!121 merge fix/ohos-agent-auto-install into main

feat(acp): add platform-aware agent provisioning

Created-by: guantw
Commit-by: guantw
Merged-by: SWangHash
Description: ## Summary

- Select ACP Agent presets by execution platform: HarmonyOS local runtimes expose Kimi Code, Qwen Code, and CodeBuddy Code, while standard local and remote runtimes keep the existing catalog.
- Add managed HarmonyOS provisioning with formula-specific HarmonyBrew paths for Kimi Code and Qwen Code, plus HarmonyBrew-owned Node/npm and an OHOS compatibility shim for CodeBuddy Code.
- Reuse already installed CLIs, add requirement and provisioning status reporting with cancellation-safe cleanup, and update localized setup actions and errors.

## Type and Areas

Type: Feature / UI/UX / test

Areas: ACP interface, desktop/Tauri API, Web UI settings, HarmonyOS provisioning, i18n

## Motivation / Impact

HarmonyOS users can detect, install, and add supported ACP agents from BitFun without treating unrelated HNP tools as valid runtimes. Existing installations are reused instead of reinstalled. Standard local and remote workspaces continue to use the existing portable Agent catalog and npm-based setup path.

## Verification

- `pnpm run fmt:rs` — passed.
- `pnpm --dir src/web-ui exec vitest run src/infrastructure/config/components/AcpAgentsConfig.test.tsx` — passed (17/17).
- Focused ESLint checks for `AcpAgentsConfig.tsx` and `AcpAgentsConfig.test.tsx` — passed.
- `pnpm run check:repo-hygiene` — passed.
- `git diff --check` — passed.
- `pnpm --dir src/web-ui build` — passed.
- Built, signed, inspected, and installed the HarmonyOS HAP on a USB device.
- `pnpm run type-check:web` still reports pre-existing duplicate implementation errors in `src/web-ui/src/infrastructure/api/WorkspaceAPI.ts`; this PR does not modify that file.

## Reviewer Notes

- HarmonyOS detection-only support for OpenCode is intentionally out of scope.
- Managed provisioning does not modify the user's HarmonyBrew configuration; it resolves explicit HarmonyBrew executables and prefixes for child processes.
- The HarmonyOS local path was exercised on a device. Standard local and remote runtime execution was not manually re-exercised; focused tests cover catalog selection and action states.

## Checklist

- [x] This PR is focused and does not include secrets, temporary prompts, generated scratch files, or unrelated artifacts.
- [x] Relevant verification is recorded above, or skipped checks are explained.
- [x] User-facing strings, docs, and locales are updated where applicable.

See merge request: OpenHarmonyPCDeveloper/BitFun!121

Author: SWangHash

Cargo.lock

@@ -67,6 +67,7 @@ impl ExternalAcpClient {
             enabled: true,
             readonly: false,
             permission_mode: AcpClientPermissionMode::Ask,
+            local_override: None,
         }
     }
 }

src/apps/cli/src/acp_cli.rs

@@ -38,7 +38,6 @@ tauri = { workspace = true }
 tauri-plugin-opener = { workspace = true }
 tauri-plugin-fs = { workspace = true }
 tauri-plugin-log = { workspace = true }
-tauri-plugin-dialog = { workspace = true }
 napi-ohos = { workspace = true }
 napi-derive-ohos = { workspace = true }
 keepawake = { workspace = true }
@@ -105,6 +104,7 @@ objc2-vision = { workspace = true, features = ["std", "VNRecognizeTextRequest",
 # Secret Service provider; the desktop host injects an ArkTS-backed vault
 # at startup instead.
 [target.'cfg(not(target_env = "ohos"))'.dependencies]
+tauri-plugin-dialog = { workspace = true }
 tauri-plugin-updater = { workspace = true }
 tauri-plugin-window-state = { workspace = true }
 tauri-plugin-single-instance = { workspace = true }

src/apps/desktop/Cargo.toml

@@ -46,7 +46,6 @@
     "core:window:allow-set-min-size",
     "opener:default",
     "opener:allow-open-url",
-    "dialog:default",
     {
       "identifier": "opener:allow-open-path",
       "allow": [
@@ -94,4 +93,4 @@
       ]
     }
   ]
-}
+}

src/apps/desktop/capabilities/default.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "../gen/schemas/desktop-schema.json",
+  "identifier": "desktop-dialog",
+  "description": "Native dialog permissions for desktop platforms where the dialog plugin is available",
+  "windows": ["main", "agent-companion-pet", "spotlight"],
+  "permissions": ["dialog:default"],
+  "platforms": ["macOS", "windows", "linux"]
+}

src/apps/desktop/capabilities/desktop-dialog.json

@@ -3,11 +3,13 @@
 use crate::api::app_state::AppState;
 use crate::api::session_storage_path::desktop_effective_session_storage_path;
 use crate::startup_trace::DesktopStartupTrace;
+#[cfg(target_env = "ohos")]
+use bitfun_acp::client::PROVISIONING_PROGRESS_EVENT;
 use bitfun_acp::client::{
-    AcpAvailableCommand, AcpClientInfo, AcpClientPermissionResponse, AcpClientRequirementProbe,
-    AcpClientStreamEvent, AcpSessionOptions, CreateAcpFlowSessionRecordResponse,
-    SetAcpSessionConfigOptionRequest, SetAcpSessionModelRequest,
-    SubmitAcpPermissionResponseRequest,
+    AcpAvailableCommand, AcpClientInfo, AcpClientInstallOutcome, AcpClientPermissionResponse,
+    AcpClientRequirementProbe, AcpClientStreamEvent, AcpSessionOptions,
+    CreateAcpFlowSessionRecordResponse, SetAcpSessionConfigOptionRequest,
+    SetAcpSessionModelRequest, SubmitAcpPermissionResponseRequest,
 };
 use serde::{Deserialize, Serialize};
 use std::time::Instant;
@@ -19,6 +21,8 @@ pub struct AcpClientIdRequest {
     pub client_id: String,
     #[serde(default)]
     pub remote_connection_id: Option<String>,
+    #[serde(default)]
+    pub cancel_install: bool,
 }
 
 #[derive(Debug, Clone, Serialize, Deserialize)]
@@ -184,16 +188,68 @@ pub async fn predownload_acp_client_adapter(
 #[tauri::command]
 pub async fn install_acp_client_cli(
     state: State<'_, AppState>,
+    app_handle: AppHandle,
     request: AcpClientIdRequest,
-) -> Result<(), String> {
+) -> Result<AcpClientInstallOutcome, String> {
     let service = state
         .acp_client_service
         .as_ref()
         .ok_or_else(|| "ACP client service not initialized".to_string())?;
-    service
-        .install_client_cli(&request.client_id, request.remote_connection_id.as_deref())
-        .await
-        .map_err(|e| e.to_string())
+    let remote_connection_id = request
+        .remote_connection_id
+        .as_deref()
+        .map(str::trim)
+        .filter(|value| !value.is_empty());
+
+    if request.cancel_install {
+        if remote_connection_id.is_some() {
+            return Err(
+                "Remote ACP CLI installation cannot be cancelled by the local managed installer"
+                    .to_string(),
+            );
+        }
+        if !service.cancel_managed_client_provisioning(&request.client_id) {
+            return Err(format!(
+                "No managed ACP installation is running for '{}'",
+                request.client_id
+            ));
+        }
+        return Ok(AcpClientInstallOutcome::cancellation_requested(
+            &request.client_id,
+        ));
+    }
+
+    if let Some(remote_connection_id) = remote_connection_id {
+        service
+            .install_client_cli(&request.client_id, Some(remote_connection_id))
+            .await
+            .map_err(|e| e.to_string())?;
+        return Ok(AcpClientInstallOutcome::cli_installed(&request.client_id));
+    }
+
+    #[cfg(target_env = "ohos")]
+    {
+        let event_app_handle = app_handle.clone();
+        let emit_progress = move |progress| {
+            if let Err(error) = event_app_handle.emit(PROVISIONING_PROGRESS_EVENT, progress) {
+                log::warn!("Failed to emit ACP provisioning progress: {}", error);
+            }
+        };
+        return service
+            .provision_managed_client(&request.client_id, emit_progress)
+            .await
+            .map_err(|e| e.to_string());
+    }
+
+    #[cfg(not(target_env = "ohos"))]
+    {
+        let _ = app_handle;
+        service
+            .install_client_cli(&request.client_id, None)
+            .await
+            .map_err(|e| e.to_string())?;
+        Ok(AcpClientInstallOutcome::cli_installed(&request.client_id))
+    }
 }
 
 #[tauri::command]