feat: expand secure assistant workflows

Harden runtime execution and add local knowledge, Smart Heartbeat, usage visibility, responsive product surfaces, and cross-platform packaging support.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

src/main/agent/runtime-discovery.test.ts

@@ -1,5 +1,6 @@
 import { realpath } from 'node:fs/promises'
 import { basename, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
 import { afterEach, describe, expect, it } from 'vitest'
 import {
   detectAgentRuntimes,
@@ -105,6 +106,26 @@ describe('runtime discovery', () => {
     expect(detection.detail).toContain('内置')
   })
 
+  it('allows a bundled script to defer execution validation to its host adapter', async () => {
+    process.env.PATH = ''
+    process.env.Path = ''
+    const bundledScript = fileURLToPath(import.meta.url)
+
+    const detection = await detectRuntimeBinary({
+      binaryPath: '',
+      bundledPath: bundledScript,
+      bundledValidation: 'canonical-file',
+      binaryNames: ['goodbuddy-runtime-that-does-not-exist'],
+      label: 'Script Runtime'
+    })
+
+    expect(detection).toMatchObject({
+      available: true,
+      path: await realpath(bundledScript)
+    })
+    expect(detection.detail).toBe('内置 Script Runtime 已就绪')
+  })
+
   it('returns both runtime detections without exposing PATH contents', async () => {
     const privatePathValue = `${dirname(process.execPath)}-private-path-value`
     process.env.PATH = privatePathValue