feat: MEMORY.md 访问保护、格式简化及预存问题修复

MEMORY.md 保护: 新建 file-guard.ts 共享守卫模块; read_file/write_file/search_files/run_command 禁止访问根目录 MEMORY.md; permissions.ts 增加 deniedPatterns 深度防御。格式简化: 元数据从 # 注释改为 > 引用语法; 校验规则从 6 条简化为 3 条; context-builder extractContent 适配。预存问题: 修复路径遍历前缀碰撞漏洞; 移除 browser_extract 内容截断; SearXNG 配置实时读取; web_search/web_fetch 移除截断; 侧边栏动态获取工具列表; 版本号 0.1.1

electron/preload.ts

@@ -94,6 +94,12 @@ const metonaAPI = {
     clearAuditLogs: () => ipcRenderer.invoke('data:clearAuditLogs'),
   },
 
+  // ===== SearXNG =====
+  searxng: {
+    testConnection: (url: string, authKey: string, authType: string) =>
+      ipcRenderer.invoke('searxng:testConnection', url, authKey, authType),
+  },
+
   // ===== Toast 通知桥接 =====
   toast: {
     onShow: (callback: (data: { type: string; message: string; options?: unknown }) => void) => {
@@ -115,6 +121,6 @@ if (process.contextIsolated) {
   }
 } else {
   // 降级方案（不推荐）
-  (window as unknown as Record<string, unknown>).electron = electronAPI;
-  (window as unknown as Record<string, unknown>).metona = metonaAPI;
+  (globalThis as unknown as Record<string, unknown>).electron = electronAPI;
+  (globalThis as unknown as Record<string, unknown>).metona = metonaAPI;
 }