feat: 升级至 v0.3.0 — 安全增强、死循环检测、六轮全面审计修复
大版本迭代,新增安全增强、Agent Loop 增强、UI/UX 增强,经六轮全面审计修复所有问题。
新增功能:
- OutputValidator 事实一致性检查 + 幻觉检测
- PromptInjectionDefender 语义级检测(指令性动词密度、角色边界、分隔符嵌套)
- DeadLoopError 死循环检测(连续3轮相同工具调用自动终止)
- PolicyEngine maxFrequency 滑动窗口频率限制
- MemoryManager TF-IDF 语义检索 + IDF 缓存原子替换
- 斜杠命令(/tool /memory /clear /export)+ 快捷键(Ctrl+B/J/Shift+F/N/[/])
- 专注模式(Ctrl+Shift+F)带面板状态快照保存/恢复
六轮审计修复(共修复 3 CRITICAL + 8 HIGH + 13 MEDIUM + 11 LOW):
CRITICAL:
- main.ts 传入 createAdapter 而非 reloadAdapter,导致 Provider 切换完全失效
- Ctrl+N/Ctrl+[/Ctrl+] 不同步 agent-store,导致消息发到错误会话
- engine.ts emit('error') 无监听器导致 DONE 事件丢失、前端卡死
HIGH:
- 死循环检测在工具执行之后(移入 PARSING 后 EXECUTING 前)
- deadLoop 事件前端未处理
- ConfirmationHook.clearPending 从未调用导致定时器泄漏
- engine.ts retry abort listener 未移除导致监听器堆积
- MCPManager JSON.parse 无 try-catch 导致初始化崩溃
- sendMessage 自动创建会话不同步 session-store
- setCurrentSession 竞态导致旧请求覆盖新会话数据
MEDIUM:
- toggleFocusMode 覆盖用户原有面板状态
- 正则检测可被常见词绕过
- 频率限制内存泄漏 + customPolicies 覆盖
- LIKE 回退转义未包含反斜杠
- OutputValidator 新功能未传入 toolResults/context
- MemoryConsolidator LLM 调用无超时保护
- AuditService 每次 log 都查询数据库
- browser-window-manager 超时后未停止页面加载
- output-validator URL 比较大小写敏感
- FileReader 无 onerror 导致 Promise 永久挂起
- /clear /export 不关闭斜杠菜单
- 专注模式下 toggleSidebar/toggleDetail 未恢复另一面板快照
LOW:
- abortPromise 事件监听器堆积
- RateLimitHook Map 内存泄漏
- memory.ts await 同步方法
- PolicyEngine 死代码清理
- Orchestrator sessionDepth 会话结束不清理
- workspace.service.ts 元数据插入边界问题
This commit is contained in:
@@ -2,9 +2,10 @@
|
||||
* DetailPanel — 右侧详情面板
|
||||
*
|
||||
* 通过 Tab 切换显示 Trace / Memory / Tasks / Workspace。
|
||||
*
|
||||
* v0.3.0: Tab 状态提升到 ui-store,支持斜杠命令切换标签。
|
||||
*/
|
||||
|
||||
import { useState } from 'react';
|
||||
import { Box, Tabs, Tab } from '@mui/material';
|
||||
import { Activity, Brain, ListChecks, FolderOpen } from 'lucide-react';
|
||||
import { TraceViewer } from '@renderer/components/trace/TraceViewer';
|
||||
@@ -15,11 +16,16 @@ import { TaskList } from '@renderer/components/tasks/TaskList';
|
||||
import { WorkspaceViewer } from '@renderer/components/workspace/WorkspaceViewer';
|
||||
import { ErrorBoundary } from '@renderer/components/common/ErrorBoundary';
|
||||
import { LAYOUT } from '@renderer/lib/constants';
|
||||
|
||||
type DetailTab = 'trace' | 'memory' | 'tasks' | 'workspace';
|
||||
import { useUIStore, type DetailTab } from '@renderer/stores/ui-store';
|
||||
|
||||
export function DetailPanel(): React.JSX.Element {
|
||||
const [tab, setTab] = useState<DetailTab>('trace');
|
||||
// v0.3.0: 从 ui-store 获取 tab 状态(支持斜杠命令切换)
|
||||
const tab = useUIStore((s) => s.detailTab);
|
||||
const setTab = useUIStore((s) => s.setDetailTab);
|
||||
|
||||
// v0.3.0 修复:验证 tab 值有效性,非预期值回退到 'trace'
|
||||
const validTabs: DetailTab[] = ['trace', 'memory', 'tasks', 'workspace'];
|
||||
const safeTab: DetailTab = validTabs.includes(tab) ? tab : 'trace';
|
||||
|
||||
return (
|
||||
<Box
|
||||
@@ -30,8 +36,13 @@ export function DetailPanel(): React.JSX.Element {
|
||||
}}
|
||||
>
|
||||
<Tabs
|
||||
value={tab}
|
||||
onChange={(_, v) => setTab(v as DetailTab)}
|
||||
value={safeTab}
|
||||
onChange={(_, v) => {
|
||||
// v0.3.0 修复:类型安全检查,只接受有效的 tab 值
|
||||
if (typeof v === 'string' && validTabs.includes(v as DetailTab)) {
|
||||
setTab(v as DetailTab);
|
||||
}
|
||||
}}
|
||||
variant="fullWidth"
|
||||
sx={{
|
||||
minHeight: 32, height: 32, flexShrink: 0,
|
||||
@@ -47,7 +58,7 @@ export function DetailPanel(): React.JSX.Element {
|
||||
</Tabs>
|
||||
|
||||
<Box sx={{ p: 1.5, flex: 1, display: 'flex', flexDirection: 'column', overflow: 'hidden', minHeight: 0 }}>
|
||||
{tab === 'trace' && (
|
||||
{safeTab === 'trace' && (
|
||||
<ErrorBoundary fallbackTitle="Trace 渲染失败">
|
||||
<>
|
||||
<TraceViewer />
|
||||
@@ -56,17 +67,17 @@ export function DetailPanel(): React.JSX.Element {
|
||||
</>
|
||||
</ErrorBoundary>
|
||||
)}
|
||||
{tab === 'memory' && (
|
||||
{safeTab === 'memory' && (
|
||||
<ErrorBoundary fallbackTitle="Memory 渲染失败">
|
||||
<MemoryViewer />
|
||||
</ErrorBoundary>
|
||||
)}
|
||||
{tab === 'tasks' && (
|
||||
{safeTab === 'tasks' && (
|
||||
<ErrorBoundary fallbackTitle="Tasks 渲染失败">
|
||||
<TaskList />
|
||||
</ErrorBoundary>
|
||||
)}
|
||||
{tab === 'workspace' && (
|
||||
{safeTab === 'workspace' && (
|
||||
<ErrorBoundary fallbackTitle="Workspace 渲染失败">
|
||||
<WorkspaceViewer />
|
||||
</ErrorBoundary>
|
||||
|
||||
Reference in New Issue
Block a user