feat: 升级至 v0.3.1 — 全量代码审计修复 + 安全增强

本次升级基于完整代码审查，修复 Critical/High/Medium/Low 四级共 96 项问题，
并通过返工审计修复 10 项遗留问题，tsc 双端类型检查零错误。

Critical (10/10 完成):
- C-4: command.ts 接入 shell-quote 进行 token-level 注入检测，替代原有正则匹配
  可防御 r"m" -rf /、$'rm'、$(echo rm) 等字符串拼接绕过

High (11/11 完成):
- 竞态保护、Promise.allSettled、AbortController 资源泄漏、IPC 参数校验等

Medium (55/55 完成):
- 事务保护、敏感数据脱敏、枚举校验、MUI v9 Stack prop 迁移、
  React 组件 cancelled 标志、类型收窄等

Low (20/20 完成):
- 辅助方法提取（flushToolCallBuffer/scoreAndPushMemory/tryAddColumn 等）
- nanoid 统一替代 Date.now()+Math.random()
- confirm() 替换为 MUI Dialog、useMemo 缓存、魔法数字命名化等

返工审计修复 (10/10 完成):
- L-11: LogsSettings 残留的原生 confirm()/alert() 全部替换为 MUI Dialog/Alert
- M-53: MemoryViewer handleSearch 独立 ref，修复 searching 状态卡死
- M-42: 脱敏短值（length <= 4）泄露修复
- M-47: tasks:update 补全 title/description 类型校验
- L-9: ollama.adapter 非流式路径 nanoid 统一
- M-45: audit:query limit 策略与 memory:listAll 一致化
- SettingsModal handleConfirmRemove 补全 try/catch + loadServers cleanup
- L-15: CommandPalette useMemo 补全 sessions 响应式依赖
- useAgentStream 事件类型补全 seq/timestamp 字段

新增依赖: shell-quote + @types/shell-quote
版本号: 0.3.0 -> 0.3.1

electron/harness/adapters/deepseek.adapter.ts

@@ -13,18 +13,43 @@
 import { BaseAdapter } from './base-adapter';
 import type { MetonaRequest, MetonaResponse, MetonaStreamEvent } from '../types';
 import { MetonaFinishReason, MetonaErrorCode } from '../types';
+import type { MetonaModelInfo } from '../types/metona-adapter';
 import { buildOpenAICompatibleMessages, buildOpenAICompatibleTools } from './shared/openai-format';
 import { parseSSEStream, parseOpenAICompatibleResponse } from './shared/sse-stream';
 
 export class DeepSeekAdapter extends BaseAdapter {
-  override readonly provider: string = 'deepseek';
+  // H-2 修复: provider → providerId（规范要求）
+  override readonly providerId: string = 'deepseek';
   readonly supportedModels = ['deepseek-v4-pro', 'deepseek-v4-flash'];
   readonly supportsToolCalling = true;
   readonly supportsThinking = true;
 
+  // H-2 修复: DeepSeek 模型元信息（1M 上下文，384K 最大输出）
+  private static readonly MODEL_INFO: Record<string, MetonaModelInfo> = {
+    'deepseek-v4-pro': {
+      id: 'deepseek-v4-pro',
+      name: 'DeepSeek V4 Pro',
+      contextWindow: 1_000_000,
+      maxOutputTokens: 384_000,
+      supportsToolCalling: true,
+      supportsThinking: true,
+      description: 'DeepSeek 旗舰模型，1M 上下文，支持深度推理与工具调用',
+    },
+    'deepseek-v4-flash': {
+      id: 'deepseek-v4-flash',
+      name: 'DeepSeek V4 Flash',
+      contextWindow: 1_000_000,
+      maxOutputTokens: 384_000,
+      supportsToolCalling: true,
+      supportsThinking: true,
+      description: 'DeepSeek 快速版，1M 上下文，低延迟推理',
+    },
+  };
+
   // ===== POST /chat/completions (非流式) =====
 
-  async chat(request: MetonaRequest): Promise<MetonaResponse> {
+  // H-2 修复: chat → send（规范要求）
+  async send(request: MetonaRequest): Promise<MetonaResponse> {
     const body = this.toNativeRequest(request, false);
 
     const response = await fetch(`${this.config.baseURL}/chat/completions`, {
@@ -35,7 +60,8 @@ export class DeepSeekAdapter extends BaseAdapter {
         ...this.config.headers,
       },
       body: JSON.stringify(body),
-      signal: AbortSignal.timeout(this.config.timeoutMs ?? 120_000),
+      // C-2 修复: 使用合并后的 signal（外部 abort + timeout）
+      signal: this.getFetchSignal(this.config.timeoutMs ?? 120_000),
     });
 
     if (!response.ok) {
@@ -44,12 +70,12 @@ export class DeepSeekAdapter extends BaseAdapter {
     }
 
     const data = await response.json() as Record<string, unknown>;
-    const parsed = parseOpenAICompatibleResponse(data, request.meta.requestId, this.provider, this.config.defaultModel);
+    const parsed = parseOpenAICompatibleResponse(data, request.meta.requestId, this.providerId, this.config.defaultModel);
 
     return {
       meta: {
         requestId: request.meta.requestId,
-        provider: this.provider,
+        provider: this.providerId,
         model: (data.model as string) ?? this.config.defaultModel,
         latencyMs: 0,
         timestamp: Date.now(),
@@ -64,7 +90,8 @@ export class DeepSeekAdapter extends BaseAdapter {
 
   // ===== POST /chat/completions (流式) =====
 
-  async *chatStream(request: MetonaRequest): AsyncIterable<MetonaStreamEvent> {
+  // H-2 修复: chatStream → sendStream（规范要求）
+  async *sendStream(request: MetonaRequest): AsyncIterable<MetonaStreamEvent> {
     const body = this.toNativeRequest(request, true);
 
     const response = await fetch(`${this.config.baseURL}/chat/completions`, {
@@ -75,7 +102,8 @@ export class DeepSeekAdapter extends BaseAdapter {
         ...this.config.headers,
       },
       body: JSON.stringify(body),
-      signal: AbortSignal.timeout(this.config.timeoutMs ?? 300_000),
+      // C-2 修复: 使用合并后的 signal（外部 abort + timeout）
+      signal: this.getFetchSignal(this.config.timeoutMs ?? 300_000),
     });
 
     if (!response.ok || !response.body) {
@@ -92,18 +120,40 @@ export class DeepSeekAdapter extends BaseAdapter {
 
   // ===== GET /models =====
 
-  async listModels(): Promise<string[]> {
+  /**
+   * H-2 修复: 返回 MetonaModelInfo[]（规范要求）
+   *
+   * 优先尝试从 API 获取实时模型列表，并合并本地 MODEL_INFO 元数据。
+   * API 不可用时回退到 supportedModels。
+   */
+  async listModels(): Promise<MetonaModelInfo[]> {
     try {
       const response = await fetch(`${this.config.baseURL}/models`, {
         headers: { Authorization: `Bearer ${this.config.apiKey}` },
         signal: AbortSignal.timeout(10_000),
       });
-      if (!response.ok) return this.supportedModels;
-      const data = await response.json() as { data?: Array<{ id: string }> };
-      return data.data?.map((m) => m.id) ?? this.supportedModels;
+      if (response.ok) {
+        const data = await response.json() as { data?: Array<{ id: string }> };
+        if (data.data?.length) {
+          // 合并 API 返回的模型 ID 与本地元数据
+          return data.data.map((m) => DeepSeekAdapter.MODEL_INFO[m.id] ?? { id: m.id });
+        }
+      }
     } catch {
-      return this.supportedModels;
+      // API 不可用时降级
     }
+    // 回退到 supportedModels（带本地元数据）
+    return this.supportedModels.map((id) => DeepSeekAdapter.MODEL_INFO[id] ?? { id });
+  }
+
+  /**
+   * H-2 修复: 获取上下文窗口大小（规范要求）
+   *
+   * DeepSeek 模型统一 1M 上下文窗口。
+   */
+  override getContextWindow(): number {
+    const modelInfo = DeepSeekAdapter.MODEL_INFO[this.config.defaultModel];
+    return modelInfo?.contextWindow ?? 1_000_000;
   }
 
   // ===== GET /user/balance =====