feat: 添加MinIO文件系统支持并优化外部连接器功能

- 添加MinIO用户文件系统配置选项(BEAVER_MINIO_ROOT_USER等)
- 更新外部连接器配置结构，包括BASE_URL和认证令牌设置
- 改进connector provider支持更多类型(official, feishu_bot等)
- 实现Mistral模型推理模式支持reasoning_effort参数
- 增强外部连接器策略配置和运行时配置管理
- 添加connector bridge事件验证和安全保护机制
- 优化任务路由逻辑，区分simple_chat和new_task场景
- 更新初始技能工具提示配置，分离authoring admin功能

app-instance/create-instance.sh

@@ -19,6 +19,9 @@ AUTHZ_INTERNAL_TOKEN=""
 AUTHZ_OUTLOOK_MCP_URL=""
 OUTLOOK_MCP_SERVER_ID="${OUTLOOK_MCP_SERVER_ID:-outlook_mcp}"
 USER_FILES_MAX_UPLOAD_BYTES="${USER_FILES_MAX_UPLOAD_BYTES:-}"
+EXTERNAL_CONNECTOR_BASE_URL="${EXTERNAL_CONNECTOR_BASE_URL:-http://external-connector:8787}"
+EXTERNAL_CONNECTOR_TOKEN="${EXTERNAL_CONNECTOR_TOKEN:-}"
+BEAVER_BRIDGE_TOKEN="${BEAVER_BRIDGE_TOKEN:-}"
 BACKEND_ID=""
 CLIENT_ID=""
 CLIENT_SECRET=""
@@ -40,6 +43,7 @@ REGISTRY_PATH="${REGISTRY_PATH:-$REGISTRY_PATH_DEFAULT}"
 NETWORK_NAME="${NETWORK_NAME:-}"
 HOST_BIND_IP="${HOST_BIND_IP:-127.0.0.1}"
 INITIAL_SKILLS_DIR="${INITIAL_SKILLS_DIR:-${SCRIPT_DIR}/../skills}"
+INITIAL_SKILLS_EXCLUDE="${INITIAL_SKILLS_EXCLUDE:-officebench-mcp}"
 SEED_INITIAL_SKILLS=1
 FORCE_BUILD=0
 REPLACE=0
@@ -73,6 +77,11 @@ Optional:
                               Default Outlook MCP server id. Default: outlook_mcp
   --user-files-max-upload-bytes <bytes>
                               Optional max upload size for the user file system.
+  --external-connector-base-url <url>
+                              External connector sidecar URL. Default: http://external-connector:8787
+  --external-connector-token <token>
+                              Service token used for Beaver-to-sidecar requests.
+  --bridge-token <token>      Service token accepted from the connector bridge.
   --backend-id <id>           Pre-assigned backend id.
   --client-id <id>            Pre-assigned AuthZ client id.
   --client-secret <secret>    Pre-assigned AuthZ client secret.
@@ -299,6 +308,15 @@ data = {
                 "textBatchDelaySeconds": 0.5,
             },
         },
+        "terminal-dev": {
+            "enabled": True,
+            "kind": "terminal",
+            "mode": "websocket",
+            "accountId": "local",
+            "displayName": "Terminal Dev",
+            "config": {},
+            "secrets": {},
+        },
     },
 }
 
@@ -344,7 +362,7 @@ seed_initial_skills() {
   fi
 
   mkdir -p "$target_dir"
-  INITIAL_SKILLS_DIR="$initial_skills_dir" TARGET_DIR="$target_dir" python3 - <<'PY'
+  INITIAL_SKILLS_DIR="$initial_skills_dir" TARGET_DIR="$target_dir" INITIAL_SKILLS_EXCLUDE="$INITIAL_SKILLS_EXCLUDE" python3 - <<'PY'
 import json
 import shutil
 import os
@@ -352,10 +370,13 @@ from pathlib import Path
 
 initial = Path(os.environ["INITIAL_SKILLS_DIR"]).resolve()
 target = Path(os.environ["TARGET_DIR"]).resolve()
+excluded = {item.strip() for item in os.environ.get("INITIAL_SKILLS_EXCLUDE", "").split(",") if item.strip()}
 
 for child in sorted(initial.iterdir()):
     if child.name.startswith("."):
         continue
+    if child.name in excluded:
+        continue
     destination = target / child.name
     if destination.exists():
         continue
@@ -383,6 +404,8 @@ for index_name in ("published", "disabled"):
     merged = []
     for item in [*target_items, *initial_items]:
         text = str(item).strip()
+        if text in excluded:
+            continue
         if text and text not in merged:
             merged.append(text)
     target_index.parent.mkdir(parents=True, exist_ok=True)
@@ -534,6 +557,18 @@ while [[ $# -gt 0 ]]; do
       USER_FILES_MAX_UPLOAD_BYTES="${2:-}"
       shift 2
       ;;
+    --external-connector-base-url)
+      EXTERNAL_CONNECTOR_BASE_URL="${2:-}"
+      shift 2
+      ;;
+    --external-connector-token)
+      EXTERNAL_CONNECTOR_TOKEN="${2:-}"
+      shift 2
+      ;;
+    --bridge-token)
+      BEAVER_BRIDGE_TOKEN="${2:-}"
+      shift 2
+      ;;
     --backend-id)
       BACKEND_ID="${2:-}"
       shift 2
@@ -643,6 +678,16 @@ if [[ "$SKIP_PROVIDER_CONFIG" -ne 1 ]]; then
   esac
 fi
 
+if [[ -n "$INITIAL_SKILLS_DIR" ]]; then
+  INITIAL_SKILLS_DIR="$(INITIAL_SKILLS_DIR="$INITIAL_SKILLS_DIR" python3 - <<'PY'
+import os
+from pathlib import Path
+
+print(Path(os.environ["INITIAL_SKILLS_DIR"]).expanduser().resolve())
+PY
+)"
+fi
+
 if [[ -n "$BACKEND_ID$CLIENT_ID$CLIENT_SECRET" ]]; then
   [[ -n "$BACKEND_ID" && -n "$CLIENT_ID" && -n "$CLIENT_SECRET" ]] || die "backend identity requires --backend-id, --client-id and --client-secret together"
 fi
@@ -721,14 +766,29 @@ RUN_ARGS=(
   -e "APP_BACKEND_PORT=18080"
   -e "BEAVER_ENABLE_SELF_RESTART=1"
   -e "BEAVER_OUTLOOK_MCP_SERVER_ID=${OUTLOOK_MCP_SERVER_ID}"
+  -e "EXTERNAL_CONNECTOR_BASE_URL=${EXTERNAL_CONNECTOR_BASE_URL}"
   --label "beaver.instance.id=${INSTANCE_ID}"
   --label "beaver.instance.slug=${INSTANCE_SLUG}"
   --label "beaver.instance.public_url=${PUBLIC_URL}"
 )
 
+if [[ "$SEED_INITIAL_SKILLS" -eq 1 && -n "$INITIAL_SKILLS_DIR" ]]; then
+  RUN_ARGS+=(
+    -v "${INITIAL_SKILLS_DIR}:/opt/app/initial-skills:ro"
+    -e "BEAVER_INITIAL_SKILLS_DIR=/opt/app/initial-skills"
+    -e "BEAVER_INITIAL_SKILLS_EXCLUDE=${INITIAL_SKILLS_EXCLUDE}"
+  )
+fi
+
 if [[ -n "$USER_FILES_MAX_UPLOAD_BYTES" ]]; then
   RUN_ARGS+=(-e "BEAVER_USER_FILES_MAX_UPLOAD_BYTES=${USER_FILES_MAX_UPLOAD_BYTES}")
 fi
+if [[ -n "$EXTERNAL_CONNECTOR_TOKEN" ]]; then
+  RUN_ARGS+=(-e "EXTERNAL_CONNECTOR_TOKEN=${EXTERNAL_CONNECTOR_TOKEN}")
+fi
+if [[ -n "$BEAVER_BRIDGE_TOKEN" ]]; then
+  RUN_ARGS+=(-e "BEAVER_BRIDGE_TOKEN=${BEAVER_BRIDGE_TOKEN}")
+fi
 
 if [[ -n "$NETWORK_NAME" ]]; then
   RUN_ARGS+=(--network "$NETWORK_NAME")