/i18n.ts

@@ -131,7 +131,7 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
     'chat.copyMsg': '复制消息',
     'chat.addAttachment': '添加附件',
     'chat.saveHint': '⌘/Ctrl+Enter 保存 · Esc 取消',
-    'chat.saveRegenerate': '保存并重新生成',
+    'chat.saveRegenerate': '保存并发送',
     'chat.saveOnly': '仅保存',
     'chat.toolCall': '调用工具: {name}',
     'chat.contextCompressed': '上下文已压缩',
@@ -660,7 +660,7 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
     'chat.copyMsg': '複製訊息',
     'chat.addAttachment': '新增附件',
     'chat.saveHint': '⌘/Ctrl+Enter 儲存 · Esc 取消',
-    'chat.saveRegenerate': '儲存並重新產生',
+    'chat.saveRegenerate': '儲存並傳送',
     'chat.saveOnly': '僅儲存',
     'chat.toolCall': '呼叫工具: {name}',
     'chat.contextCompressed': '上下文已壓縮',
@@ -1178,7 +1178,7 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
     'chat.copyMsg': 'Copy message',
     'chat.addAttachment': 'Add attachment',
     'chat.saveHint': '⌘/Ctrl+Enter to save · Esc to cancel',
-    'chat.saveRegenerate': 'Save & regenerate',
+    'chat.saveRegenerate': 'Save & send',
     'chat.saveOnly': 'Save only',
     'chat.toolCall': 'Tool: {name}',
     'chat.contextCompressed': 'Context compressed',

package/src/core/toolDefinitions.ts

@@ -12,6 +12,7 @@ export const BUILTIN_TOOL_NAMES = [
   'file_read',
   'file_write',
   'file_edit',
+  'file_display',
   'create_skill',
   'update_skill',
   'delete_skill',
@@ -19,7 +20,6 @@ export const BUILTIN_TOOL_NAMES = [
   'get_character_info',
   'get_lorebook_info',
   'get_skill_info',
-  'file_display',
   'create_character',
   'update_character',
   'delete_character',
@@ -89,7 +89,7 @@ export const BUILTIN_TOOLS: ChatCompletionTool[] = [
       properties: {
         path: {
           type: 'string',
-          description: 'Relative path inside the current conversation workspace. Absolute paths and parent traversal are rejected. public link is read-only in normal sessions.',
+          description: 'Relative path inside the current conversation workspace. Absolute paths and parent traversal are rejected.',
         },
         content: {
           type: 'string',
@@ -112,7 +112,7 @@ export const BUILTIN_TOOLS: ChatCompletionTool[] = [
       properties: {
         path: {
           type: 'string',
-          description: 'Relative path inside the current conversation workspace. Absolute paths and parent traversal are rejected. The file must exist. The public link is read-only in normal sessions.',
+          description: 'Relative path inside the current conversation workspace. Absolute paths and parent traversal are rejected. The file must exist.',
         },
         old_text: {
           type: 'string',
@@ -135,6 +135,25 @@ export const BUILTIN_TOOLS: ChatCompletionTool[] = [
       additionalProperties: false,
     }
   ),
+  fn(
+    'file_display',
+    'Display any file from the current workspace to the user in a popup. Useful for inspecting existing files, reviewing generated output (reports, dashboards, images, HTML pages), or browsing the workspace content. Only shows the file in the UI — it does NOT return the file content; use file_read to actually read the content.',
+    {
+      type: 'object',
+      properties: {
+        path: {
+          type: 'string',
+          description: 'Relative path inside the current workspace. Must exist.',
+        },
+        title: {
+          type: 'string',
+          description: 'Optional popup title. Defaults to the file name.',
+        },
+      },
+      required: ['path'],
+      additionalProperties: false,
+    }
+  ),
   fn(
     'create_skill',
     'Create a new generated skill (tool) usable by characters. The skill is defined by a declarative execution schema. New skill is NOT enabled for any character until you enable it via update_character.',
@@ -244,25 +263,6 @@ export const BUILTIN_TOOLS: ChatCompletionTool[] = [
       additionalProperties: false,
     }
   ),
-  fn(
-    'file_display',
-    'Display any file from the current workspace to the user in a popup. Useful for inspecting existing files, reviewing generated output (reports, dashboards, images, HTML pages), or browsing the workspace content. Only shows the file in the UI — it does NOT return the file content; use file_read to actually read the content.',
-    {
-      type: 'object',
-      properties: {
-        path: {
-          type: 'string',
-          description: 'Relative path inside the current workspace. Must exist.',
-        },
-        title: {
-          type: 'string',
-          description: 'Optional popup title. Defaults to the file name.',
-        },
-      },
-      required: ['path'],
-      additionalProperties: false,
-    }
-  ),
   fn(
     'create_character',
     'Create a new character (NPC) in the tavern. The character becomes available for NPC or group sessions.',

package/src/generated/changelog.json

@@ -1,7 +1,71 @@
 {
-  "latest": "0.1.27",
+  "latest": "0.1.29",
   "repo": "https://github.com/Rannichan/Tavern-Harness",
   "entries": [
+    {
+      "version": "0.1.29",
+      "date": "2026-10-28",
+      "breaking": false,
+      "compare": "v0.1.28...v0.1.29",
+      "groups": {
+        "zh-CN": [
+          {
+            "kind": "changed",
+            "items": [
+              "消息编辑器中编辑用户消息后，主按钮由「保存并重新生成」改为「保存并发送」，文案与实际行为一致，操作按钮的文字对齐也更整齐",
+              "普通会话的工作区不再包含只读的 `public` 公共目录：文件管理器和工具只能看到当前会话自己的文件，列表中所有内容都可以删除；旧会话残留的 `public` 链接会在下次使用该会话时自动清理"
+            ]
+          },
+          {
+            "kind": "internal",
+            "items": [
+              "将内置 `file_display` 工具移到文件读写工具之后，让模型更早看到它",
+              "酒馆手册补充技能编写建议：HTML 技能应把数据与页面分离，更新数据时只写数据文件"
+            ]
+          }
+        ],
+        "en": [
+          {
+            "kind": "changed",
+            "items": [
+              "In the message editor, the user-message action is now labeled \"Save & send\" instead of \"Save & regenerate\", matching what it actually does; action buttons are also aligned more neatly",
+              "Regular sessions no longer expose a read-only `public` directory in their workspace: the file manager and tools see only the session's own files, and everything listed can be deleted. Leftover `public` links are removed the next time the session is used"
+            ]
+          },
+          {
+            "kind": "internal",
+            "items": [
+              "Moved the built-in `file_display` tool right after the file read/write tools so models notice it earlier",
+              "Added skill authoring guidance to the tavern handbook: HTML skills should separate data from presentation and only rewrite the data file on updates"
+            ]
+          }
+        ]
+      }
+    },
+    {
+      "version": "0.1.28",
+      "date": "2026-10-28",
+      "breaking": false,
+      "compare": "v0.1.27...v0.1.28",
+      "groups": {
+        "zh-CN": [
+          {
+            "kind": "fixed",
+            "items": [
+              "修复沙盒里打开的 HTML 预览加载不了图片、样式和字体等文件的问题：预览页面引用的工作区资源现在可以正常读取，生成报告或小工具时不用再把资源全部塞进单个 HTML"
+            ]
+          }
+        ],
+        "en": [
+          {
+            "kind": "fixed",
+            "items": [
+              "Fixed HTML previews in the sandboxed viewer failing to load images, stylesheets, and fonts from the workspace; generated reports and small tools can now reference separate asset files instead of inlining everything into one HTML file"
+            ]
+          }
+        ]
+      }
+    },
     {
       "version": "0.1.27",
       "date": "2026-10-28",

package/src/theme/chat.css

@@ -155,6 +155,9 @@
 .message-editor-actions {
   align-items: center;
 }
+.message-editor-actions .btn {
+  line-height: var(--typography-body-line-height);
+}
 .message-editor-attachment {
   margin-right: auto;
 }

package/vite.config.ts

@@ -324,6 +324,7 @@ function workspacePreviewPlugin(): Plugin {
         res.writeHead(200, {
           'Content-Type': previewMimeType(path),
           'Cache-Control': 'no-store',
+          'Access-Control-Allow-Origin': '*',
           'X-Content-Type-Options': 'nosniff',
         });
         res.end(content);