feat(website): showcase intelligent coding capabilities

Author: claude

website/docs/v6.6.0/en/guide/tui.mdx

@@ -321,6 +321,56 @@ existing directory, and is created atomically with private permissions. Parent
 traversal, escaping symlinks, missing parent directories, and existing targets
 are rejected instead of overwriting or writing outside the workspace.
 
+## Code Intelligence
+
+The agent, TUI `/ide`, and A3S Web Monaco editor share one read-only Code
+Intelligence runtime. The current language profiles cover Rust and
+TypeScript/JavaScript. Install the matching `rust-analyzer` or
+`typescript-language-server` executable before starting `a3s code`. A missing
+server degrades only that language; it does not disable the editor, ordinary
+file tools, or another working language.
+
+Semantic results always describe files saved on disk. Unsaved editor buffers
+are never published to the shared runtime. The UI labels those results as the
+"saved version," and saving refreshes the workspace manifest and subsequent
+semantic queries.
+
+Press `:` inside `/ide` to use:
+
+| Command                  | Result                                                   |
+| ------------------------ | -------------------------------------------------------- |
+| `:status`                | Language state and negotiated capabilities.              |
+| `:symbols [query]`       | Current-file symbols or bounded workspace symbol search. |
+| `:definition`            | Definitions at the saved-file cursor position.           |
+| `:declaration`           | Declarations at the saved-file cursor position.          |
+| `:references`            | References at the saved-file cursor position.            |
+| `:implementations`       | Implementations at the saved-file cursor position.       |
+| `:diagnostics`           | Diagnostics for the current saved file.                  |
+| `:diagnostics workspace` | Bounded diagnostics across saved workspace files.        |
+
+The agent receives the same capability through `code_symbols`,
+`code_navigation`, and `code_diagnostics`. Source reads, text search, and
+mutations still go only through `read`, `grep`, `edit`, and `patch`; Code
+Intelligence does not create a second mutation path.
+
+## Cross-Session Context Recall
+
+When the local `ctx` index is installed and initialized, startup enables two
+recall tiers: long-term Memory for curated durable information, and `/ctx` for
+raw history across tools and sessions. Use it to recover prior decisions,
+commands, failures, and test evidence instead of deriving the same work again.
+
+| Command         | Behavior                                                                                   |
+| --------------- | ------------------------------------------------------------------------------------------ |
+| `/ctx <query>`  | Search the local session index and display up to eight selectable hits.                    |
+| `/ctx <n>`      | Pull a bounded window around hit n and attach it once to the next message.                 |
+| `/ctx save <n>` | Save the hit as episodic memory with `ctx_event_id` and `ctx_session_id` provenance links. |
+
+An attached transcript is control-character stripped, size-bounded, and quoted
+as untrusted historical reference. Instructions inside it do not become
+current user instructions. A promoted memory carries `source=ctx`, so the
+memory view can jump back to its originating event or session.
+
 ## Sessions And Safety
 
 Core session snapshots auto-save under
@@ -559,6 +609,25 @@ reports, and local loops keep working.
 Signed-in behavior adds A3S OS asset publication, runtime tools, trusted view
 links, and asset activity panels without changing the local-first TUI contract.
 
+The signed-in progressive capability API uses one permission-filtered endpoint
+and expands only as needed:
+
+```text
+list → search → describe → execute
+modules  find op   one schema   run it
+```
+
+The model discovers modules, searches operations, and loads the complete schema
+for only the operation it will call. An `execute` request with `shaped=true`
+can return a trusted `.view` or `viewUrl`, which becomes an inline `Open view`
+action in the TUI.
+
+Login also registers the `runtime` tool. It resolves a tool-kind worker by UUID
+or name, submits independent inputs as an A3S OS Function-as-a-Service batch,
+streams per-item progress, and returns aggregated results. When signed out, the
+tool is absent from the model registry; local files, shell, MCP, `task`,
+`parallel_task`, `dynamic_workflow`, Memory, and `/ctx` remain available.
+
 | Capability                           | Signed out                                                                                                                                                               | Signed in after `/login`                                                                                            |
 | ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------- |
 | Coding chat and workspace tools      | Available with local permission checks and HITL approval.                                                                                                                | Available with the same local safety path.                                                                          |

website/docs/v6.6.0/zh/guide/tui.mdx

@@ -192,6 +192,85 @@ TUI 将 `AgentSession::stream()` 视为事实来源。运行时事件驱动对
 这个分层对产品构建者很重要：TUI 只是运行时上方的一个有主张的客户端。
 SDK 嵌入方可以基于同样的会话、工具、事件、持久化与验证 API 构建不同控制面。
 
+## HITL 权限确认
+
+HITL 是执行边界，不是按工具名称粗略分类。Default 模式会让受约束的 Workspace
+文件修改和沙箱内普通命令保持流畅；显式主机 Shell、缺少沙箱时的 Shell、受保护控制
+元数据、修改型 Git 操作和带外部副作用的调用会在执行前暂停。Plan 模式拒绝修改，
+Auto 模式永远不会打开确认界面，无法证明安全的操作会直接失败。
+
+确认界面显示规范化后的真实参数，并提供四个明确决定：
+
+1. 仅允许这一次。
+2. 在当前会话中允许这一精确能力。
+3. 把这一精确能力规则写入项目的 `.a3s/permissions.acl`。
+4. 拒绝，并把原因返回给 Agent。
+
+`/permissions` 可以检查并撤销会话或项目授权。项目授权使用原子 ACL 重写；撤销只影响
+之后的检查，不会取消已经开始执行的工具。
+
+## 代码智能
+
+Agent、TUI `/ide` 和 A3S Web Monaco 共用一个只读代码智能运行时。目前支持 Rust 与
+TypeScript/JavaScript；启动 `a3s code` 前应安装对应的 `rust-analyzer` 或
+`typescript-language-server`。缺少某个语言服务只会让该语言显示为不可用或降级，
+不会关闭编辑器、普通文件工具或其他正常语言。
+
+语义结果始终基于磁盘上已保存的文件。未保存缓冲区不会发布给共享运行时，界面会明确
+显示“已保存版本”，保存后才刷新 Workspace 清单与语义结果。
+
+在 `/ide` 中按 `:` 后可使用：
+
+| 命令                     | 结果                                          |
+| ------------------------ | --------------------------------------------- |
+| `:status`                | 语言状态与协商后的能力。                      |
+| `:symbols [query]`       | 当前文件符号，或有上限的 Workspace 符号搜索。 |
+| `:definition`            | 光标位置的定义。                              |
+| `:declaration`           | 光标位置的声明。                              |
+| `:references`            | 光标位置的引用。                              |
+| `:implementations`       | 光标位置的实现。                              |
+| `:diagnostics`           | 当前已保存文件的诊断。                        |
+| `:diagnostics workspace` | 有上限的 Workspace 诊断。                     |
+
+Agent 通过 `code_symbols`、`code_navigation` 和 `code_diagnostics` 使用同一能力；
+源码读取、文本搜索和修改仍只经过 `read`、`grep`、`edit` 与 `patch`，代码智能不会创建
+第二条修改路径。
+
+## 跨会话上下文检索
+
+本地 `ctx` 已安装并完成索引时，TUI 在启动时启用两层召回：长期 Memory 保存经过筛选的
+稳定信息，`/ctx` 则搜索跨工具、跨会话的原始历史。它用于找回以前的决定、命令、错误
+和测试结果，而不是重新推断已经完成的工作。
+
+| 命令            | 行为                                                                 |
+| --------------- | -------------------------------------------------------------------- |
+| `/ctx <query>`  | 搜索本地会话索引，并显示最多八个可选择结果。                         |
+| `/ctx <n>`      | 拉取第 n 个结果附近的有界记录，并一次性附加到下一条消息。            |
+| `/ctx save <n>` | 保存为长期情节记忆，并保留 `ctx_event_id` 与 `ctx_session_id` 回链。 |
+
+附加的历史记录会去除终端控制字符、限制大小，并作为不可信引用文本包裹；其中旧指令不会被
+当成当前用户指令执行。保存到 Memory 的结果带有 `source=ctx` 来源，因此可以从记忆追溯
+到原始会话。
+
+## 渐进式 API 与 Runtime 工具
+
+这两项能力只在配置 A3S OS 并通过 `/login` 登录后出现。渐进式 API 使用一个按当前账号
+权限过滤的入口，按需执行：
+
+```text
+list → search → describe → execute
+模块    找操作    读单个 Schema   执行
+```
+
+模型先发现模块，再搜索操作，只为将要调用的那一个操作加载完整输入输出 Schema，因此
+无需把整个平台能力目录塞进会话上下文。`execute` 使用 `shaped=true` 时可以返回受信任
+视图，TUI 会把有效 `.view` 或 `viewUrl` 显示为内联“打开视图”操作。
+
+登录后注册的 `runtime` 工具用于 A3S OS Function as a Service 批执行。它按 UUID 或名称
+解析 tool-kind Worker，把相互独立的输入作为一个批任务提交，流式返回每项进度，最后
+聚合所有结果。未登录时该工具不会出现在模型工具列表中；本地文件、Shell、MCP、
+`task`、`parallel_task`、`dynamic_workflow`、Memory 与 `/ctx` 仍可正常使用。
+
 ## 斜杠命令
 
 内置斜杠命令包括：

website/scripts/check-built-site.mjs

@@ -48,6 +48,26 @@ for (const file of requiredFiles) {
   await access(path.join(outputRoot, file));
 }
 
+const capabilityMarkers = [
+  'a3s-capability-stories',
+  'HITL',
+  'PROGRESSIVE API',
+  'RUNTIME TOOL',
+  'CODE INTELLIGENCE',
+  'CTX RECALL',
+];
+
+for (const homepage of ['index.html', 'en/index.html']) {
+  const html = await readFile(path.join(outputRoot, homepage), 'utf8');
+  for (const marker of capabilityMarkers) {
+    if (!html.includes(marker)) {
+      throw new Error(
+        `${homepage} is missing homepage capability marker: ${marker}`,
+      );
+    }
+  }
+}
+
 const brokenReferences = [];
 const htmlFiles = await collectHtmlFiles(outputRoot);
 const referencePattern = /(?:href|src)="([^"]+)"/g;

website/scripts/check-doc-accuracy.mjs

@@ -87,6 +87,7 @@ const [
   pythonProject,
   rspressConfig,
   homeLayout,
+  tuiRuntimeDemo,
 ] = await Promise.all([
   readFile(path.join(repositoryRoot, 'core', 'Cargo.toml'), 'utf8'),
   readFile(path.join(repositoryRoot, 'sdk', 'node', 'package.json'), 'utf8'),
@@ -100,6 +101,10 @@ const [
     path.join(websiteRoot, 'theme', 'components', 'HomeLayout.tsx'),
     'utf8',
   ),
+  readFile(
+    path.join(websiteRoot, 'theme', 'components', 'TuiRuntimeDemo.tsx'),
+    'utf8',
+  ),
 ]);
 
 const sourceVersions = new Map([
@@ -160,7 +165,11 @@ if (JSON.stringify(versions) !== JSON.stringify(configuredVersions)) {
     `Rspress revisions are [${versions.join(', ')}], expected [${configuredVersions.join(', ')}].`,
   );
 }
-if (!homeLayout.includes(`a3s-code ${manifest.current}`)) {
+if (
+  ![homeLayout, tuiRuntimeDemo].some((source) =>
+    source.includes(`a3s-code ${manifest.current}`),
+  )
+) {
   fail(`The home page does not display a3s-code ${manifest.current}.`);
 }