feat: enable WinRM terminal and AI foreground execution

Author: ibuler

ui/components/RightPanel/ai/AiRunStep.vue

@@ -23,10 +23,11 @@ const props = withDefaults(
     executionOverrides: ReadonlyMap<string, string>;
     executionMode: string;
     approvalMode: string;
+    ptyExec?: boolean;
     backgroundExec: boolean;
     readOnly?: boolean;
   }>(),
-  { expanded: undefined }
+  { expanded: undefined, ptyExec: true }
 );
 
 const emit = defineEmits<{
@@ -144,7 +145,7 @@ function statusIconClass() {
 }
 
 function selectedExecution(data: TerminalAiEventData) {
-  return terminalExecutionMode(props.executionOverrides.get(String(data.id)) || data.execution);
+  return terminalExecutionMode(props.executionOverrides.get(String(data.id)) || data.execution, props);
 }
 
 function executionLabel(value: unknown) {
@@ -247,6 +248,7 @@ function terminalRiskLabel(level: unknown) {
                     @click="emit('setExecutionOverride', String(execution.command?.id), 'auto')"
                   />
                   <UButton
+                    v-if="ptyExec"
                     size="xs"
                     color="neutral"
                     class="exec-group-btn"

ui/components/RightPanel/ai/domains/terminal/TerminalAiTimelineItem.vue

@@ -47,6 +47,7 @@ function setExecutionOverride(id: string, value: string) {
     :execution-overrides="terminalSession.executionOverrides"
     :execution-mode="terminalSession.executionMode"
     :approval-mode="terminalSession.approvalMode"
+    :pty-exec="terminalSession.ptyExec"
     :background-exec="terminalSession.backgroundExec"
     :read-only="readOnly"
     @decide="decide"

ui/components/RightPanel/ai/domains/terminal/adapter.ts

@@ -45,7 +45,7 @@ function handleDecision(session: KokoTerminalAiSession, action: Extract<AiTimeli
   if (!decisionId || session.decisions.has(decisionId)) return;
 
   const override = session.executionOverrides.get(decisionId);
-  const execution = terminalExecutionMode(override || action.data.execution);
+  const execution = terminalExecutionMode(override || action.data.execution, session);
   const toolCallId = String(action.data.toolCallId || "");
   if (action.approved && toolCallId && (override || execution !== "auto")) {
     session.executionOverrides.set(toolCallId, execution);
@@ -174,7 +174,8 @@ export const terminalAiPanelDomain: AiPanelDomainAdapter = {
         {
           label: context.t("RightPanel.AIModePtyShort"),
           description: context.t("RightPanel.AIModePty"),
-          value: "pty"
+          value: "pty",
+          disabled: !current.ptyExec
         },
         {
           label: context.t("RightPanel.AIModeBackgroundShort"),
@@ -253,8 +254,7 @@ export const terminalAiPanelDomain: AiPanelDomainAdapter = {
   updateExecutionMode(session, value) {
     const current = terminalSession(session);
     if (!current) return;
-    const mode = String(value || "auto");
-    current.executionMode = mode === "pty" || mode === "background" ? mode : "auto";
+    current.executionMode = terminalExecutionMode(value, current);
   },
 
   handleTimelineAction(session, action) {
@@ -265,7 +265,7 @@ export const terminalAiPanelDomain: AiPanelDomainAdapter = {
       return;
     }
     if (action.type === "set-execution-override") {
-      current.executionOverrides.set(action.id, action.value);
+      current.executionOverrides.set(action.id, terminalExecutionMode(action.value, current));
       return;
     }
     if (action.type === "set-step-expanded") {

ui/composables/useAssetAction.ts

@@ -1205,9 +1205,7 @@ export const useAssetAction = () => {
     getAssetDetailRequest(assetId)
       .then((assetDetail) => {
         const permedAccounts = assetDetail.permed_accounts ?? [];
-        const permedProtocols = (assetDetail.permed_protocols ?? []).filter(
-          (protocol: PermedProtocol) => protocol?.name !== "winrm"
-        );
+        const permedProtocols = assetDetail.permed_protocols ?? [];
 
         useEventBus().emit("assetDetailUpdated", {
           assetId,

ui/composables/useConnectionFormState.ts

@@ -348,9 +348,7 @@ export function useConnectionFormState() {
     return {
       ...asset,
       permedAccounts: detail.permed_accounts ?? asset.permedAccounts ?? [],
-      permedProtocols: (detail.permed_protocols ?? asset.permedProtocols ?? []).filter(
-        (protocol: PermedProtocol) => protocol?.name !== "winrm"
-      )
+      permedProtocols: detail.permed_protocols ?? asset.permedProtocols ?? []
     };
   };
 

ui/composables/useSessionWindowConnect.ts

@@ -100,7 +100,7 @@ export function toAdminAssetItem(
   const item = transformAssetDetail(assetId, {
     ...asset,
     permed_protocols: (asset.permed_protocols || asset.protocols || []).filter(
-      (protocol) => protocol?.name && protocol.name !== "winrm"
+      (protocol) => protocol?.name
     ) as AssetDetail["permed_protocols"],
     permed_accounts: [
       {

ui/composables/useSidebarAssetActions.ts

@@ -88,9 +88,7 @@ export function useSidebarAssetActions() {
     return {
       ...asset,
       permedAccounts: detail.permed_accounts ?? asset.permedAccounts ?? [],
-      permedProtocols: (detail.permed_protocols ?? asset.permedProtocols ?? []).filter(
-        (protocol: { name?: string }) => protocol?.name !== "winrm"
-      )
+      permedProtocols: detail.permed_protocols ?? asset.permedProtocols ?? []
     };
   };
 

ui/composables/useWorkspaceAssistantSession.test.ts

@@ -119,6 +119,17 @@ describe("Workspace Assistant capability", () => {
     expect(() => workspaceAssistantConnectionChoices(asset, "ssh", "missing")).toThrow("not authorized");
   });
 
+  it("offers an authorized WinRM connection to the assistant", () => {
+    const asset = {
+      permedProtocols: [{ name: "winrm", public: true }],
+      permedAccounts: [{ ...manualAccount, id: "windows-admin" }]
+    } as any;
+    expect(workspaceAssistantConnectionChoices(asset, "winrm", "windows-admin")).toMatchObject({
+      protocol: "winrm",
+      account: { id: "windows-admin" }
+    });
+  });
+
   it("notifies the timeline for every shallow AI SDK message update", () => {
     const message = {
       id: "assistant-1",

ui/composables/useWorkspaceAssistantSession.ts

@@ -535,7 +535,7 @@ function normalizeCandidate(value: unknown) {
 
 function uniqueProtocols(protocols: PermedProtocol[]) {
   const names = protocols
-    .filter((protocol) => protocol?.name !== "winrm" && (isDesktopRuntime() || protocol?.public !== false))
+    .filter((protocol) => isDesktopRuntime() || protocol?.public !== false)
     .map((protocol) => boundedString(protocol.name, 64).toLowerCase())
     .filter(Boolean);
   return [...new Set(names)];

ui/koko/composables/terminal/terminalCommandSuggestions.ts

@@ -228,6 +228,7 @@ const CASE_INSENSITIVE_PROFILES = new Set<KokoTerminalCommandProfile>([
 
 export function resolveTerminalCommandProfile(profile: ConnectorTerminalProfile = {}): KokoTerminalCommandProfile {
   const protocol = String(profile.protocol || "").toLowerCase();
+  if (protocol === "winrm") return "windows";
   if (protocol === "mariadb" || protocol === "mysql") return "mysql";
   if (protocol === "pg" || protocol === "postgres" || protocol === "postgresql") return "postgresql";
   if (["redis", "mongodb", "oracle", "dameng", "sqlserver"].includes(protocol)) {