Add SECURITY.md policy and enhance tool handling features

.github/workflows/ci.yml

@@ -97,6 +97,9 @@ jobs:
       - name: Run core Rust tests
         run: cargo test --locked -p bitfun-core
 
+      - name: Run desktop Rust tests
+        run: cargo test --locked -p bitfun-desktop
+
   # ── Frontend: build ────────────────────────────────────────────────
   frontend-build:
     name: Frontend Build

.gitignore

@@ -79,3 +79,5 @@ Cross.toml
 ASSETS_LICENSES.md
 
 external/
+/.bitfun/search/flashgrep-index/
+.agents/

AGENTS-CN.md

@@ -15,23 +15,28 @@ BitFun 是一个由 Rust workspace 与 React 前端组成的项目。
 
 ## 分层模块索引
 
-依赖关系按自上而下读取：上层只能依赖下层，同层 crate 也应保持最小依赖。
+依赖关系按自上而下读取。下表是物理 crate 布局，不是完整概念架构；Product Feature、Agent Kernel、
+Execution、Extension、Cross-platform Adapter 的边界以
+[`docs/architecture/core-decomposition.md`](docs/architecture/core-decomposition.md)
+为准。同层 crate 也应保持最小依赖。
 
 | # | 层级 | 路径 | 职责 | 模块 / 入口 | 层级文档 |
 |---|---|---|---|---|---|
 | 1 | 接口与入口层 | `src/apps/*`, `src/web-ui`, `src/mobile-web`, `BitFun-Installer`, `tests/e2e`, `src/crates/interfaces` | 产品宿主、命令、UI 入口、协议接口和跨形态测试 | desktop、CLI、server、relay、Web UI、mobile web、installer、E2E、`acp` | 最近的本地 `AGENTS.md`；[interfaces](src/crates/interfaces/AGENTS.md) |
 | 2 | 产品组装层 | `src/crates/assembly` | 兼容导出、产品能力选择、product-full 接线和 adapter/service 注册 | `core`, `product-capabilities` | [AGENTS.md](src/crates/assembly/AGENTS.md) |
 | 3 | 适配层 | `src/crates/adapters` | AI/API/transport/WebDriver 协议 adapter 和外部 provider 转换 | `ai-adapters`, `api-layer`, `transport`, `webdriver` | [AGENTS.md](src/crates/adapters/AGENTS.md) |
-| 4 | 服务实现层 | `src/crates/services` | 可复用 OS、filesystem、terminal、MCP、remote、git、watch、process、session persistence primitives、network 和 MiniApp runtime IO 实现 | `services-core`, `services-integrations`, `terminal` | [AGENTS.md](src/crates/services/AGENTS.md) |
+| 4 | 服务实现层 | `src/crates/services` | 可复用 OS、filesystem、terminal、MCP、remote、git、watch、process、LSP plugin registry、session persistence primitives、network 和 MiniApp runtime IO 实现 | `services-core`, `services-integrations`, `terminal` | [AGENTS.md](src/crates/services/AGENTS.md) |
 | 5 | 执行原语层 | `src/crates/execution` | 可移植 agent、harness、stream、DeepReview policy/report、typed-service、tool-contract、tool-group 和 tool-execution 构件 | `agent-runtime`, `agent-stream`, `tool-contracts`, `harness`, `runtime-services`, `tool-provider-groups`, `tool-execution` | [AGENTS.md](src/crates/execution/AGENTS.md) |
-| 6 | 稳定契约与产品领域层 | `src/crates/contracts` | 跨层共享 DTO、事件形状、runtime port、产品领域契约和策略 | `core-types`, `events`, `runtime-ports`, `product-domains` | [AGENTS.md](src/crates/contracts/AGENTS.md) |
+| 6 | 稳定契约与产品领域层 | `src/crates/contracts` | 跨层共享 DTO、事件形状、runtime port、LSP protocol/plugin DTO、产品领域契约和策略 | `core-types`, `events`, `runtime-ports`, `product-domains` | [AGENTS.md](src/crates/contracts/AGENTS.md) |
 
 边界规则：
 
 - 接口与入口层暴露选定产品行为；可复用行为应下移。
 - 组装层只接线下层并选择产品能力事实，不实现具体 adapter、OS 或 service 细节。
-- 适配层翻译协议和外部系统，不拥有产品能力选择或可复用 OS service 行为。
-- 服务实现层负责可复用的 OS、process、terminal、MCP、remote、git、filesystem、session persistence primitives 和 MiniApp runtime IO 能力。
+- 产品特性只在内核能力之上组装用户侧命令、UI contribution、设置和默认策略；长程任务、scheduler、permission、session/workspace、memory、DFX、hook 和 event 事实属于 Agent Kernel owner。
+- 适配层翻译协议和外部 provider 形状，不拥有产品能力选择或可复用 OS service 行为。
+- 服务实现层负责可复用的 OS、process、terminal、MCP、remote、git、filesystem、LSP plugin registry、session persistence primitives 和 MiniApp runtime IO 能力。
+- 外部系统是边界外资源，不是仓库内层级。只有已注册的 adapter、service 或 app-local provider 应调用它们；其他层消费 port 和稳定契约。
 - 执行原语层只放可移植运行时构件，不拥有宿主或交付形态。
 - 契约层保持轻行为，不得向上依赖。
 

AGENTS.md

@@ -15,24 +15,29 @@ Repository rule: **keep product logic platform-agnostic, then expose it through
 
 ## Layered Module Index
 
-Dependencies flow top to bottom. A layer may depend on lower layers only; keep
-crate dependencies inside each layer to the smallest set needed.
+Dependencies flow top to bottom. This table is the physical crate layout, not
+the full conceptual architecture. For Product Feature / Agent Kernel /
+Execution / Extension / Cross-platform Adapter boundaries, read
+[`docs/architecture/core-decomposition.md`](docs/architecture/core-decomposition.md).
+Keep crate dependencies inside each layer to the smallest set needed.
 
 | # | Layer | Path | Owns | Modules / entries | Layer doc |
 |---|---|---|---|---|---|
 | 1 | Interfaces and entrypoints | `src/apps/*`, `src/web-ui`, `src/mobile-web`, `BitFun-Installer`, `tests/e2e`, `src/crates/interfaces` | Product hosts, commands, UI entrypoints, protocol interfaces, and cross-surface tests | desktop, CLI, server, relay, Web UI, mobile web, installer, E2E, `acp` | nearest local `AGENTS.md`; [interfaces](src/crates/interfaces/AGENTS.md) |
 | 2 | Product assembly | `src/crates/assembly` | Compatibility exports, product capability selection, product-full wiring, and adapter/service registration | `core`, `product-capabilities` | [AGENTS.md](src/crates/assembly/AGENTS.md) |
 | 3 | Adapters | `src/crates/adapters` | AI/API/transport/WebDriver protocol adapters and external-provider translation | `ai-adapters`, `api-layer`, `transport`, `webdriver` | [AGENTS.md](src/crates/adapters/AGENTS.md) |
-| 4 | Services | `src/crates/services` | Reusable OS, filesystem, terminal, MCP, remote, git, watch, process, session persistence primitives, MiniApp runtime IO, and network implementations | `services-core`, `services-integrations`, `terminal` | [AGENTS.md](src/crates/services/AGENTS.md) |
+| 4 | Services | `src/crates/services` | Reusable OS, filesystem, terminal, MCP, remote, git, watch, process, LSP plugin registry, session persistence primitives, MiniApp runtime IO, and network implementations | `services-core`, `services-integrations`, `terminal` | [AGENTS.md](src/crates/services/AGENTS.md) |
 | 5 | Execution primitives | `src/crates/execution` | Portable agent, harness, stream, DeepReview policy/report, typed-service, tool-contract, tool-group, and tool-execution building blocks | `agent-runtime`, `agent-stream`, `tool-contracts`, `harness`, `runtime-services`, `tool-provider-groups`, `tool-execution` | [AGENTS.md](src/crates/execution/AGENTS.md) |
-| 6 | Stable contracts and product domains | `src/crates/contracts` | Shared DTOs, event shapes, runtime ports, and product domain contracts/policies | `core-types`, `events`, `runtime-ports`, `product-domains` | [AGENTS.md](src/crates/contracts/AGENTS.md) |
+| 6 | Stable contracts and product domains | `src/crates/contracts` | Shared DTOs, event shapes, runtime ports, LSP protocol/plugin DTOs, and product domain contracts/policies | `core-types`, `events`, `runtime-ports`, `product-domains` | [AGENTS.md](src/crates/contracts/AGENTS.md) |
 
 Boundary rules:
 
 - Interfaces and app entrypoints expose selected product behavior; reusable behavior moves down.
 - Assembly wires lower layers and selects product capability facts; it must not implement concrete adapter, OS, or service details.
-- Adapters translate protocols and external systems; they should not own product capability selection or reusable OS service behavior.
-- Services implement reusable concrete OS, process, terminal, MCP, remote, git, filesystem, and MiniApp runtime IO capabilities.
+- Product features assemble user-facing commands, UI contributions, settings, and default policy on top of kernel capabilities; long-running task, scheduler, permission, session/workspace, memory, DFX, hook, and event facts stay in Agent Kernel owners.
+- Adapters translate protocols and external-provider shapes; they should not own product capability selection or reusable OS service behavior.
+- Services implement reusable concrete OS, process, terminal, MCP, remote, git, filesystem, LSP plugin registry, and MiniApp runtime IO capabilities.
+- External systems are boundary resources, not repository layers. Only registered adapters/services/app-local providers should call them; other layers consume ports and stable contracts.
 - Execution crates are portable runtime building blocks, not host-specific or delivery-profile owners.
 - Contracts stay behavior-light and must not depend upward.
 

BitFun-Installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bitfun-installer",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "private": true,
   "type": "module",
   "description": "BitFun Custom Installer - Modern branded installation experience",

BitFun-Installer/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "bitfun-installer"
-version = "0.2.10"
+version = "0.2.12"
 authors = ["BitFun Team"]
 edition = "2021"
 description = "BitFun Custom Installer - Modern branded installation experience"

BitFun-Installer/src-tauri/src/installer/types.rs

@@ -70,6 +70,9 @@ impl From<bitfun_ai_adapters::types::RemoteModelInfo> for RemoteModelInfo {
 pub enum ConnectionTestMessageCode {
     ToolCallsNotDetected,
     ImageInputCheckFailed,
+    TlsOrCertificateIssue,
+    ProxyIssue,
+    NetworkIssue,
 }
 
 impl From<bitfun_ai_adapters::types::ConnectionTestMessageCode> for ConnectionTestMessageCode {
@@ -81,6 +84,13 @@ impl From<bitfun_ai_adapters::types::ConnectionTestMessageCode> for ConnectionTe
             bitfun_ai_adapters::types::ConnectionTestMessageCode::ImageInputCheckFailed => {
                 Self::ImageInputCheckFailed
             }
+            bitfun_ai_adapters::types::ConnectionTestMessageCode::TlsOrCertificateIssue => {
+                Self::TlsOrCertificateIssue
+            }
+            bitfun_ai_adapters::types::ConnectionTestMessageCode::ProxyIssue => Self::ProxyIssue,
+            bitfun_ai_adapters::types::ConnectionTestMessageCode::NetworkIssue => {
+                Self::NetworkIssue
+            }
         }
     }
 }

BitFun-Installer/src/pages/LanguageSelect.tsx

@@ -44,13 +44,13 @@ export function LanguageSelect({ onSelect }: LanguageSelectProps) {
           <img src={logoUrl} alt="BitFun" style={{
             display: 'block', margin: '0 auto 16px',
             width: 56, height: 56, borderRadius: 14,
-            filter: 'drop-shadow(0 0 40px rgba(100, 180, 255, 0.15))',
+            filter: 'drop-shadow(0 0 40px var(--color-accent-100))',
           }} />
           <h1 style={{
             fontFamily: 'var(--font-sans)', fontSize: 42, fontWeight: 700,
             color: 'var(--color-text-primary)', letterSpacing: '-0.03em',
             lineHeight: 0.95, margin: '0 0 16px 0',
-            textShadow: '0 0 60px rgba(100, 180, 255, 0.3)',
+            textShadow: '0 0 60px var(--color-accent-200)',
           }}>BitFun</h1>
         </div>
 
@@ -72,7 +72,7 @@ export function LanguageSelect({ onSelect }: LanguageSelectProps) {
             opacity: 0.6,
             letterSpacing: '0.5px',
           }}>
-            Version 0.2.10
+            Version 0.2.12
           </div>
         </div>
       </div>
@@ -106,9 +106,9 @@ export function LanguageSelect({ onSelect }: LanguageSelectProps) {
                       style={{
                         display: 'flex', alignItems: 'center', gap: 12,
                         padding: '14px 16px', width: '100%',
-                        background: isSelected ? 'rgba(96, 165, 250, 0.14)' : 'rgba(148, 163, 184, 0.08)',
+                        background: isSelected ? 'var(--color-accent-100)' : 'var(--element-bg-subtle)',
                         border: 'none',
-                        borderRadius: 'var(--radius-sm)',
+                        borderRadius: 'var(--size-radius-sm)',
                         cursor: 'pointer', textAlign: 'left',
                         transition: 'all 0.25s ease',
                         outline: 'none',
@@ -117,12 +117,12 @@ export function LanguageSelect({ onSelect }: LanguageSelectProps) {
                       }}
                       onMouseEnter={(e) => {
                         if (!isSelected) {
-                          e.currentTarget.style.background = 'rgba(148, 163, 184, 0.14)';
+                          e.currentTarget.style.background = 'var(--element-bg-soft)';
                         }
                       }}
                       onMouseLeave={(e) => {
                         if (!isSelected) {
-                          e.currentTarget.style.background = 'rgba(148, 163, 184, 0.08)';
+                          e.currentTarget.style.background = 'var(--element-bg-subtle)';
                         }
                       }}
                     >

BitFun-Installer/src/pages/Options.tsx

@@ -107,7 +107,7 @@ export function Options({
                 </div>
               ) : null}
               {!existingInstall.mainBinaryPresent ? (
-                <div style={{ marginBottom: 8, color: 'var(--color-warning, #c9a227)' }}>
+                <div style={{ marginBottom: 8, color: 'var(--color-warning)' }}>
                   {t('options.existingInstallBinaryMissing')}
                 </div>
               ) : null}

BitFun-Installer/src/pages/ThemeSetup.tsx

@@ -29,7 +29,7 @@ export function ThemeSetup({ options, setOptions, onLaunch, onClose }: ThemeSetu
     width: '100%',
     borderRadius: 12,
     padding: 8,
-    background: active ? 'rgba(96, 165, 250, 0.14)' : 'rgba(148, 163, 184, 0.08)',
+    background: active ? 'var(--color-accent-100)' : 'var(--element-bg-subtle)',
     border: 'none',
     cursor: 'pointer',
     transition: 'background 0.2s ease',
@@ -106,7 +106,7 @@ export function ThemeSetup({ options, setOptions, onLaunch, onClose }: ThemeSetu
                 <div style={{ ...previewBaseStyle, background: theme.colors.background.primary }}>
                   <div style={{ height: 16, background: theme.colors.background.secondary, opacity: 0.9 }} />
                   <div style={{ display: 'flex', gap: 6, padding: 8 }}>
-                    <div style={{ width: 22, height: 22, borderRadius: 5, background: theme.colors.element.base, opacity: 0.9 }} />
+                    <div style={{ width: 22, height: 22, borderRadius: 5, background: theme.colors.element.soft, opacity: 0.9 }} />
                     <div style={{ flex: 1 }}>
                       <div style={{ height: 5, width: '62%', background: theme.colors.text.muted, opacity: 0.5, borderRadius: 3, marginBottom: 5 }} />
                       <div style={{ height: 5, width: '78%', background: theme.colors.accent['500'], borderRadius: 3 }} />