feat: 升级至 v0.3.1 — 全量代码审计修复 + 安全增强

本次升级基于完整代码审查，修复 Critical/High/Medium/Low 四级共 96 项问题，
并通过返工审计修复 10 项遗留问题，tsc 双端类型检查零错误。

Critical (10/10 完成):
- C-4: command.ts 接入 shell-quote 进行 token-level 注入检测，替代原有正则匹配
  可防御 r"m" -rf /、$'rm'、$(echo rm) 等字符串拼接绕过

High (11/11 完成):
- 竞态保护、Promise.allSettled、AbortController 资源泄漏、IPC 参数校验等

Medium (55/55 完成):
- 事务保护、敏感数据脱敏、枚举校验、MUI v9 Stack prop 迁移、
  React 组件 cancelled 标志、类型收窄等

Low (20/20 完成):
- 辅助方法提取（flushToolCallBuffer/scoreAndPushMemory/tryAddColumn 等）
- nanoid 统一替代 Date.now()+Math.random()
- confirm() 替换为 MUI Dialog、useMemo 缓存、魔法数字命名化等

返工审计修复 (10/10 完成):
- L-11: LogsSettings 残留的原生 confirm()/alert() 全部替换为 MUI Dialog/Alert
- M-53: MemoryViewer handleSearch 独立 ref，修复 searching 状态卡死
- M-42: 脱敏短值（length <= 4）泄露修复
- M-47: tasks:update 补全 title/description 类型校验
- L-9: ollama.adapter 非流式路径 nanoid 统一
- M-45: audit:query limit 策略与 memory:listAll 一致化
- SettingsModal handleConfirmRemove 补全 try/catch + loadServers cleanup
- L-15: CommandPalette useMemo 补全 sessions 响应式依赖
- useAgentStream 事件类型补全 seq/timestamp 字段

新增依赖: shell-quote + @types/shell-quote
版本号: 0.3.0 -> 0.3.1

electron/services/session.service.ts

@@ -29,7 +29,8 @@ export interface MessageRow {
   id: string;
   session_id: string;
   role: string;
-  content: string;
+  // C-6 修复: content 允许 null — assistant 消息仅有 tool_calls 时为 null
+  content: string | null;
   reasoning_content: string | null;
   tool_calls: string | null;
   tool_result: string | null;
@@ -52,7 +53,8 @@ export interface SessionInfo {
 export interface MessageInfo {
   id: string;
   role: string;
-  content: string;
+  // C-6 修复: content 允许 null — assistant 消息仅有 tool_calls 时为 null
+  content: string | null;
   reasoningContent?: string;
   toolCalls?: unknown[];
   toolResult?: unknown;
@@ -192,7 +194,8 @@ export class SessionService {
   saveMessage(params: {
     sessionId: string;
     role: string;
-    content: string;
+    // C-6 修复: content 允许 null — assistant 消息仅有 tool_calls 时为 null
+    content: string | null;
     reasoningContent?: string;
     toolCalls?: unknown[];
     toolResult?: unknown;
@@ -311,14 +314,17 @@ export class SessionService {
   }
 
   private toMessageInfo(row: MessageRow): MessageInfo {
+    // M-55 修复: 运行时收窄，防止数据库被篡改或老版本数据格式不一致导致下游 .map/.length 崩溃
+    const parsedToolCalls = row.tool_calls ? this.safeJsonParse(row.tool_calls) : undefined;
+    const parsedAttachments = row.attachments ? this.safeJsonParse(row.attachments) : undefined;
     return {
       id: row.id,
       role: row.role,
       content: row.content,
       reasoningContent: row.reasoning_content ?? undefined,
-      toolCalls: row.tool_calls ? this.safeJsonParse(row.tool_calls) as unknown[] : undefined,
+      toolCalls: Array.isArray(parsedToolCalls) ? parsedToolCalls : undefined,
       toolResult: row.tool_result ? this.safeJsonParse(row.tool_result) : undefined,
-      attachments: row.attachments ? this.safeJsonParse(row.attachments) as unknown[] : undefined,
+      attachments: Array.isArray(parsedAttachments) ? parsedAttachments : undefined,
       iteration: row.iteration ?? undefined,
       timestamp: row.created_at,
     };