feat: import Chinese-localized Buzz source snapshot

Signed-off-by: cls_宁波本机 <908705107@qq.com>

desktop/src-tauri/src/commands/agent_providers.rs

@@ -0,0 +1,46 @@
+use crate::managed_agents::{discover_provider_candidates, invoke_provider, BackendProviderInfo};
+
+#[tauri::command]
+pub async fn discover_backend_providers() -> Result<Vec<BackendProviderInfo>, String> {
+    tokio::task::spawn_blocking(|| {
+        discover_provider_candidates()
+            .into_iter()
+            .map(|(id, path)| BackendProviderInfo {
+                id,
+                binary_path: path.display().to_string(),
+            })
+            .collect()
+    })
+    .await
+    .map_err(|e| format!("spawn_blocking failed: {e}"))
+}
+
+#[tauri::command]
+pub async fn probe_backend_provider(binary_path: String) -> Result<serde_json::Value, String> {
+    // Validate that the requested path is actually a discovered buzz-backend-* binary.
+    // This prevents arbitrary binary execution via a compromised frontend or IPC.
+    let candidates = discover_provider_candidates();
+    let path = std::path::PathBuf::from(&binary_path);
+    let canonical = path
+        .canonicalize()
+        .map_err(|e| format!("binary not found: {binary_path}: {e}"))?;
+    let is_known = candidates
+        .iter()
+        .any(|(_, p)| p.canonicalize().ok().as_ref() == Some(&canonical));
+    if !is_known {
+        return Err(format!(
+            "binary '{binary_path}' is not a discovered buzz-backend-* provider"
+        ));
+    }
+    // request_id is for provider-side logging — not validated in the response
+    // (stdin→stdout is 1:1 per process invocation).
+    let request = serde_json::json!({
+        "op": "info",
+        "request_id": uuid::Uuid::new_v4().to_string(),
+    });
+    tokio::task::spawn_blocking(move || {
+        invoke_provider(&canonical, &request, std::time::Duration::from_secs(10))
+    })
+    .await
+    .map_err(|e| format!("spawn_blocking failed: {e}"))?
+}