thzxx
26169b7be4
P1 修复面收口: /clear 全链路根治(前端清空联动 DB messages+摘要游标+TRACE 快照, IPC 语义改"操作完成"; 流式中拒绝); web_browser open 补 SSRF 校验(Chromium 旁路关闭, 与 web_fetch/http_request 同源 validateSSRF); MCP 工具结果纳入注入扫描(mcp_* 前缀 按网络来源同级 full 模式, 收敛 resolveScanMode 单点); Trace 落库/入 store 双重瘦身 (tool_result base64/超长字段剥离, metadata 防 MB 级膨胀); 文本附件 512KB 闸门 (file.slice 首段读取+truncated 标志随消息持久化+主进程附件提示感知截断); 单实例锁(requestSingleInstanceLock + second-instance 聚焦已有窗口) P2 安全纵深: ConfirmationHook 多窗口化(确认请求/超时提示改全窗口广播, getAllWindows 空时回退 mainWindow, fail-closed 判定升级双通道); mcp_servers.headers 全链路接线(safeParseHeaders 容错解析+SSE/StreamableHTTP requestInit 注入+IPC 逐项 校验+设置页 JSON 输入, 远程 MCP 鉴权头可用) P3 断链接线: llm:listModels IPC(六家 adapter 动态模型发现首次接线, 配置完整性 前置校验); Ollama pullModel IPC+设置页下载卡片(进度/取消/能力徽标, v0.7.0 死代码 激活); 后台会话运行指示(sessionRunStates 图+Sidebar 状态点, 多会话并发可见); IR 卫生(移除 THINKING_START/END 死枚举, constraints 标注预留) P4 质量与文档: i18n 第二阶段(确认弹框/侧栏/状态栏/AgentMonitor/终止原因出层, 外观设置 zh-CN/en-US 切换, ui.locale 持久化, 渲染时求值规避异步注册); README/D1 文档对齐(http_request 风险等级/用例数/实现状态注记); 版本号 0.7.2 测试: 507 → 737 用例(+230, 11 个新文件)。覆盖补齐: context-builder/consolidator/ orchestrator/workspace.service/session-recorder/config-layering/secure-config/ network-proxy + IPC mcp/tasks/memory/app/data 域 + 渲染层 store 与流事件管线纯函数。 测试驱动修复: workspace.appendMemory 中文分区 \b 词边界失效(JS \b 不含 CJK), 固化条目恒追加文件末尾产生重复分区头 → (?=\n|$) 前瞻断言根治 回归: typecheck 双端 0 错误; ESLint 0/0; 系统 Node 687 通过 50 跳过; Electron ABI 全量 737/737 零跳过
402 lines
17 KiB
TypeScript
402 lines
17 KiB
TypeScript
/**
|
||
* MetonaAI Desktop — Preload 脚本
|
||
*
|
||
* 通过 contextBridge 安全地将 IPC 通道暴露给渲染进程。
|
||
* 渲染进程无 Node.js 访问权限，只能通过此桥接层通信。
|
||
*/
|
||
|
||
import { contextBridge, ipcRenderer } from 'electron';
|
||
import { electronAPI } from '@electron-toolkit/preload';
|
||
|
||
/**
|
||
* Metona API — 暴露给渲染进程的安全接口
|
||
*/
|
||
const metonaAPI = {
|
||
// ===== Agent 交互 =====
|
||
agent: {
|
||
/** 发送用户消息 */
|
||
sendMessage: (message: unknown, sessionId: string) =>
|
||
ipcRenderer.invoke('agent:sendMessage', message, sessionId),
|
||
/** 监听流式事件 */
|
||
onStreamEvent: (callback: (event: unknown) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: unknown) => callback(data);
|
||
ipcRenderer.on('agent:streamEvent', listener);
|
||
return () => ipcRenderer.removeListener('agent:streamEvent', listener);
|
||
},
|
||
/** 监听状态变化 */
|
||
onStateChange: (callback: (state: unknown) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: unknown) => callback(data);
|
||
ipcRenderer.on('agent:stateChange', listener);
|
||
return () => ipcRenderer.removeListener('agent:stateChange', listener);
|
||
},
|
||
/** 中断会话 */
|
||
abortSession: (sessionId: string) => ipcRenderer.invoke('agent:abortSession', sessionId),
|
||
/** 监听 Provider 切换通知 */
|
||
onProviderSwitched: (callback: (data: unknown) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: unknown) => callback(data);
|
||
ipcRenderer.on('agent:providerSwitched', listener);
|
||
return () => ipcRenderer.removeListener('agent:providerSwitched', listener);
|
||
},
|
||
/** v0.5.0: 监听 SubAgent 生命周期事件（委派/运行/完成/失败） */
|
||
onSubAgentEvent: (callback: (event: unknown) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: unknown) => callback(data);
|
||
ipcRenderer.on('subagent:event', listener);
|
||
return () => ipcRenderer.removeListener('subagent:event', listener);
|
||
},
|
||
},
|
||
|
||
// ===== 会话管理 =====
|
||
sessions: {
|
||
list: () => ipcRenderer.invoke('sessions:list'),
|
||
create: (title?: string) => ipcRenderer.invoke('sessions:create', title),
|
||
rename: (sessionId: string, title: string) =>
|
||
ipcRenderer.invoke('sessions:rename', sessionId, title),
|
||
delete: (sessionId: string) => ipcRenderer.invoke('sessions:delete', sessionId),
|
||
getMessages: (sessionId: string) => ipcRenderer.invoke('sessions:getMessages', sessionId),
|
||
pin: (sessionId: string, pinned: boolean) =>
|
||
ipcRenderer.invoke('sessions:pin', sessionId, pinned),
|
||
archive: (sessionId: string, archived: boolean) =>
|
||
ipcRenderer.invoke('sessions:archive', sessionId, archived),
|
||
deleteMessage: (messageId: string) => ipcRenderer.invoke('sessions:deleteMessage', messageId),
|
||
clearMessages: (sessionId: string) => ipcRenderer.invoke('sessions:clearMessages', sessionId),
|
||
/** P2-11: 截断消息（编辑重发/重新生成——删除锚点消息之后的所有消息） */
|
||
truncateAfter: (sessionId: string, messageId: string, inclusive?: boolean) =>
|
||
ipcRenderer.invoke('sessions:truncateAfter', sessionId, messageId, inclusive),
|
||
/** v0.5.0: 全文搜索会话内容（FTS5，跨会话，按会话聚合） */
|
||
searchContent: (query: string) =>
|
||
ipcRenderer.invoke('sessions:searchContent', query) as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
data?: Array<{
|
||
sessionId: string;
|
||
sessionTitle: string;
|
||
matchCount: number;
|
||
lastMessageId: string;
|
||
lastRole: string;
|
||
snippet: string;
|
||
timestamp: number;
|
||
}>;
|
||
}>,
|
||
saveTrace: (sessionId: string, data: unknown) =>
|
||
ipcRenderer.invoke('sessions:saveTrace', sessionId, data),
|
||
getTrace: (sessionId: string) => ipcRenderer.invoke('sessions:getTrace', sessionId),
|
||
},
|
||
|
||
// ===== MCP 管理 =====
|
||
mcp: {
|
||
listServers: () => ipcRenderer.invoke('mcp:listServers'),
|
||
addServer: (config: unknown) => ipcRenderer.invoke('mcp:addServer', config),
|
||
removeServer: (name: string) => ipcRenderer.invoke('mcp:removeServer', name),
|
||
toggleServer: (name: string, enabled: boolean) =>
|
||
ipcRenderer.invoke('mcp:toggleServer', name, enabled),
|
||
},
|
||
|
||
// ===== 记忆系统 =====
|
||
memory: {
|
||
search: (query: string, options?: unknown) =>
|
||
ipcRenderer.invoke('db:searchMemories', query, options),
|
||
listAll: (options?: { type?: string; limit?: number }) =>
|
||
ipcRenderer.invoke('memory:listAll', options),
|
||
delete: (type: string, id: string) => ipcRenderer.invoke('memory:delete', type, id),
|
||
},
|
||
|
||
// ===== v0.2.0: 任务管理 =====
|
||
tasks: {
|
||
list: (sessionId?: string) => ipcRenderer.invoke('tasks:list', sessionId),
|
||
create: (data: {
|
||
sessionId: string;
|
||
title: string;
|
||
description?: string;
|
||
priority?: string;
|
||
parentId?: string;
|
||
}) => ipcRenderer.invoke('tasks:create', data),
|
||
update: (
|
||
id: string,
|
||
updates: {
|
||
title?: string;
|
||
description?: string;
|
||
status?: string;
|
||
priority?: string;
|
||
assignedTo?: string;
|
||
},
|
||
sessionId: string,
|
||
) => ipcRenderer.invoke('tasks:update', id, updates, sessionId),
|
||
delete: (id: string, sessionId: string) => ipcRenderer.invoke('tasks:delete', id, sessionId),
|
||
// P2（v0.3.13）: 订阅任务变更事件（Agent 通过 task_manager 写入后触发）
|
||
onTaskChanged: (callback: (sessionId: string) => void) => {
|
||
const listener = (_event: unknown, sessionId: string): void => callback(sessionId);
|
||
ipcRenderer.on('task:changed', listener);
|
||
return () => ipcRenderer.removeListener('task:changed', listener);
|
||
},
|
||
},
|
||
|
||
// ===== v0.2.0: 审计日志 =====
|
||
audit: {
|
||
verifyChain: () => ipcRenderer.invoke('audit:verifyChain'),
|
||
query: (filters?: { sessionId?: string; eventType?: string; limit?: number }) =>
|
||
ipcRenderer.invoke('audit:query', filters),
|
||
/** v0.5.0: 导出审计日志（jsonl / csv 两种格式） */
|
||
export: (format: 'jsonl' | 'csv') =>
|
||
ipcRenderer.invoke('audit:export', format) as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
data?: string;
|
||
format?: string;
|
||
recordCount?: number;
|
||
}>,
|
||
},
|
||
|
||
// ===== v0.2.0: 工具确认请求 =====
|
||
tool: {
|
||
onConfirmationRequest: (callback: (request: unknown) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: unknown) => callback(data);
|
||
ipcRenderer.on('tool:confirmationRequest', listener);
|
||
return () => ipcRenderer.removeListener('tool:confirmationRequest', listener);
|
||
},
|
||
sendConfirmationResponse: (response: {
|
||
toolCallId: string;
|
||
approved: boolean;
|
||
remember: boolean;
|
||
autoExecute?: boolean;
|
||
}) => ipcRenderer.send('tool:confirmationResponse', response),
|
||
// v0.3.2: 批量确认响应（并行工具一次性审批）
|
||
sendConfirmationResponseBatch: (response: {
|
||
toolCallIds: string[];
|
||
approved: boolean;
|
||
remember: boolean;
|
||
autoExecute?: boolean;
|
||
}) => ipcRenderer.send('tool:confirmationResponseBatch', response),
|
||
// v0.3.2: 拉取当前所有 pending 确认（前端弹框打开时调用，防止 state 覆盖丢失）
|
||
getPendingConfirmations: () =>
|
||
ipcRenderer.invoke('tool:getPendingConfirmations') as Promise<{
|
||
success: boolean;
|
||
data: Array<{
|
||
toolCallId: string;
|
||
toolName: string;
|
||
args: Record<string, unknown>;
|
||
riskLevel: string;
|
||
reason: string;
|
||
sessionId?: string;
|
||
expiresAt?: number;
|
||
}>;
|
||
}>,
|
||
// v0.4.1: 会话内拒绝记忆管理（拒绝记忆 10 分钟 TTL，支持手动恢复询问）
|
||
// v0.5.0: sessionId 参数 — 拒绝记忆按会话隔离，传当前会话只查看/重置本会话的记忆
|
||
getRememberedDenials: (sessionId?: string) =>
|
||
ipcRenderer.invoke('tool:getRememberedDenials', sessionId) as Promise<{
|
||
success: boolean;
|
||
data: Array<{ toolName: string; expiresInSeconds: number }>;
|
||
}>,
|
||
resetRememberedDenial: (toolName: string, sessionId?: string) =>
|
||
ipcRenderer.invoke('tool:resetRememberedDenial', toolName, sessionId) as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
}>,
|
||
// v0.2.0: 持久化自动执行设置
|
||
setAutoExecute: (toolName: string, enabled: boolean) =>
|
||
ipcRenderer.invoke('tool:setAutoExecute', toolName, enabled),
|
||
getAutoExecuteList: () => ipcRenderer.invoke('tool:getAutoExecuteList'),
|
||
},
|
||
|
||
// ===== 配置 =====
|
||
config: {
|
||
get: (key: string) => ipcRenderer.invoke('config:get', key),
|
||
set: (key: string, value: unknown) => ipcRenderer.invoke('config:set', key, value),
|
||
// v0.3.9: 批量保存配置，避免串行保存中间态触发 reloadAdapter 失败
|
||
setBatch: (entries: Array<{ key: string; value: unknown }>) =>
|
||
ipcRenderer.invoke('config:setBatch', entries),
|
||
// v0.3.17: 监听配置变更广播（后端 config:set/setBatch 后触发，用于前端 store 实时更新）
|
||
onChanged: (callback: (data: { key: string; value: unknown }) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: { key: string; value: unknown }) =>
|
||
callback(data);
|
||
ipcRenderer.on('config:changed', listener);
|
||
return () => ipcRenderer.removeListener('config:changed', listener);
|
||
},
|
||
},
|
||
|
||
// ===== 应用工具 =====
|
||
app: {
|
||
getVersion: () => ipcRenderer.invoke('app:getVersion'),
|
||
getAppDataPath: () => ipcRenderer.invoke('app:getAppDataPath'),
|
||
openExternal: (url: string) => ipcRenderer.invoke('app:openExternal', url),
|
||
showItemInFolder: (path: string) => ipcRenderer.invoke('app:showItemInFolder', path),
|
||
selectFolder: (defaultPath?: string) => ipcRenderer.invoke('app:selectFolder', defaultPath),
|
||
restart: () => ipcRenderer.invoke('app:restart'),
|
||
// v0.6.4 P4-2: 检查更新（feed 比对式；electron-updater 接入时仅替换实现）
|
||
updateCheck: () =>
|
||
ipcRenderer.invoke('app:updateCheck') as Promise<
|
||
| { status: 'disabled' | 'error'; message: string }
|
||
| { status: 'up-to-date'; latestVersion: string }
|
||
| { status: 'available'; latestVersion: string; downloadUrl?: string; notes?: string }
|
||
>,
|
||
// #49 修复: 前端错误上报通道（主进程可注册 'error:report' handler 记录到 electron-log/审计日志）
|
||
// 使用 send（单向）而非 invoke，即使主进程未注册 handler 也不会 reject
|
||
reportError: (payload: unknown) => ipcRenderer.send('error:report', payload),
|
||
},
|
||
|
||
// ===== 工作空间管理 =====
|
||
workspace: {
|
||
check: (targetPath: string) => ipcRenderer.invoke('workspace:check', targetPath),
|
||
inheritFiles: (params: { targetPath: string; sourcePath: string; files: string[] }) =>
|
||
ipcRenderer.invoke('workspace:inheritFiles', params),
|
||
getInfo: () => ipcRenderer.invoke('workspace:getInfo'),
|
||
// #51 修复: 校验源数据库完整性（PRAGMA integrity_check），用于 inheritDatabase 前置校验
|
||
checkDatabaseIntegrity: (sourcePath: string) =>
|
||
ipcRenderer.invoke('workspace:checkDatabaseIntegrity', sourcePath),
|
||
},
|
||
|
||
// ===== 工具管理 =====
|
||
tools: {
|
||
list: () => ipcRenderer.invoke('tools:list'),
|
||
toggle: (toolName: string, enabled: boolean) =>
|
||
ipcRenderer.invoke('tools:toggle', toolName, enabled),
|
||
/** v0.3.18 修复: 监听工具就绪事件（MCP 初始化完成后触发） */
|
||
onReady: (callback: (data: { toolCount: number }) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: { toolCount: number }) =>
|
||
callback(data);
|
||
ipcRenderer.on('tools:ready', listener);
|
||
return () => ipcRenderer.removeListener('tools:ready', listener);
|
||
},
|
||
/** v0.3.18 修复: 查询工具当前是否已就绪（解决事件竞态，前端注册监听器后立即查询一次） */
|
||
isReady: () =>
|
||
ipcRenderer.invoke('tools:isReady') as Promise<{ ready: boolean; toolCount: number }>,
|
||
},
|
||
|
||
// ===== 数据管理 =====
|
||
data: {
|
||
exportData: (sessionId?: string) => ipcRenderer.invoke('data:export', sessionId),
|
||
clearSessions: () => ipcRenderer.invoke('data:clearSessions'),
|
||
clearMemories: () => ipcRenderer.invoke('data:clearMemories'),
|
||
clearAuditLogs: () => ipcRenderer.invoke('data:clearAuditLogs'),
|
||
},
|
||
|
||
// ===== SearXNG =====
|
||
searxng: {
|
||
testConnection: (url: string, authKey: string, authType: string) =>
|
||
ipcRenderer.invoke('searxng:testConnection', url, authKey, authType),
|
||
},
|
||
|
||
// ===== LLM 运行时查询 =====
|
||
llm: {
|
||
/** v0.5.0: DeepSeek 余额查询（仅 DeepSeek Provider 支持） */
|
||
getBalance: () =>
|
||
ipcRenderer.invoke('llm:getBalance') as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
data?: {
|
||
currency: string;
|
||
totalBalance: string;
|
||
grantedBalance: string;
|
||
toppedUpBalance: string;
|
||
};
|
||
}>,
|
||
/**
|
||
* v0.7.2 P3-9: 动态模型列表（基于已保存的 LLM 配置，与引擎 adapter 同源）。
|
||
* Ollama 走 /api/tags（含能力探测），DeepSeek/OpenAI 走 /models，其余回退静态列表。
|
||
*/
|
||
listModels: () =>
|
||
ipcRenderer.invoke('llm:listModels') as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
data?: Array<{
|
||
id: string;
|
||
name?: string;
|
||
contextWindow?: number;
|
||
maxOutputTokens?: number;
|
||
supportsToolCalling?: boolean;
|
||
supportsThinking?: boolean;
|
||
description?: string;
|
||
}>;
|
||
}>,
|
||
/**
|
||
* v0.7.2 P3-10: Ollama 模型下载（仅 Ollama Provider 支持）。
|
||
* 进度经 onOllamaPullProgress 推送；结束（成功/失败/取消）广播 onOllamaPullEnded。
|
||
*/
|
||
pullModel: (model: string) =>
|
||
ipcRenderer.invoke('llm:ollamaPull', model) as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
/** true 表示任务被用户取消（非故障） */
|
||
aborted?: boolean;
|
||
}>,
|
||
/** 取消进行中的 Ollama 模型下载 */
|
||
cancelPullModel: () =>
|
||
ipcRenderer.invoke('llm:ollamaPullCancel') as Promise<{
|
||
success: boolean;
|
||
error?: string;
|
||
}>,
|
||
onOllamaPullProgress: (
|
||
callback: (data: {
|
||
model: string;
|
||
status: string;
|
||
completed?: number;
|
||
total?: number;
|
||
}) => void,
|
||
) => {
|
||
const listener = (
|
||
_event: Electron.IpcRendererEvent,
|
||
data: { model: string; status: string; completed?: number; total?: number },
|
||
): void => callback(data);
|
||
ipcRenderer.on('llm:ollamaPullProgress', listener);
|
||
return () => ipcRenderer.removeListener('llm:ollamaPullProgress', listener);
|
||
},
|
||
onOllamaPullEnded: (callback: (data: { model: string }) => void) => {
|
||
const listener = (_event: Electron.IpcRendererEvent, data: { model: string }): void =>
|
||
callback(data);
|
||
ipcRenderer.on('llm:ollamaPullEnded', listener);
|
||
return () => ipcRenderer.removeListener('llm:ollamaPullEnded', listener);
|
||
},
|
||
},
|
||
|
||
// ===== Toast 通知桥接 =====
|
||
toast: {
|
||
onShow: (callback: (data: { type: string; message: string; options?: unknown }) => void) => {
|
||
const listener = (
|
||
_event: Electron.IpcRendererEvent,
|
||
data: { type: string; message: string; options?: unknown },
|
||
) => callback(data);
|
||
ipcRenderer.on('toast:show', listener);
|
||
return () => ipcRenderer.removeListener('toast:show', listener);
|
||
},
|
||
},
|
||
|
||
// ===== 托盘动作（v0.6.4: 死链接线 —— 此前 main.ts/tray 发出的
|
||
// 'tray:newSession' 在渲染进程没有任何消费者，菜单项等于摆设）=====
|
||
tray: {
|
||
onNewSession: (callback: () => void): (() => void) => {
|
||
const listener = (): void => callback();
|
||
ipcRenderer.on('tray:newSession', listener);
|
||
return () => ipcRenderer.removeListener('tray:newSession', listener);
|
||
},
|
||
},
|
||
};
|
||
|
||
// ===== 安全暴露到渲染进程 =====
|
||
if (process.contextIsolated) {
|
||
try {
|
||
contextBridge.exposeInMainWorld('electron', electronAPI);
|
||
contextBridge.exposeInMainWorld('metona', metonaAPI);
|
||
} catch (error) {
|
||
console.error('Failed to expose APIs via contextBridge:', error);
|
||
// #7 修复: 生产环境强制失败，防止以不安全状态启动（contextBridge 失败意味着
|
||
// context isolation 边界已破坏，继续运行可能导致渲染进程直接访问 Node API）
|
||
// 开发环境降级到 globalThis 以便调试
|
||
// 审查修复: process.defaultApp 在 sandbox: true 下可能为 undefined，
|
||
// 导致开发环境也无法降级。补充 process.env.NODE_ENV 判断（sandbox 下 process.env 仍可用）
|
||
if (process.env.NODE_ENV === 'development' || process.defaultApp) {
|
||
console.warn('[DEV] Falling back to globalThis assignment — context isolation is weakened');
|
||
(globalThis as unknown as Record<string, unknown>).electron = electronAPI;
|
||
(globalThis as unknown as Record<string, unknown>).metona = metonaAPI;
|
||
} else {
|
||
// 审查修复 M19: 在 throw 前记录详细错误，便于在 DevTools 中排查白屏问题。
|
||
// 生产环境 contextBridge 失败时用户只看到白屏，console.error 至少能在 DevTools 中留下线索。
|
||
console.error('[FATAL] contextBridge failed in production:', error);
|
||
throw error;
|
||
}
|
||
}
|
||
} else {
|
||
// context isolation 未启用（不推荐，仅开发环境）
|
||
(globalThis as unknown as Record<string, unknown>).electron = electronAPI;
|
||
(globalThis as unknown as Record<string, unknown>).metona = metonaAPI;
|
||
}
|