tavern-harness 0.1.9 → 0.1.10

package/README.md

@@ -33,6 +33,7 @@ The first run downloads the package, starts the local service, and opens your br
 ```bash
 npx tavern-harness --no-open
 npx tavern-harness --port 5273
+npx tavern-harness --workspace /absolute/path/to/workspace
 ```
 
 ### Option 2: Global Installation (Recommended for Regular Use)
@@ -73,6 +74,10 @@ After starting the app, open **Settings → Model Service Provider**:
 2. **Test the connection**: the app fetches the model list automatically. If the target service does not expose CORS headers, requests are forwarded through the built-in same-origin proxy for private-network or LAN addresses. On success, the Base URL is rewritten to its proxy form and saved.
 3. **Select a model**: click the model name at the top of the chat page, then return to the conversation and start chatting.
 
+### Automatic Tool Approval (YOLO Mode)
+
+Enable **Settings → Tool execution → YOLO mode** to automatically approve tool changes and Shell commands during conversations. It is off by default, is saved locally, and can be disabled at any time. Only enable it for characters and skills you trust. Agent execution limits still require manual continuation.
+
 ### Data Privacy
 
 - **All data is stored in browser IndexedDB**: conversations, character cards, lorebooks, skills, statistics, and API keys are not uploaded to any server.

package/README.zh.md

@@ -33,6 +33,7 @@ npx tavern-harness
 ```bash
 npx tavern-harness --no-open
 npx tavern-harness --port 5273
+npx tavern-harness --workspace /absolute/path/to/workspace
 ```
 
 
@@ -74,6 +75,10 @@ npm run dev      # 开发服务器默认端口 5173，被占用时自动顺延
 2. **测试连接**：自动拉取模型列表。若目标服务未开 CORS 头，会自动经内置同源代理转发（仅限内网 / 局域网地址），成功后 Base URL 自动改写为代理形式保存
 3. **选模型**：聊天页顶部点击模型名即可，回到对话开聊！
 
+### 自动审批工具（YOLO 模式）
+
+在「**设置 → 工具执行 → YOLO 模式**」开启后，对话中的工具修改和 Shell 执行会自动批准，无需逐次确认。默认关闭，设置保存在本地，可随时关闭。仅在信任角色和技能时开启；Agent 执行限额仍需手动确认继续。
+
 ### 数据隐私须知
 
 - **全部数据存在浏览器 IndexedDB 里**：会话、角色卡、世界书、技能、统计、API Key，均**不上传任何服务器**。

package/bin/cli.js

@@ -5,6 +5,7 @@
 //   tavern-harness --no-open   只启动，不打开浏览器
 //   tavern-harness --port 5273 指定端口（5173 被占用时 vite 会自动顺延，
 //                              会打开顺延后的实际端口）
+//   tavern-harness --workspace /path  指定生成技能文件工作区
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
 import { createServer } from 'vite';
@@ -17,15 +18,19 @@ const configFile = join(root, 'vite.config.ts'); // 复用现有配置（cors
 const args = process.argv.slice(2);
 let open = true; // 默认自动打开浏览器
 let port;
+let workspace;
 for (let i = 0; i < args.length; i++) {
   const a = args[i];
   if (a === '--no-open') open = false;
   else if (a === '--open') open = true;
   else if (a === '--port') port = Number(args[++i]);
   else if (a.startsWith('--port=')) port = Number(a.slice('--port='.length));
+  else if (a === '--workspace') workspace = args[++i];
+  else if (a.startsWith('--workspace=')) workspace = a.slice('--workspace='.length);
 }
 const serverOptions = { open };
 if (Number.isInteger(port) && port > 0 && port < 65536) serverOptions.port = port;
+if (workspace) process.env.TAVERN_HARNESS_WORKSPACE = workspace;
 
 try {
   // inlineConfig 与 vite.config.ts 合并（inline 优先），open 会覆盖配置文件里的 open:false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tavern-harness",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Tavern Harness — 酒馆模式下的本地 AI Agent 助手（MyAgent-Android 的 Web 复刻）",
   "private": false,
   "type": "module",
@@ -24,6 +24,8 @@
     "start": "vite",
     "dev": "vite",
     "test:command-service": "node sandbox-server.test.mjs",
+    "test:yolo-mode": "node yolo-mode.test.mjs",
+    "test:tool-arguments": "node tool-arguments.test.mjs",
     "build": "tsc --noEmit && vite build",
     "preview": "vite preview"
   },
@@ -45,6 +47,7 @@
     "@types/katex": "^0.16.7",
     "@types/react": "^18.3.5",
     "@types/react-dom": "^18.3.0",
+    "fake-indexeddb": "^6.2.5",
     "typescript": "^5.5.4"
   }
 }

package/sandbox-server.mjs

@@ -22,10 +22,10 @@ import { createServer } from 'node:http';
 import { spawn, spawnSync } from 'node:child_process';
 import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
 import {
-  writeFileSync, existsSync, lstatSync, readlinkSync, readFile, writeFile, mkdirSync, mkdtempSync, readdir, statSync, symlinkSync, realpathSync, rmSync, unlink,
+  writeFileSync, existsSync, lstatSync, readlinkSync, readFile, writeFile, mkdirSync, mkdtempSync, readdir, statSync, symlinkSync, realpathSync, rmSync, unlink, cpSync,
 } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join, dirname, resolve, sep, delimiter } from 'node:path';
+import { tmpdir, homedir } from 'node:os';
+import { join, dirname, resolve, sep, delimiter, isAbsolute } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -299,11 +299,40 @@ function consumeApprovedConfirmation(requestId, operation, sessionBase) {
 }
 
 // ---- 真实文件工作区（generate_skill 的 file_read / file_write 落盘区） ----
-// 项目根目录下 sandbox_workspace/，仅允许读写该目录内文件（虚拟磁盘）。
-// 会话隔离：每次请求必须携带会话工作目录（session 字段，如 "session-12"），
-// 所有读写/执行都锁定在该目录内，不允许回退到共享根工作区。
-const WORKSPACE_ROOT = resolve(__dirname, 'sandbox_workspace');
-const PUBLIC_WORKSPACE = join(WORKSPACE_ROOT, 'public');
+// 默认放在用户数据目录，避免 npm 更新或重装删除用户创建的文件。
+// 可通过 TAVERN_HARNESS_WORKSPACE 指向自定义绝对路径。
+function defaultWorkspaceRoot() {
+  if (process.platform === 'darwin') return join(homedir(), 'Library', 'Application Support', 'Tavern Harness', 'sandbox_workspace');
+  if (process.platform === 'win32') return join(process.env.APPDATA || join(homedir(), 'AppData', 'Roaming'), 'Tavern Harness', 'sandbox_workspace');
+  return join(process.env.XDG_DATA_HOME || join(homedir(), '.local', 'share'), 'tavern-harness', 'sandbox_workspace');
+}
+
+function resolveWorkspaceRoot() {
+  const configured = process.env.TAVERN_HARNESS_WORKSPACE?.trim();
+  if (configured) {
+    if (!isAbsolute(configured)) throw new Error('TAVERN_HARNESS_WORKSPACE must be an absolute path');
+    return resolve(configured);
+  }
+  return defaultWorkspaceRoot();
+}
+
+const WORKSPACE_ROOT = resolveWorkspaceRoot();
+const LEGACY_WORKSPACE_ROOT = resolve(__dirname, 'sandbox_workspace');
+
+function migrateLegacyWorkspace() {
+  if (WORKSPACE_ROOT === LEGACY_WORKSPACE_ROOT || existsSync(WORKSPACE_ROOT) || !existsSync(LEGACY_WORKSPACE_ROOT)) return;
+  try {
+    mkdirSync(dirname(WORKSPACE_ROOT), { recursive: true });
+    cpSync(LEGACY_WORKSPACE_ROOT, WORKSPACE_ROOT, { recursive: true, dereference: false, errorOnExist: true });
+    console.log(`[command-service] migrated workspace to ${WORKSPACE_ROOT}`);
+  } catch (error) {
+    console.warn(`[command-service] could not migrate legacy workspace: ${error.message}`);
+  }
+}
+
+migrateLegacyWorkspace();
+const RESOLVED_WORKSPACE_ROOT = existsSync(WORKSPACE_ROOT) ? realpathSync(WORKSPACE_ROOT) : WORKSPACE_ROOT;
+const PUBLIC_WORKSPACE = join(RESOLVED_WORKSPACE_ROOT, 'public');
 const MAX_FILE_READ_CHARS = 100_000;   // 单文件读取上限（与前端虚拟工作区一致）
 const MAX_FILE_WRITE_BYTES = 400 * 1024; // 单文件写入上限 400KB
 const MAX_LIST_ENTRIES = 500;
@@ -320,7 +349,7 @@ function resolveSessionBase(session) {
   if (!raw || raw.startsWith('/') || raw === '.' || raw === '..' || !SESSION_DIR_RE.test(raw)) {
     throw new Error('A valid session workspace is required');
   }
-  return join(WORKSPACE_ROOT, raw);
+  return join(RESOLVED_WORKSPACE_ROOT, raw);
 }
 
 /** 创建会话目录，并为普通会话提供固定的只读公共目录入口。 */

package/src/components/SettingsView.tsx

@@ -50,6 +50,26 @@ export function SettingsView() {
         {/* 模型服务 Provider（置顶） */}
         <ProviderManager providers={providers} onChanged={refreshProviders} />
 
+        <div className="set-section">
+          <h3>{t('settings.toolExecution')}</h3>
+          <div className="set-row settings-tool-row">
+            <div>
+              <div className="s-label" id="yolo-mode-label">{t('settings.yoloMode')}</div>
+              <div className="s-desc" id="yolo-mode-desc">{t('settings.yoloModeDesc')}</div>
+            </div>
+            <label className="switch">
+              <input
+                type="checkbox"
+                aria-labelledby="yolo-mode-label"
+                aria-describedby="yolo-mode-desc"
+                checked={settings.yoloMode === true}
+                onChange={(e) => setSettings({ yoloMode: e.target.checked })}
+              />
+              <span className="switch-slider" />
+            </label>
+          </div>
+        </div>
+
         {/* 生成参数 */}
         <div className="set-section">
           <h3>{t('settings.genParams')}</h3>
@@ -148,42 +168,32 @@ export function SettingsView() {
           {/* 界面语言 */}
           <div className="set-section">
             <h3>{t('settings.language')}</h3>
-            <div className="field">
-              <label>{t('settings.languageLabel')}</label>
-              <select
-                className="select"
-                value={settings.language ?? ''}
-                onChange={(e) => setSettings({ language: (e.target.value || null) as AppLanguage })}
-              >
-                <option value="">{t('settings.followBrowser')}</option>
-                <option value="zh-CN">简体中文</option>
-                <option value="zh-TW">繁體中文</option>
-                <option value="en">English</option>
-              </select>
-            </div>
-            <p style={{ fontSize: 12, color: 'var(--text-faint)', margin: 0 }}>
-              {t('settings.followBrowser')}
-            </p>
+            <select
+              className="select"
+              aria-label={t('settings.languageLabel')}
+              value={settings.language ?? ''}
+              onChange={(e) => setSettings({ language: (e.target.value || null) as AppLanguage })}
+            >
+              <option value="">{t('settings.followBrowser')}</option>
+              <option value="zh-CN">简体中文</option>
+              <option value="zh-TW">繁體中文</option>
+              <option value="en">English</option>
+            </select>
           </div>
 
           {/* 主题 */}
           <div className="set-section">
             <h3>{t('settings.theme')}</h3>
-            <div className="field">
-              <label>{t('settings.appearance')}</label>
-              <select
-                className="select"
-                value={settings.themeMode}
-                onChange={(e) => setSettings({ themeMode: e.target.value as ThemeMode })}
-              >
-                <option value="system">{t('settings.system')}</option>
-                <option value="light">{t('settings.light')}</option>
-                <option value="dark">{t('settings.dark')}</option>
-              </select>
-            </div>
-            <p style={{ fontSize: 12, color: 'var(--text-faint)', margin: 0 }}>
-              {t('settings.themeTip')}
-            </p>
+            <select
+              className="select"
+              aria-label={t('settings.appearance')}
+              value={settings.themeMode}
+              onChange={(e) => setSettings({ themeMode: e.target.value as ThemeMode })}
+            >
+              <option value="system">{t('settings.system')}</option>
+              <option value="light">{t('settings.light')}</option>
+              <option value="dark">{t('settings.dark')}</option>
+            </select>
           </div>
         </div>
 

package/src/core/i18n.ts

@@ -173,6 +173,9 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
     // ---- 设置 ----
     'settings.title': '设置',
     'settings.sub': '模型 API 配置、超参数与主题',
+    'settings.toolExecution': '🛠️ 工具执行',
+    'settings.yoloMode': 'YOLO 模式',
+    'settings.yoloModeDesc': '自动批准工具修改和 Shell 执行，无需逐次确认。仅在信任角色和技能时开启。',
     'settings.genParams': '🎛 生成参数',
     'settings.tempDesc': '创造性与随机性',
     'settings.topPDesc': '核采样',
@@ -615,6 +618,9 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
 
     'settings.title': '設定',
     'settings.sub': '模型 API 設定、超參數與主題',
+    'settings.toolExecution': '🛠️ 工具執行',
+    'settings.yoloMode': 'YOLO 模式',
+    'settings.yoloModeDesc': '自動批准工具修改和 Shell 執行，無需逐次確認。僅在信任角色和技能時開啟。',
     'settings.genParams': '🎛 產生參數',
     'settings.tempDesc': '創造性與隨機性',
     'settings.topPDesc': '核採樣',
@@ -1048,6 +1054,9 @@ const MESSAGES: Record<LangKey, Record<string, string>> = {
 
     'settings.title': 'Settings',
     'settings.sub': 'Model API config, hyperparameters and theme',
+    'settings.toolExecution': '🛠️ Tool execution',
+    'settings.yoloMode': 'YOLO mode',
+    'settings.yoloModeDesc': 'Automatically approve tool changes and Shell commands without asking each time. Only enable for trusted characters and skills.',
     'settings.genParams': '🎛 Generation parameters',
     'settings.tempDesc': 'Creativity & randomness',
     'settings.topPDesc': 'Nucleus sampling',
@@ -1403,4 +1412,4 @@ export function useT() {
 /** 静态翻译：读当前语言快照（store / 工具执行器使用） */
 export function translate(key: string, params?: Record<string, string | number>): string {
   return translateFor(currentLang, key, params);
-}
+}

package/src/core/openai.ts

@@ -9,6 +9,14 @@ import { translate } from './i18n';
 
 const OPENAI_TIMEOUTS = { read: 60_000 };
 
+interface ToolDelta {
+  id: string;
+  name: string;
+  args: string;
+  snapshotArgs: string | null;
+  lastEmitted: string;
+}
+
 /**
  * 计算请求 URL 候选：先直连，若失败且开发服务器可用（存在 /api/ 代理），
  * 自动回退到同源代理地址。
@@ -92,7 +100,7 @@ async function attemptStream(
     const decoder = new TextDecoder();
 
     // Delta 工具调用按 index 组装
-    const toolDeltas = new Map<number, { id: string; name: string; args: string; lastEmitted: string }>();
+    const toolDeltas = new Map<number, ToolDelta>();
     let buffer = '';
     while (true) {
       const { done, value } = await reader.read();
@@ -115,19 +123,15 @@ async function attemptStream(
       }
     }
 
-    // 收尾：补发未完成的工具调用
-    for (const [idx, td] of toolDeltas) {
-      const id = td.id || fallbackToolCallId(idx);
-      const nextEmit = `${id}\n${td.name}\n${td.args}`;
-      if (td.lastEmitted === nextEmit) continue;
-      td.lastEmitted = nextEmit;
-      onChunk({
-        type: 'tool_call',
-        id,
-        name: td.name,
-        argJson: td.args,
-      });
+    // Some compatible endpoints close after the final data line without a newline.
+    buffer += decoder.decode();
+    if (buffer.startsWith('data:')) {
+      const data = buffer.slice(5).trim();
+      if (data && data !== '[DONE]') handleDataLine(data, onChunk, toolDeltas);
     }
+
+    // 收尾：补发未完成的工具调用
+    emitFinalToolCalls(toolDeltas, onChunk);
     onChunk({ type: 'done' });
     return true;
   } catch (e) {
@@ -154,7 +158,7 @@ async function attemptStream(
 function handleDataLine(
   data: string,
   onChunk: (c: ChatStreamChunk) => void,
-  toolDeltas: Map<number, { id: string; name: string; args: string; lastEmitted: string }>,
+  toolDeltas: Map<number, ToolDelta>,
 ): void {
   try {
     const json = JSON.parse(data);
@@ -186,8 +190,7 @@ function handleDataLine(
     }>;
     if (!choices) return;
     for (const choice of choices) {
-      const delta = choice.delta;
-      if (!delta) continue;
+      const delta = choice.delta ?? {};
 
       const thinking =
         delta.reasoning ?? delta.reasoning_content ?? delta.thinking_content ?? null;
@@ -206,7 +209,7 @@ function handleDataLine(
       if (delta.tool_calls) {
         for (const tc of delta.tool_calls) {
           const idx = tc.index ?? 0;
-          const cur = toolDeltas.get(idx) ?? { id: '', name: '', args: '', lastEmitted: '' };
+          const cur = toolDeltas.get(idx) ?? { id: '', name: '', args: '', snapshotArgs: '', lastEmitted: '' };
           if (tc.id) cur.id = tc.id;
           if (!cur.id) cur.id = fallbackToolCallId(idx);
           if (tc.function?.name) {
@@ -216,7 +219,13 @@ function handleDataLine(
             }
           }
           if (tc.function?.arguments) {
-            cur.args = mergeToolArguments(cur.args, tc.function.arguments);
+            const incoming = tc.function.arguments;
+            // Deltas are lossless. Repeated braces and prefixes are still data.
+            cur.args += incoming;
+            // Retain snapshot compatibility only while every fragment extends
+            // (or repeats) the previous one. Never mix snapshots with deltas.
+            cur.snapshotArgs = cur.snapshotArgs !== null && incoming.startsWith(cur.snapshotArgs)
+              ? incoming : null;
           }
           toolDeltas.set(idx, cur);
           if (cur.name) {
@@ -234,19 +243,7 @@ function handleDataLine(
         }
       }
       if (choice.finish_reason === 'tool_calls') {
-        // 立即发出发射工具调用事件
-        for (const [idx, td] of toolDeltas) {
-          const id = td.id || fallbackToolCallId(idx);
-          const nextEmit = `${id}\n${td.name}\n${td.args}`;
-          if (td.lastEmitted === nextEmit) continue;
-          td.lastEmitted = nextEmit;
-          onChunk({
-            type: 'tool_call',
-            id,
-            name: td.name,
-            argJson: td.args,
-          });
-        }
+        emitFinalToolCalls(toolDeltas, onChunk);
         toolDeltas.clear();
       } else if (choice.finish_reason && choice.finish_reason !== 'stop') {
         // stop/reasoning/content_filter 等
@@ -257,12 +254,26 @@ function handleDataLine(
   }
 }
 
-function mergeToolArguments(current: string, incoming: string): string {
-  if (!current) return incoming;
-  if (!incoming || incoming === current) return current;
-  if (incoming.startsWith(current)) return incoming;
-  if (current.startsWith(incoming)) return current;
-  return current + incoming;
+function emitFinalToolCalls(toolDeltas: Map<number, ToolDelta>, onChunk: (c: ChatStreamChunk) => void): void {
+  for (const [idx, td] of toolDeltas) {
+    let argJson = td.args;
+    if (td.snapshotArgs !== null && td.snapshotArgs !== argJson) {
+      try {
+        JSON.parse(argJson);
+      } catch {
+        try {
+          // Only fall back from invalid deltas to a complete snapshot object.
+          const snapshot: unknown = JSON.parse(td.snapshotArgs);
+          if (snapshot && typeof snapshot === 'object' && !Array.isArray(snapshot)) argJson = td.snapshotArgs;
+        } catch { /* Leave invalid arguments unchanged for the tool executor. */ }
+      }
+    }
+    const id = td.id || fallbackToolCallId(idx);
+    const nextEmit = `${id}\n${td.name}\n${argJson}`;
+    if (td.lastEmitted === nextEmit) continue;
+    td.lastEmitted = nextEmit;
+    onChunk({ type: 'tool_call', id, name: td.name, argJson });
+  }
 }
 
 /** 拆分 deepseek / kimi 风格的 思考→回答 标记 */

package/src/db/database.ts

@@ -249,6 +249,7 @@ const DEFAULT_SETTINGS: AppSettings = {
   isStreaming: true,
   isThinkingModeEnabled: true,
   isToolCallsEnabled: true,
+  yoloMode: false,
   statsResetTime: null,
 };
 
@@ -282,6 +283,9 @@ export async function initDatabase(): Promise<void> {
     if (settings && settings.contextCompressionThreshold === undefined) {
       await db.settings.update(1, { contextCompressionThreshold: 'off' });
     }
+    if (settings && settings.yoloMode === undefined) {
+      await db.settings.update(1, { yoloMode: false });
+    }
   }
   const statsCount = await db.careerStats.count();
   if (statsCount === 0) {
@@ -644,4 +648,4 @@ async function migrateDisplayFileRename(): Promise<void> {
       /* 坏 JSON 不处理 */
     }
   }
-}
+}

package/src/store/store.ts

@@ -300,6 +300,10 @@ export const useStore = create<AppState>((set, get) => ({
     const next = { ...current, ...partial };
     await db.settings.put(next);
     set({ settings: next });
+    const pending = get().pendingConfirmation;
+    if (next.yoloMode === true && pending && pending.kind !== 'limit') {
+      get().resolveConfirmation(true);
+    }
     if (partial.language !== undefined) {
       setLanguage(next.language ?? null);
       // 切换语言后：内置角色与世界书文本一并本地化并刷新。
@@ -2342,8 +2346,11 @@ async function continueRegeneratedGroupLoop(
   return continueGroupConversation(sessionId);
 }
 
-/** 挂起一个确认请求，直到用户在弹窗上应答（resolveConfirmation）。所有确认共用此唯一挂起点。 */
+/** 工具确认在 YOLO 模式下自动批准；执行限额仍挂起等待用户应答。 */
 function suspendConfirmation(req: ToolConfirmationRequest): Promise<boolean> {
+  if (req.kind !== 'limit' && useStore.getState().settings?.yoloMode === true) {
+    return Promise.resolve(true);
+  }
   return new Promise((resolve) => {
     confirmationDeferreds.set(req, { resolve });
     useStore.setState({ pendingConfirmation: req });
@@ -2416,4 +2423,4 @@ function displayRefForToolName(toolName: string, result: string): string | null
     title: payload.title,
     sessionId,
   });
-}
+}

package/src/theme/views.css

@@ -599,10 +599,19 @@
   font-weight: 600;
   color: var(--text-dim);
 }
-.set-row .s-desc {
+.set-row .s-desc,
+.param-table .s-desc {
   font-size: 11px;
   color: var(--text-faint);
 }
+.settings-tool-row {
+  padding: 9px 4px;
+}
+.set-row.settings-tool-row .s-label {
+  font-size: 13px;
+  font-weight: normal;
+  color: var(--text);
+}
 .range-row {
   display: flex;
   align-items: center;

package/src/types/models.ts

@@ -53,6 +53,8 @@ export interface AppSettings {
   isStreaming: boolean;
   isThinkingModeEnabled: boolean;
   isToolCallsEnabled: boolean;
+  /** 自动批准工具执行确认（YOLO）；默认关闭。 */
+  yoloMode: boolean;
   statsResetTime: number | null;
 }