fix(dashboard): simplify local isolation and improve usage documentation

[Soulter]

When local isolation is unavailable, users should still see execution and file-access controls that remain usable, with clear guidance for the unsupported combination. This PR simplifies those controls and provides linked setup documentation. It also organizes Usage around plugins and built-in AI, expands the plugin introduction for newcomers, and refreshes eight related guides in Chinese and English with current workflows and screenshots.

Modifications

• Keep execution and file scope visible when bubblewrap/Seatbelt is unavailable or fails, including native Windows. Hide network controls and disable unsupported workspace execution with a reason on hover or keyboard focus. Display saved policies without changing the form on load; host execution enables network when isolation is unavailable.

• Replace runtime cards, lock icons, and the startup warning with a compact underlined setup hint. The dialog includes an explanation, optional startup error details, and a localized documentation link. Update all four UI locales.

• Consolidate the Agent Sandbox guides into local and third-party environments, including platform setup, CUA tools, and localized permission screenshots.

• Organize Usage into Plugins (Plugins, MCP, Skills) and AstrBot Built-in AI (Agent Sandbox, SubAgent Orchestration, Proactive Capabilities, Web Search, Knowledge Base, Context Compression). Keep Built-in Commands before Plugins; rename CLI Commands to AstrBot CLI and Agent Runner to Agent Execution Mode. This changes documentation navigation, not the WebUI navigation layout.

• Remove the Function Calling guides and replace their Web Search references with an inline explanation. Preserve the remaining guide URLs and previous title anchors; redirect /use/computer.html to /use/astrbot-agent-sandbox.html and the corresponding English URLs. Document old-to-new mappings in the WebUI reference and changelog.

• Rewrite the Chinese and English plugin guides for newcomers: capabilities, first-install workflow, market selection, repository/ZIP installation, configuration scope, management, MCP/Skills comparison, troubleshooting, development, and publishing. Verify instructions against current routes, labels, and implementation.

• Refresh MCP, Skills, SubAgent, Proactive Capabilities, Web Search, Knowledge Base, Context Compression, and Custom Rules in both languages, adding 20 screenshots captured from the current WebUI with ego-browser. Explain prerequisites, first-use steps, configuration scope, verification, and troubleshooting. Correct stale behavior such as MCP connection on save, compression within tool loops, and knowledge-base retrieval modes.

• This is not a breaking change. Backend permission enforcement and sandbox detection are unchanged. The removed standalone Function Calling pages are intentionally no longer available.

Verification Steps and Test Results

• cd dashboard && pnpm typecheck — passed for the permission UI changes.
• uv run pytest tests/test_computer_config.py -q — 115 passed for the permission UI changes.
• cd docs && pnpm run docs:build — passed after the final documentation updates; existing bundle-size warning only.
• ruff format ., ruff check ., and git diff --check — passed.
• Component SSR checks covered permission combinations, disabled controls, and unchanged form state on load. Browser checks covered the isolation dialog and Chinese/English redirects; generated HTML checks verified redirect metadata, sidebar groups, renamed titles, and retained anchors. These checks did not add a committed test suite.
• Browser checks of both rewritten plugin guides verified headings, four tables per language, and working page anchors. All 26 internal documentation links resolve to existing source files.
• Audited all 16 refreshed pages in the browser: all 20 localized images loaded, image languages matched, and in-page anchors resolved. Independently checked 255 rendered internal links and 67 explicit retained anchors in generated HTML. Reviewed all 20 screenshots for legibility.
• Screenshot forms were left unsaved. A temporary local embedding provider and knowledge base used to display the upload dialog were deleted and their removal verified; the temporary server was stopped and the browser locale restored.
• Reviewed plugin installation/configuration handlers and locale labels, profile plugin selection, persona capabilities, and the publishing entry point against the new instructions.
• Permission matrix screenshots: Chinese and English.

Checklist

• New features have been discussed through issues or email.
• Changes have been tested, with verification steps and results above.
• Affected WebUI instructions and screenshots in docs/zh and docs/en are updated, with old-to-new mappings in the documentation and changelog.
• No new dependencies are introduced.
• No malicious code is introduced.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	astrbot-docs	b0a9033	Commit Preview URL Branch Preview URL	Oct 10 2026, 01:08 PM

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

Sourcery assessment

Needs a human reviewer. This changes the permission policy for Agent code execution, filesystem scope, and network access, including automatically forcing execution and networking when isolation is unavailable and the host scope is selected. If that decision is wrong, agents may immediately gain broader access or network capability than intended, and any commands, data access, or external effects that occur cannot be undone by reverting the change.

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook