feat: v0.4.0 四阶段迭代 — 安全加固 + 工程基线 + 架构重构 + 双 Provider 扩展
P0 安全修复: - API Key 加密存储（safeStorage 密钥链，版本化前缀，历史明文平滑兼容） - 间接提示注入防护（SecurityScanHook 工具结果深扫描，网络工具脱敏/本地工具警示分级） - error:report IPC 断链修复（渲染进程错误上报落 electron-log + 审计） - abort 信号贯通工具层（run_command/dev-tools 子进程随会话中断终止） - run_command 沙箱加固（cd 系统目录/敏感文件读取拦截 + chcp 前缀剥离防解析退化） - .env 真实生效（dotenv 回退加载，应用内配置优先） P1 工程基础: - ESLint 9 flat config + 全部 34 条存量 warnings 清零（零容忍基线） - 测试基线 118 用例 11 文件（token/文件防护/权限/沙箱/注入/命令/引擎/注册表/审计链/摘要分层） - test:electron 双模式（ELECTRON_RUN_AS_NODE 跑 Electron ABI，SQLite 套件全执行） - SessionRecorder 多会话隔离 + 9 种 TRACE 事件补全（含最终轮 iteration_end） - Provider 故障转移（重试耗尽/不可重试一次性切换 fallback + 前端通知） - MCP 真就绪（等待全部连接完成再广播 tools:ready） - SLO/HealthChecker 真实接入（60s 巡检 + 托盘状态） - CONFIG_DEFAULTS 单一来源（消除 SEED 双源漂移） P2 架构升级: - handlers.ts 1940 行拆分为 13 个 IPC 域模块（防重入注册 + 多窗口广播） - AgentEngineManager 每会话独立引擎（LRU 30 + adapter 工厂隔离 abort 信号） - TaskOrchestrator EngineProvider 改造 + abortByParent 联动中断 SubAgent - 会话摘要分层上下文（session_summaries 滚动摘要 + 截断游标清理防因果污染） - 消息编辑重发/重新生成（truncateAfter IPC + store 动作 + UI） - Markdown 导出 / WebSearch 并行抓取（并发 3）/ 记忆 TF 缓存 / 版本构建期注入 P3 能力扩展: - OpenAI Adapter（o 系列推理模型 reasoning_effort/max_completion_tokens） - Anthropic Adapter（原生 Messages API：tool_use 块/角色合并/thinking budget/图片 base64/SSE 事件机） - 设置页/Onboarding 六 Provider 全链路接入
This commit is contained in:
@@ -0,0 +1,190 @@
|
||||
/**
|
||||
* IPC App Handlers — 应用工具域（P2-9 从 handlers.ts 拆分）
|
||||
*
|
||||
* 版本/路径查询、外部链接、文件夹选择、重启、SearXNG 连接测试、
|
||||
* 审计日志链验证/查询、渲染进程错误上报（P0-3 修复断链）。
|
||||
*/
|
||||
|
||||
import { ipcMain, shell, app, dialog } from 'electron';
|
||||
import type { IPCContext } from './context';
|
||||
import type { AuditEventType } from '../services/audit.service';
|
||||
import log from 'electron-log';
|
||||
|
||||
export function registerAppHandlers(ctx: IPCContext): void {
|
||||
const { mainWindow, auditService } = ctx;
|
||||
|
||||
ipcMain.handle('app:getVersion', async () => {
|
||||
return app.getVersion();
|
||||
});
|
||||
|
||||
ipcMain.handle('app:getAppDataPath', async () => {
|
||||
return app.getPath('userData');
|
||||
});
|
||||
|
||||
ipcMain.handle('app:openExternal', async (_event, url: unknown) => {
|
||||
// M-12 修复: URL 协议白名单校验，防止打开 file:///smb:// 等危险协议
|
||||
if (typeof url !== 'string' || !url) {
|
||||
return { success: false, error: 'Invalid URL' };
|
||||
}
|
||||
try {
|
||||
const parsed = new URL(url);
|
||||
const ALLOWED_PROTOCOLS = ['http:', 'https:', 'mailto:'];
|
||||
if (!ALLOWED_PROTOCOLS.includes(parsed.protocol)) {
|
||||
log.warn(`[IPC] openExternal blocked: protocol "${parsed.protocol}" not in whitelist`);
|
||||
return { success: false, error: `Protocol not allowed: ${parsed.protocol}` };
|
||||
}
|
||||
await shell.openExternal(url);
|
||||
return { success: true };
|
||||
} catch (error) {
|
||||
log.warn('[IPC] openExternal failed:', (error as Error).message);
|
||||
return { success: false, error: (error as Error).message };
|
||||
}
|
||||
});
|
||||
|
||||
ipcMain.handle('app:showItemInFolder', async (_event, path: unknown) => {
|
||||
// M-36 修复: path 类型校验
|
||||
if (typeof path !== 'string' || !path) {
|
||||
return { success: false, error: 'Invalid path' };
|
||||
}
|
||||
try {
|
||||
shell.showItemInFolder(path);
|
||||
return { success: true };
|
||||
} catch (error) {
|
||||
return { success: false, error: (error as Error).message };
|
||||
}
|
||||
});
|
||||
|
||||
ipcMain.handle('app:selectFolder', async (_event, defaultPath?: string) => {
|
||||
const result = await dialog.showOpenDialog(mainWindow, {
|
||||
properties: ['openDirectory', 'createDirectory'],
|
||||
defaultPath: defaultPath ?? app.getPath('home'),
|
||||
title: '选择工作空间目录',
|
||||
});
|
||||
if (result.canceled || result.filePaths.length === 0) return { canceled: true, path: '' };
|
||||
return { canceled: false, path: result.filePaths[0] };
|
||||
});
|
||||
|
||||
// 重启应用（工作空间切换后调用）
|
||||
ipcMain.handle('app:restart', async () => {
|
||||
log.info('[APP] Restart requested');
|
||||
// 延迟 200ms 让 IPC 响应先返回
|
||||
setTimeout(() => {
|
||||
app.relaunch();
|
||||
app.exit(0);
|
||||
}, 200);
|
||||
return { success: true };
|
||||
});
|
||||
|
||||
// ===== P0-3 修复: 渲染进程错误上报通道（原 preload 发送端存在但主进程无 handler，上报被静默丢弃） =====
|
||||
ipcMain.on('error:report', (_event, payload: unknown) => {
|
||||
try {
|
||||
if (!payload || typeof payload !== 'object') return;
|
||||
const p = payload as Record<string, unknown>;
|
||||
// 截断超长字段（stack 可达数十 KB），防止日志膨胀
|
||||
const truncateStr = (v: unknown, max = 4000): unknown =>
|
||||
typeof v === 'string' ? v.slice(0, max) : v;
|
||||
const details = {
|
||||
type: truncateStr(p.type, 100),
|
||||
error: truncateStr(p.error, 1000),
|
||||
stack: truncateStr(p.stack),
|
||||
componentStack: truncateStr(p.componentStack, 4000),
|
||||
timestamp: p.timestamp,
|
||||
};
|
||||
log.error('[Renderer Error]', JSON.stringify(details));
|
||||
// 同步写入审计日志（TOOL 层），便于事后追溯
|
||||
auditService.log({
|
||||
sessionId: '',
|
||||
eventType: 'error',
|
||||
actor: 'user',
|
||||
target: 'renderer',
|
||||
details,
|
||||
outcome: 'error',
|
||||
});
|
||||
} catch (err) {
|
||||
// 错误上报自身失败仅记录，不抛出（单向通道无响应方）
|
||||
log.warn('[IPC] error:report handler failed:', err);
|
||||
}
|
||||
});
|
||||
|
||||
// ===== SearXNG 连接测试 =====
|
||||
|
||||
ipcMain.handle('searxng:testConnection', async (_event, url: string, authKey: string, authType: string) => {
|
||||
try {
|
||||
if (!url || !/^https?:\/\//.test(url)) {
|
||||
return { success: false, error: 'URL 需以 http:// 或 https:// 开头' };
|
||||
}
|
||||
|
||||
const startTime = Date.now();
|
||||
const headers: Record<string, string> = {};
|
||||
|
||||
if (authKey) {
|
||||
if (authType === 'bearer') {
|
||||
headers['Authorization'] = `Bearer ${authKey}`;
|
||||
} else if (authType === 'basic') {
|
||||
headers['Authorization'] = `Basic ${Buffer.from(authKey).toString('base64')}`;
|
||||
}
|
||||
}
|
||||
|
||||
const testUrl = `${url.replace(/\/$/, '')}/search?q=test&format=json&pageno=1`;
|
||||
const response = await fetch(testUrl, {
|
||||
headers,
|
||||
signal: AbortSignal.timeout(10_000),
|
||||
});
|
||||
|
||||
const latencyMs = Date.now() - startTime;
|
||||
|
||||
if (response.ok) {
|
||||
return { success: true, statusCode: response.status, latencyMs };
|
||||
}
|
||||
return { success: false, statusCode: response.status, latencyMs, error: `HTTP ${response.status} ${response.statusText}` };
|
||||
} catch (error) {
|
||||
return { success: false, error: (error as Error).message };
|
||||
}
|
||||
});
|
||||
|
||||
// ===== v0.2.0: 审计日志链式哈希验证 =====
|
||||
|
||||
ipcMain.handle('audit:verifyChain', async () => {
|
||||
try {
|
||||
const result = auditService.verifyChain();
|
||||
log.info(`[AUDIT] Chain verification: ${result.valid ? 'valid' : 'TAMPERED'} (${result.verifiedRecords}/${result.totalRecords})`);
|
||||
return { success: true, ...result };
|
||||
} catch (error) {
|
||||
log.error('[AUDIT] Chain verification failed:', error);
|
||||
return { success: false, error: (error as Error).message };
|
||||
}
|
||||
});
|
||||
|
||||
ipcMain.handle('audit:query', async (_event, filters?: unknown) => {
|
||||
// M-45 修复: 校验 filters 参数类型和范围
|
||||
const VALID_AUDIT_EVENT_TYPES: readonly AuditEventType[] = [
|
||||
'tool_call', 'permission_check', 'error', 'llm_request',
|
||||
'llm_response', 'session_start', 'session_end', 'config_change',
|
||||
];
|
||||
const safeFilters: { sessionId?: string; eventType?: AuditEventType; limit?: number } = {};
|
||||
if (filters && typeof filters === 'object') {
|
||||
const f = filters as Record<string, unknown>;
|
||||
if (typeof f.sessionId === 'string' && f.sessionId) safeFilters.sessionId = f.sessionId;
|
||||
if (typeof f.eventType === 'string' && f.eventType) {
|
||||
// 校验 eventType 是否在合法枚举内
|
||||
if (!(VALID_AUDIT_EVENT_TYPES as readonly string[]).includes(f.eventType)) {
|
||||
return { success: false, error: `Invalid eventType (must be one of: ${VALID_AUDIT_EVENT_TYPES.join(', ')})` };
|
||||
}
|
||||
safeFilters.eventType = f.eventType as AuditEventType;
|
||||
}
|
||||
if (f.limit !== undefined) {
|
||||
const limit = Number(f.limit);
|
||||
// 限制 1-1000 范围，防止过大查询拖慢性能
|
||||
if (!Number.isFinite(limit) || limit < 1 || limit > 1000) {
|
||||
return { success: false, error: 'Invalid limit (must be 1-1000)' };
|
||||
}
|
||||
safeFilters.limit = Math.floor(limit);
|
||||
}
|
||||
}
|
||||
try {
|
||||
return { success: true, data: auditService.query(safeFilters) };
|
||||
} catch (error) {
|
||||
return { success: false, error: (error as Error).message };
|
||||
}
|
||||
});
|
||||
}
|
||||
Reference in New Issue
Block a user