feat(hermes): add platform toolsets config

2026-08-04 12:47:18 +08:00 · 2026-05-26 01:50:06 +08:00
parent 30dd6cc2e2
commit c5ed3ba5aa
8 changed files with 533 additions and 3 deletions
--- a/src/engines/hermes/pages/config.js
+++ b/src/engines/hermes/pages/config.js
@@ -60,6 +60,10 @@ const AGENT_TOOLSETS_DEFAULTS = {
  disabledToolsets: '',
 }

+const PLATFORM_TOOLSETS_DEFAULTS = {
+  platformToolsetsJson: '{}',
+}
+
 const AGENT_RUNTIME_DEFAULTS = {
  agentMaxTurns: 90,
  gatewayTimeout: 1800,
@@ -237,6 +241,7 @@ export function render() {
  let skillsValues = { ...SKILLS_DEFAULTS }
  let quickCommandsValues = { ...QUICK_COMMANDS_DEFAULTS }
  let agentToolsetsValues = { ...AGENT_TOOLSETS_DEFAULTS }
+  let platformToolsetsValues = { ...PLATFORM_TOOLSETS_DEFAULTS }
  let agentRuntimeValues = { ...AGENT_RUNTIME_DEFAULTS }
  let unauthorizedDmValues = { ...UNAUTHORIZED_DM_DEFAULTS }
  let securityValues = { ...SECURITY_DEFAULTS }
@@ -262,6 +267,7 @@ export function render() {
  let skillsLoading = true
  let quickCommandsLoading = true
  let agentToolsetsLoading = true
+  let platformToolsetsLoading = true
  let agentRuntimeLoading = true
  let unauthorizedDmLoading = true
  let securityLoading = true
@@ -287,6 +293,7 @@ export function render() {
  let skillsSaving = false
  let quickCommandsSaving = false
  let agentToolsetsSaving = false
+  let platformToolsetsSaving = false
  let agentRuntimeSaving = false
  let unauthorizedDmSaving = false
  let securitySaving = false
@@ -312,6 +319,7 @@ export function render() {
  let skillsError = null
  let quickCommandsError = null
  let agentToolsetsError = null
+  let platformToolsetsError = null
  let agentRuntimeError = null
  let unauthorizedDmError = null
  let securityError = null
@@ -338,7 +346,7 @@ export function render() {
  }

  function isBusy() {
-    return loading || runtimeLoading || compressionLoading || promptCachingLoading || toolGuardrailsLoading || memoryLoading || skillsLoading || quickCommandsLoading || agentToolsetsLoading || agentRuntimeLoading || unauthorizedDmLoading || securityLoading || displayLoading || humanDelayLoading || streamingLoading || executionLimitsLoading || ioSafetyLoading || checkpointsLoading || cronLoading || loggingLoading || approvalsLoading || privacyLoading || browserLoading || sttLoading || terminalLoading || saving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || agentToolsetsSaving || agentRuntimeSaving || unauthorizedDmSaving || securitySaving || displaySaving || humanDelaySaving || streamingSaving || executionLimitsSaving || ioSafetySaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || privacySaving || browserSaving || sttSaving || terminalSaving
+    return loading || runtimeLoading || compressionLoading || promptCachingLoading || toolGuardrailsLoading || memoryLoading || skillsLoading || quickCommandsLoading || agentToolsetsLoading || platformToolsetsLoading || agentRuntimeLoading || unauthorizedDmLoading || securityLoading || displayLoading || humanDelayLoading || streamingLoading || executionLimitsLoading || ioSafetyLoading || checkpointsLoading || cronLoading || loggingLoading || approvalsLoading || privacyLoading || browserLoading || sttLoading || terminalLoading || saving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || agentToolsetsSaving || platformToolsetsSaving || agentRuntimeSaving || unauthorizedDmSaving || securitySaving || displaySaving || humanDelaySaving || streamingSaving || executionLimitsSaving || ioSafetySaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || privacySaving || browserSaving || sttSaving || terminalSaving
  }

  function option(labelKey, value, selected) {
@@ -653,7 +661,7 @@ export function render() {
  }

  function renderAgentToolsetsConfigPanel() {
-    const disabled = loading || saving || agentToolsetsLoading || agentToolsetsSaving || agentRuntimeSaving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || unauthorizedDmSaving || streamingSaving || executionLimitsSaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || terminalSaving
+    const disabled = loading || saving || agentToolsetsLoading || agentToolsetsSaving || platformToolsetsSaving || agentRuntimeSaving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || unauthorizedDmSaving || streamingSaving || executionLimitsSaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || terminalSaving
    return `
      <div class="hm-panel hm-config-runtime-panel hm-config-agent-toolsets-panel">
        <div class="hm-panel-header">
@@ -678,8 +686,34 @@ export function render() {
    `
  }

+  function renderPlatformToolsetsConfigPanel() {
+    const disabled = loading || saving || platformToolsetsLoading || platformToolsetsSaving || agentToolsetsSaving || agentRuntimeSaving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || unauthorizedDmSaving || streamingSaving || executionLimitsSaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || terminalSaving
+    return `
+      <div class="hm-panel hm-config-runtime-panel hm-config-platform-toolsets-panel">
+        <div class="hm-panel-header">
+          <div>
+            <div class="hm-panel-title">${t('engine.hermesPlatformToolsetsConfigTitle')}</div>
+            <div class="hm-channel-panel-desc">${t('engine.hermesPlatformToolsetsConfigDesc')}</div>
+          </div>
+          <div class="hm-panel-actions">
+            <span class="hm-muted">${platformToolsetsSaving ? t('engine.hermesConfigStatusSaving') : platformToolsetsLoading ? t('engine.hermesConfigStatusLoading') : t('engine.hermesPlatformToolsetsConfigStatusReady')}</span>
+            <button class="hm-btn hm-btn--cta hm-btn--sm" id="hm-platform-toolsets-save" ${disabled ? 'disabled' : ''}>${t('engine.hermesPlatformToolsetsConfigSave')}</button>
+          </div>
+        </div>
+        <div class="hm-panel-body">
+          ${renderError(platformToolsetsError)}
+          <label class="hm-field hm-field--wide">
+            <span class="hm-field-label">${t('engine.hermesPlatformToolsetsConfigJson')}</span>
+            <textarea id="hm-platform-toolsets-json" class="hm-input" spellcheck="false" rows="9" ${disabled ? 'disabled' : ''} style="font-family:var(--hm-font-mono);line-height:1.65;min-height:260px">${esc(platformToolsetsValues.platformToolsetsJson)}</textarea>
+          </label>
+          <div class="hm-channel-footnote">${t('engine.hermesPlatformToolsetsConfigFootnote')}</div>
+        </div>
+      </div>
+    `
+  }
+
  function renderAgentRuntimeConfigPanel() {
-    const disabled = loading || saving || agentRuntimeLoading || agentRuntimeSaving || agentToolsetsSaving || unauthorizedDmSaving || securitySaving || displaySaving || humanDelaySaving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || streamingSaving || executionLimitsSaving || ioSafetySaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || privacySaving || browserSaving || terminalSaving
+    const disabled = loading || saving || agentRuntimeLoading || agentRuntimeSaving || agentToolsetsSaving || platformToolsetsSaving || unauthorizedDmSaving || securitySaving || displaySaving || humanDelaySaving || runtimeSaving || compressionSaving || promptCachingSaving || toolGuardrailsSaving || memorySaving || skillsSaving || quickCommandsSaving || streamingSaving || executionLimitsSaving || ioSafetySaving || checkpointsSaving || cronSaving || loggingSaving || approvalsSaving || privacySaving || browserSaving || terminalSaving
    return `
      <div class="hm-panel hm-config-runtime-panel hm-config-agent-runtime-panel">
        <div class="hm-panel-header">
@@ -1536,6 +1570,7 @@ export function render() {
      ${renderSkillsConfigPanel()}
      ${renderQuickCommandsConfigPanel()}
      ${renderAgentToolsetsConfigPanel()}
+      ${renderPlatformToolsetsConfigPanel()}
      ${renderAgentRuntimeConfigPanel()}
      ${renderUnauthorizedDmConfigPanel()}
      ${renderSecurityConfigPanel()}
@@ -1568,6 +1603,7 @@ export function render() {
    el.querySelector('#hm-skills-config-save')?.addEventListener('click', saveSkillsConfig)
    el.querySelector('#hm-quick-commands-save')?.addEventListener('click', saveQuickCommandsConfig)
    el.querySelector('#hm-agent-toolsets-save')?.addEventListener('click', saveAgentToolsetsConfig)
+    el.querySelector('#hm-platform-toolsets-save')?.addEventListener('click', savePlatformToolsetsConfig)
    el.querySelector('#hm-agent-runtime-save')?.addEventListener('click', saveAgentRuntimeConfig)
    el.querySelector('#hm-unauthorized-dm-save')?.addEventListener('click', saveUnauthorizedDmConfig)
    el.querySelector('#hm-security-save')?.addEventListener('click', saveSecurityConfig)
@@ -1631,6 +1667,11 @@ export function render() {
    agentToolsetsValues = { ...AGENT_TOOLSETS_DEFAULTS, ...(data?.values || {}) }
  }

+  async function loadPlatformToolsetsConfig() {
+    const data = await api.hermesPlatformToolsetsConfigRead()
+    platformToolsetsValues = { ...PLATFORM_TOOLSETS_DEFAULTS, ...(data?.values || {}) }
+  }
+
  async function loadAgentRuntimeConfig() {
    const data = await api.hermesAgentRuntimeConfigRead()
    agentRuntimeValues = { ...AGENT_RUNTIME_DEFAULTS, ...(data?.values || {}) }
@@ -1721,6 +1762,7 @@ export function render() {
    skillsLoading = true
    quickCommandsLoading = true
    agentToolsetsLoading = true
+    platformToolsetsLoading = true
    agentRuntimeLoading = true
    unauthorizedDmLoading = true
    securityLoading = true
@@ -1746,6 +1788,7 @@ export function render() {
    skillsError = null
    quickCommandsError = null
    agentToolsetsError = null
+    platformToolsetsError = null
    agentRuntimeError = null
    unauthorizedDmError = null
    securityError = null
@@ -1922,6 +1965,14 @@ export function render() {
      agentToolsetsLoading = false
      draw()
    }
+    try {
+      await loadPlatformToolsetsConfig()
+    } catch (err) {
+      platformToolsetsError = humanizeError(err, t('engine.hermesPlatformToolsetsConfigLoadFailed') || 'Load platform toolsets config failed')
+    } finally {
+      platformToolsetsLoading = false
+      draw()
+    }
    try {
      await loadAgentRuntimeConfig()
    } catch (err) {
@@ -2007,6 +2058,9 @@ export function render() {
      try {
        await loadAgentToolsetsConfig()
      } catch {}
+      try {
+        await loadPlatformToolsetsConfig()
+      } catch {}
      try {
        await loadAgentRuntimeConfig()
      } catch {}
@@ -2283,6 +2337,31 @@ export function render() {
    }
  }

+  async function savePlatformToolsetsConfig() {
+    const form = {
+      platformToolsetsJson: el.querySelector('#hm-platform-toolsets-json')?.value || '{}',
+    }
+    platformToolsetsSaving = true
+    platformToolsetsError = null
+    draw()
+    try {
+      const result = await api.hermesPlatformToolsetsConfigSave(form)
+      platformToolsetsValues = { ...PLATFORM_TOOLSETS_DEFAULTS, ...(result?.values || form) }
+      await refreshRawAfterStructuredSave()
+      const backup = result?.backup || ''
+      toast({
+        message: t('engine.hermesPlatformToolsetsConfigSaveSuccess'),
+        hint: backup ? t('engine.hermesConfigBackupHint', { path: backup }) : '',
+      }, 'success')
+    } catch (err) {
+      platformToolsetsError = humanizeError(err, t('engine.hermesPlatformToolsetsConfigSaveFailed') || 'Save platform toolsets config failed')
+      toast(platformToolsetsError, 'error')
+    } finally {
+      platformToolsetsSaving = false
+      draw()
+    }
+  }
+
  async function saveAgentRuntimeConfig() {
    const form = {
      agentMaxTurns: el.querySelector('#hm-agent-max-turns')?.value || '90',
--- a/src/lib/tauri-api.js
+++ b/src/lib/tauri-api.js
@@ -525,6 +525,8 @@ export const api = {
  hermesQuickCommandsConfigSave: (form) => invoke('hermes_quick_commands_config_save', { form }),
  hermesAgentToolsetsConfigRead: () => invoke('hermes_agent_toolsets_config_read'),
  hermesAgentToolsetsConfigSave: (form) => invoke('hermes_agent_toolsets_config_save', { form }),
+  hermesPlatformToolsetsConfigRead: () => invoke('hermes_platform_toolsets_config_read'),
+  hermesPlatformToolsetsConfigSave: (form) => invoke('hermes_platform_toolsets_config_save', { form }),
  hermesAgentRuntimeConfigRead: () => invoke('hermes_agent_runtime_config_read'),
  hermesAgentRuntimeConfigSave: (form) => invoke('hermes_agent_runtime_config_save', { form }),
  hermesUnauthorizedDmConfigRead: () => invoke('hermes_unauthorized_dm_config_read'),
--- a/src/locales/modules/engine.js
+++ b/src/locales/modules/engine.js
@@ -775,6 +775,15 @@ export default {
  hermesAgentToolsetsConfigSaveFailed: _('保存全局工具集配置失败', 'Save global toolset settings failed', '儲存全域工具集設定失敗'),
  hermesAgentToolsetsConfigDisabledToolsets: _('禁用工具集（每行一个）', 'Disabled toolsets, one per line', '停用工具集（每行一個）'),
  hermesAgentToolsetsConfigFootnote: _('常见值包括 terminal、browser、memory、web。该设置会覆盖平台级工具配置；留空表示不做全局禁用。高级 agent 字段会保留在 raw YAML 中。', 'Common values include terminal, browser, memory, and web. This setting overrides platform-level tool configuration; leave it empty for no global disables. Advanced agent fields stay in raw YAML.', '常見值包括 terminal、browser、memory、web。此設定會覆蓋平台級工具設定；留空表示不做全域停用。進階 agent 欄位會保留在 raw YAML 中。'),
+  hermesPlatformToolsetsConfigTitle: _('平台工具集', 'Platform toolsets', '平台工具集'),
+  hermesPlatformToolsetsConfigDesc: _('为 CLI、Telegram、Discord、Slack 等入口指定可用工具集，适合按渠道收紧权限或接入自定义平台。', 'Set available toolsets for CLI, Telegram, Discord, Slack, and custom platforms. Useful for tightening permissions per channel.', '為 CLI、Telegram、Discord、Slack 等入口指定可用工具集，適合依渠道收緊權限或接入自訂平台。'),
+  hermesPlatformToolsetsConfigStatusReady: _('JSON 映射', 'JSON map', 'JSON 映射'),
+  hermesPlatformToolsetsConfigSave: _('保存平台工具集', 'Save platform toolsets', '儲存平台工具集'),
+  hermesPlatformToolsetsConfigSaveSuccess: _('平台工具集配置已保存，建议重启 Hermes Gateway 生效', 'Platform toolsets saved. Restart Hermes Gateway to take effect.', '平台工具集設定已儲存，建議重啟 Hermes Gateway 生效'),
+  hermesPlatformToolsetsConfigLoadFailed: _('加载平台工具集配置失败', 'Load platform toolsets failed', '載入平台工具集設定失敗'),
+  hermesPlatformToolsetsConfigSaveFailed: _('保存平台工具集配置失败', 'Save platform toolsets failed', '儲存平台工具集設定失敗'),
+  hermesPlatformToolsetsConfigJson: _('platform_toolsets JSON 映射', 'platform_toolsets JSON map', 'platform_toolsets JSON 映射'),
+  hermesPlatformToolsetsConfigFootnote: _('键名是平台名，例如 cli、telegram、discord。值必须是工具集数组，例如 ["hermes-cli"]；平台名和工具集名只能使用字母、数字、下划线、点和短横线。', 'Keys are platform names, for example cli, telegram, and discord. Values must be toolset arrays such as ["hermes-cli"]; names may only use letters, numbers, underscores, dots, and hyphens.', '鍵名是平台名，例如 cli、telegram、discord。值必須是工具集陣列，例如 ["hermes-cli"]；平台名和工具集名只能使用字母、數字、底線、點和短橫線。'),
  hermesAgentRuntimeConfigTitle: _('Agent 长跑保护', 'Agent runtime guards', 'Agent 長跑保護'),
  hermesAgentRuntimeConfigDesc: _('控制 Agent 轮次上限、Gateway 等待、重启排水、重试、超时预警、澄清等待和自动续跑新鲜度，减少长时间任务无人值守失控。', 'Control turn limits, Gateway waits, restart drain, retries, timeout warnings, clarification waits, and auto-continue freshness to keep unattended long runs bounded.', '控制 Agent 輪次上限、Gateway 等待、重啟排水、重試、逾時預警、澄清等待和自動續跑新鮮度，減少長時間任務無人值守失控。'),
  hermesAgentRuntimeConfigStatusReady: _('结构化配置', 'structured settings', '結構化設定'),