fix(computer-use): match computer_* tool names in capability gates (#579)

The native Computer Use catalog names its tools computer_*, but the
read-only role ceiling and the runtime-availability filter still matched
the retired desktop_* prefix. Explore and Verifier could therefore receive
computer_* tools, and the tools stayed listed when the Computer Use runtime
was unavailable.

Fixes #573

Co-authored-by: qinjiu <qinjiu@minimaxi.com>

Author: dyh-sjtu

packages/agent-tools/src/desktop/canonical-tool-policy.ts

@@ -19,9 +19,9 @@ const READ_ONLY_CANONICAL_BLOCKED_TOOL_NAMES = new Set([
   'request_feature_enable',
 ]);
 
-/** Computer-use tools share the desktop_* namespace across native and MCP paths. */
+/** Computer-use tools share the computer_* namespace across native and MCP paths. */
 export function isComputerUseRuntimeToolName(name: string): boolean {
-  return name.startsWith('desktop_');
+  return name.startsWith('computer_');
 }
 
 /**

packages/local-runtime-v2/src/service/turn-system/agent-host/assembly/local-turn-tool-catalog.ts

@@ -805,7 +805,7 @@ function isReadyTurnToolAllowed(input: {
   readonly profile: LocalTurnAgentProfileFacts | undefined;
 }): boolean {
   if (input.excludedNames.has(input.tool.def.name)) return false;
-  if (!isDesktopToolAvailable(input.tool, input.cuRuntimeAvailable)) return false;
+  if (!isComputerToolAvailable(input.tool, input.cuRuntimeAvailable)) return false;
   if (
     !input.selector.allowsTool(input.tool.def.name, input.options.selectorAlias, {
       featureOwned: isFeatureOwnedBuiltinTool(input.profile, input.tool.def.name, input.source),
@@ -844,8 +844,8 @@ function isFeatureOwnedBuiltinTool(
   );
 }
 
-function isDesktopToolAvailable(tool: RuntimeTool, cuRuntimeAvailable: boolean): boolean {
-  return cuRuntimeAvailable || !tool.def.name.startsWith('desktop_');
+function isComputerToolAvailable(tool: RuntimeTool, cuRuntimeAvailable: boolean): boolean {
+  return cuRuntimeAvailable || !tool.def.name.startsWith('computer_');
 }
 
 /** `mcpServers` applies to MCP tools only; without a server it fails closed. */