feat: MEMORY.md 访问保护、格式简化及预存问题修复

MEMORY.md 保护: 新建 file-guard.ts 共享守卫模块; read_file/write_file/search_files/run_command 禁止访问根目录 MEMORY.md; permissions.ts 增加 deniedPatterns 深度防御。格式简化: 元数据从 # 注释改为 > 引用语法; 校验规则从 6 条简化为 3 条; context-builder extractContent 适配。预存问题: 修复路径遍历前缀碰撞漏洞; 移除 browser_extract 内容截断; SearXNG 配置实时读取; web_search/web_fetch 移除截断; 侧边栏动态获取工具列表; 版本号 0.1.1

electron/harness/tools/built-in/command.ts

@@ -12,6 +12,7 @@ import { promisify } from 'util';
 import type { IMetonaTool, ToolExecutionContext } from '../../types/metona-tool';
 import type { MetonaToolDef } from '../../../harness/types';
 import { MetonaToolCategory, MetonaRiskLevel } from '../../../harness/types';
+import { commandTouchesProtectedFile } from './file-guard';
 
 const execAsync = promisify(exec);
 
@@ -83,6 +84,11 @@ export class RunCommandTool implements IMetonaTool {
   private validateCommand(command: string): { allowed: boolean; reason?: string } {
     const cmd = command.trim().toLowerCase();
 
+    // 受保护文件检查：禁止通过命令行读写工作空间根目录的 MEMORY.md
+    if (commandTouchesProtectedFile(command)) {
+      return { allowed: false, reason: 'Access denied: MEMORY.md is managed by the memory system and cannot be accessed via command execution' };
+    }
+
     // 硬阻止列表（绝对禁止执行）
     const hardBlocks = [
       { pattern: /\brm\b.*\//, reason: 'rm with absolute path is forbidden' },