fix(agent): make BitFun self-control work in CLI

docs/interactive-capabilities/README.md

@@ -23,19 +23,20 @@ Docs, website, search, and agents see only features, settings, and documented su
 - 每个子能力都明确标记为直接控制、委托给专用 Agent 工具、需交互打开或不支持；“打开页面”不会再被统计成“Agent 已控制”。当前覆盖：直接 **49**、委托 **61**、需交互 **205**、不支持 **0**。
 - 稳定行为声明为带 JSON 输入契约的 `operations` 或 `options`，并绑定原生产品控制 Provider；Agent 不接触原始 Tauri Command。
 - `BitFunControl list` 和 `search` 都返回带 `nextCursor` 的精简分页结果；目录可持续增长，不靠固定总量上限。完整目录和 315 项子能力都不会写入 system prompt。
-- 目录发现与契约读取不依赖 React 或可见窗口；Desktop 原生启动时注册状态读取与修改 Provider，只有导航类动作等待界面握手。CLI、Detached Dispatch 等表面仍可发现目录，但必须明确返回该表面缺少控制适配器，禁止静默回退本机。只读 Agent 只能发现和读取目录。
+- 目录发现与契约读取不依赖 React 或可见窗口。普通配置型 option 统一由 Product Assembly 的共享 ConfigService 执行器读、写并回读，因此 Desktop、CLI 与 Headless 表面走同一份实现；只有宿主原生 operation/provider option 和界面导航按表面注册适配器，缺失时必须明确返回不可用，禁止静默回退本机。只读 Agent 只能发现和读取目录。
 
 - Every documented item is classified as direct control, delegated Agent control, interactive opening, or unsupported; opening a page is never counted as direct control. Current coverage is **49 direct**, **61 delegated**, **205 interactive**, and **0 unsupported**.
 - Stable behavior becomes a typed `operation` or `option` with a JSON input contract and a native product-control provider. Agents never receive raw Tauri commands.
 - `BitFunControl list` and `search` return compact pages with a `nextCursor`; the catalog can grow without a fixed total-size ceiling. Neither the full catalog nor its 315 documented items enters the system prompt.
-- Discovery and contract lookup do not depend on React or a visible window. Desktop installs state providers during native startup and waits for the UI handshake only for presentation actions. Headless surfaces can still discover the catalog but must return explicit adapter unavailability without local fallback; read-only agents may only discover and inspect entries.
+- Discovery and contract lookup do not depend on React or a visible window. Ordinary config-backed options are read, written, and read back by one Product Assembly ConfigService executor shared by Desktop, CLI, and headless surfaces. Only host-native operations/provider options and presentation routes install surface adapters; missing adapters return explicit unavailability without local fallback. Read-only agents may only discover and inspect entries.
 
 ## 防腐化门禁 / Anti-drift gates
 
 - 设置页、产品动作与场景注册表必须全部映射到一个语义条目。
 - 所有设置子视图必须有同源的子能力直达目标，失效的页签 ID 会阻断生成。
 - 每个功能和设置都必须完整列出其真实子能力，并具备中英文、稳定 ID 与源码证据；门禁不以凑数阈值代替完整性审查。
 - 每项子能力必须声明控制类型；所有 operation/option 必须被说明书条目引用，静态值必须符合 schema，任何未绑定 Provider 都会在 Rust 契约测试中失败。
+- 每个共享配置 option 必须从默认配置可读、绑定到类型化 GlobalConfig，并能通过真实 ConfigService 写入后回读；Desktop 原生 Provider 也必须逐项绑定，新增但漏接的 handler 会阻断 CI。
 - Operation 可声明结构化参数，但必须拒绝未知字段；无参数的 UI 动作若误声明参数，生成会失败。
 - Tauri 模块命令数和用户可见交互源码摘要均为 reviewed contract；变化会让 `capabilities:check` 失败并给出新的摘要值。
 - 维护者必须先核对功能清单与证据，再只在本语义源中更新 reviewed count/digest，随后运行 `pnpm run capabilities:generate`。
@@ -44,6 +45,7 @@ Docs, website, search, and agents see only features, settings, and documented su
 - Every settings subview needs a same-source item destination; stale view IDs fail generation.
 - Every feature and setting must enumerate its real sub-capabilities with bilingual text, stable IDs, and source evidence; the gate does not substitute padding quotas for completeness review.
 - Every item must declare its control class. Every operation/option must be referenced by a manual item, static values must satisfy their schema, and Rust contract tests reject provider bindings without an implementation.
+- Every shared config option must be readable from defaults, bind to typed GlobalConfig, and round-trip through the real ConfigService. Desktop native providers are exhaustively bound as well, so a new but unwired handler fails CI.
 - Operations may declare structured arguments but must reject unknown fields. Argument declarations on parameterless UI actions fail generation.
 - Reviewed Tauri module counts and the user-visible interaction-source digest fail `capabilities:check` on drift.
 - Maintainers review the inventories and evidence first, update the reviewed count/digest only in this semantic source, then run `pnpm run capabilities:generate`.

docs/interactive-capabilities/capabilities.json

@@ -4,7 +4,7 @@
   "title": "BitFun Playbook",
   "origin": "https://playbook.openbitfun.com",
   "source": "src/shared/interactive-capabilities/catalog.json",
-  "digest": "c743edc2a5b5103230aba095264d371c81999653fad41f89f0e46878d5f9c91a",
+  "digest": "3c78642ff2ca49ce070288d4e9dc22c9615f731f46a56d8135fea25cf5c474bf",
   "searchAcceptance": [
     {
       "id": "companion-pet-mixed",
@@ -83,6 +83,30 @@
         "capabilityId": "feature.pages",
         "itemId": "publish"
       }
+    },
+    {
+      "id": "deferred-tools-chinese",
+      "query": "延迟加载工具",
+      "expectedFirstCapabilityId": "setting.tools.execution",
+      "expectedCapabilityIds": [
+        "setting.tools.execution"
+      ],
+      "expectedItem": {
+        "capabilityId": "setting.tools.execution",
+        "itemId": "deferred-tools"
+      }
+    },
+    {
+      "id": "deferred-tools-english",
+      "query": "deferred tool loading",
+      "expectedFirstCapabilityId": "setting.tools.execution",
+      "expectedCapabilityIds": [
+        "setting.tools.execution"
+      ],
+      "expectedItem": {
+        "capabilityId": "setting.tools.execution",
+        "itemId": "deferred-tools"
+      }
     }
   ],
   "counts": {
@@ -8127,6 +8151,7 @@
       "keywordsZh": [
         "执行控制",
         "工具权限",
+        "延迟加载工具",
         "审批",
         "并行",
         "超时",
@@ -8137,6 +8162,7 @@
       "keywordsEn": [
         "execution control",
         "tool permissions",
+        "deferred tool loading",
         "approval",
         "parallel",
         "timeout",
@@ -8201,8 +8227,8 @@
         },
         {
           "id": "deferred-tools",
-          "titleZh": "按需延迟加载大型工具定义以减少 Agent 初始上下文",
-          "titleEn": "Load large tool definitions on demand to reduce initial agent context",
+          "titleZh": "按需延迟加载工具定义以减少 Agent 初始上下文",
+          "titleEn": "Deferred tool loading on demand to reduce initial agent context",
           "control": {
             "kind": "direct",
             "operations": [],
@@ -8457,6 +8483,7 @@
         "AI & collaboration",
         "执行控制",
         "工具权限",
+        "延迟加载工具",
         "审批",
         "并行",
         "超时",
@@ -8465,6 +8492,7 @@
         "JSON 修复",
         "execution control",
         "tool permissions",
+        "deferred tool loading",
         "approval",
         "parallel",
         "timeout",
@@ -8485,8 +8513,8 @@
         "Create, reorder, and save global or project-level Allow, Ask, and Deny rules",
         "查看、撤销或清空项目中记住的权限授权与审计记录",
         "Review, revoke, or clear remembered project permission grants and audit records",
-        "按需延迟加载大型工具定义以减少 Agent 初始上下文",
-        "Load large tool definitions on demand to reduce initial agent context",
+        "按需延迟加载工具定义以减少 Agent 初始上下文",
+        "Deferred tool loading on demand to reduce initial agent context",
         "设置子 Agent 与 Swarm 最大并发及安全、强制并行或串行策略",
         "Set subagent and swarm concurrency plus safe-only, forced-parallel, or serial policy",
         "设置或取消单次工具执行超时",

docs/interactive-capabilities/capabilities/setting.tools.execution.md

@@ -25,8 +25,8 @@ Manage agent tool permissions, concurrency, timeouts, deferred loading, Computer
   - Create, reorder, and save global or project-level Allow, Ask, and Deny rules
 - **Agent 可定位入口，需交互完成 / Agent opens; interaction required** · 查看、撤销或清空项目中记住的权限授权与审计记录
   - Review, revoke, or clear remembered project permission grants and audit records
-- **Agent 可直接控制 / Direct Agent control** · 按需延迟加载大型工具定义以减少 Agent 初始上下文
-  - Load large tool definitions on demand to reduce initial agent context
+- **Agent 可直接控制 / Direct Agent control** · 按需延迟加载工具定义以减少 Agent 初始上下文
+  - Deferred tool loading on demand to reduce initial agent context
 - **Agent 可直接控制 / Direct Agent control** · 设置子 Agent 与 Swarm 最大并发及安全、强制并行或串行策略
   - Set subagent and swarm concurrency plus safe-only, forced-parallel, or serial policy
 - **Agent 可直接控制 / Direct Agent control** · 设置或取消单次工具执行超时

docs/interactive-capabilities/technical/tauri-command-map.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
   "generatedFrom": "src/shared/interactive-capabilities/catalog.json",
-  "catalogDigest": "c743edc2a5b5103230aba095264d371c81999653fad41f89f0e46878d5f9c91a",
+  "catalogDigest": "3c78642ff2ca49ce070288d4e9dc22c9615f731f46a56d8135fea25cf5c474bf",
   "commandCount": 649,
   "coverage": {
     "commandCount": 649,

docs/interactive-capabilities/technical/ui-interaction-inventory.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "generatedFrom": "src/shared/interactive-capabilities/catalog.json",
-  "catalogDigest": "c743edc2a5b5103230aba095264d371c81999653fad41f89f0e46878d5f9c91a",
+  "catalogDigest": "3c78642ff2ca49ce070288d4e9dc22c9615f731f46a56d8135fea25cf5c474bf",
   "roots": [
     "src/web-ui/src"
   ],

scripts/generate-interactive-capabilities.mjs

@@ -604,7 +604,14 @@ function validateSource(source) {
       )) {
         throw new Error(`${capability.id}.${option.id} has an invalid provider option handler`);
       }
-      if (!['config', 'mergeConfig', 'appearanceSelection', 'language', 'provider'].includes(option.handler.kind)) {
+      if (![
+        'config',
+        'mergeConfig',
+        'appearanceSelection',
+        'language',
+        'flowChatPermissionModeControl',
+        'provider',
+      ].includes(option.handler.kind)) {
         throw new Error(`${capability.id}.${option.id} has an unsupported option handler`);
       }
     }
@@ -1236,19 +1243,20 @@ Docs, website, search, and agents see only features, settings, and documented su
 - 每个子能力都明确标记为直接控制、委托给专用 Agent 工具、需交互打开或不支持；“打开页面”不会再被统计成“Agent 已控制”。当前覆盖：直接 **${catalog.counts.controlCoverage.direct}**、委托 **${catalog.counts.controlCoverage.delegated}**、需交互 **${catalog.counts.controlCoverage.interactive}**、不支持 **${catalog.counts.controlCoverage.unsupported}**。
 - 稳定行为声明为带 JSON 输入契约的 \`operations\` 或 \`options\`，并绑定原生产品控制 Provider；Agent 不接触原始 Tauri Command。
 - \`BitFunControl list\` 和 \`search\` 都返回带 \`nextCursor\` 的精简分页结果；目录可持续增长，不靠固定总量上限。完整目录和 ${catalog.counts.documentedItems} 项子能力都不会写入 system prompt。
-- 目录发现与契约读取不依赖 React 或可见窗口；Desktop 原生启动时注册状态读取与修改 Provider，只有导航类动作等待界面握手。CLI、Detached Dispatch 等表面仍可发现目录，但必须明确返回该表面缺少控制适配器，禁止静默回退本机。只读 Agent 只能发现和读取目录。
+- 目录发现与契约读取不依赖 React 或可见窗口。普通配置型 option 统一由 Product Assembly 的共享 ConfigService 执行器读、写并回读，因此 Desktop、CLI 与 Headless 表面走同一份实现；只有宿主原生 operation/provider option 和界面导航按表面注册适配器，缺失时必须明确返回不可用，禁止静默回退本机。只读 Agent 只能发现和读取目录。
 
 - Every documented item is classified as direct control, delegated Agent control, interactive opening, or unsupported; opening a page is never counted as direct control. Current coverage is **${catalog.counts.controlCoverage.direct} direct**, **${catalog.counts.controlCoverage.delegated} delegated**, **${catalog.counts.controlCoverage.interactive} interactive**, and **${catalog.counts.controlCoverage.unsupported} unsupported**.
 - Stable behavior becomes a typed \`operation\` or \`option\` with a JSON input contract and a native product-control provider. Agents never receive raw Tauri commands.
 - \`BitFunControl list\` and \`search\` return compact pages with a \`nextCursor\`; the catalog can grow without a fixed total-size ceiling. Neither the full catalog nor its ${catalog.counts.documentedItems} documented items enters the system prompt.
-- Discovery and contract lookup do not depend on React or a visible window. Desktop installs state providers during native startup and waits for the UI handshake only for presentation actions. Headless surfaces can still discover the catalog but must return explicit adapter unavailability without local fallback; read-only agents may only discover and inspect entries.
+- Discovery and contract lookup do not depend on React or a visible window. Ordinary config-backed options are read, written, and read back by one Product Assembly ConfigService executor shared by Desktop, CLI, and headless surfaces. Only host-native operations/provider options and presentation routes install surface adapters; missing adapters return explicit unavailability without local fallback. Read-only agents may only discover and inspect entries.
 
 ## 防腐化门禁 / Anti-drift gates
 
 - 设置页、产品动作与场景注册表必须全部映射到一个语义条目。
 - 所有设置子视图必须有同源的子能力直达目标，失效的页签 ID 会阻断生成。
 - 每个功能和设置都必须完整列出其真实子能力，并具备中英文、稳定 ID 与源码证据；门禁不以凑数阈值代替完整性审查。
 - 每项子能力必须声明控制类型；所有 operation/option 必须被说明书条目引用，静态值必须符合 schema，任何未绑定 Provider 都会在 Rust 契约测试中失败。
+- 每个共享配置 option 必须从默认配置可读、绑定到类型化 GlobalConfig，并能通过真实 ConfigService 写入后回读；Desktop 原生 Provider 也必须逐项绑定，新增但漏接的 handler 会阻断 CI。
 - Operation 可声明结构化参数，但必须拒绝未知字段；无参数的 UI 动作若误声明参数，生成会失败。
 - Tauri 模块命令数和用户可见交互源码摘要均为 reviewed contract；变化会让 \`capabilities:check\` 失败并给出新的摘要值。
 - 维护者必须先核对功能清单与证据，再只在本语义源中更新 reviewed count/digest，随后运行 \`pnpm run capabilities:generate\`。
@@ -1257,6 +1265,7 @@ Docs, website, search, and agents see only features, settings, and documented su
 - Every settings subview needs a same-source item destination; stale view IDs fail generation.
 - Every feature and setting must enumerate its real sub-capabilities with bilingual text, stable IDs, and source evidence; the gate does not substitute padding quotas for completeness review.
 - Every item must declare its control class. Every operation/option must be referenced by a manual item, static values must satisfy their schema, and Rust contract tests reject provider bindings without an implementation.
+- Every shared config option must be readable from defaults, bind to typed GlobalConfig, and round-trip through the real ConfigService. Desktop native providers are exhaustively bound as well, so a new but unwired handler fails CI.
 - Operations may declare structured arguments but must reject unknown fields. Argument declarations on parameterless UI actions fail generation.
 - Reviewed Tauri module counts and the user-visible interaction-source digest fail \`capabilities:check\` on drift.
 - Maintainers review the inventories and evidence first, update the reviewed count/digest only in this semantic source, then run \`pnpm run capabilities:generate\`.