工程化(从零到一): - 新增 Gitea Actions CI(debian-latest):类型检查 + Lint + 单元测试 + 产物编译验证 - 新增 husky + lint-staged 预提交钩子(lint-staged + typecheck 门禁) - 移除坏脚本 test:e2e(无 Playwright 配置必失败);prebuild 改用内置 fs.rmSync - 依赖清理:移除死依赖 sql.js(2MB)/@playwright/test,@types/shell-quote 移至 devDependencies 安全加固: - PolicyEngine 频率限制按会话隔离(多会话并发不再互抢配额) - ConfirmationHook 拒绝记忆加 10 分钟 TTL + 恢复询问入口(新增 2 个 IPC 通道) - Windows run_command 白名单工具(git/node/npm/npx/pnpm/yarn/tsc)改走 cmd.exe /c + 参数数组执行,收窄 shell 注入面 - web_search 四引擎 HTML 解析迁移 node-html-parser(结构化主层 + 正则降级) 缺陷修复(测试驱动发现): - mapError 大小写缺陷:网络错误码永远落入 UNKNOWN 无法触发重试 - 搜狗解析器自我过滤:相对链接补全后又被 sogou.com 过滤导致结果全丢 - 百度复合类名重复收录:class="result c-container" 被双重匹配 测试补齐(113 → 194 用例): - 新增 5 个测试文件:sse-stream / base-adapter / confirmation-hook / ipc-agent 编排链路 / web-search 解析器 - 覆盖 sendMessage 全分支、SSE 流解析、错误映射、确认钩子竞态/超时/批量审批 体验升级: - OutputValidator 验证结果可见化(VALIDATION 流事件 → 聊天流提示卡) - SettingsModal 巨型组件拆分(1503 行 → 10 个文件,可独立维护) - MessageList 接入 react-virtuoso 真虚拟滚动(千条消息恒定开销) - MCP 新增 streamable HTTP 传输支持(SDK 内置传输 + DB 迁移 6 + UI 双模式)
174 lines
7.0 KiB
TypeScript
174 lines
7.0 KiB
TypeScript
/**
|
|
* IPC Tool Handlers — 工具与确认域(P2-9 从 handlers.ts 拆分)
|
|
*
|
|
* 工具列表/开关、工具就绪查询(P2-9: 从 main.ts beforeLoad 迁入)、
|
|
* 工具确认(单条/批量/拉取 pending)、自动执行设置。
|
|
*/
|
|
|
|
import { ipcMain } from 'electron';
|
|
import type { IPCContext } from './context';
|
|
import log from 'electron-log';
|
|
|
|
export function registerToolHandlers(ctx: IPCContext): void {
|
|
const { toolRegistry, confirmationHook, agentEngineManager } = ctx;
|
|
|
|
ipcMain.handle('tools:list', async () => {
|
|
return toolRegistry.listAllTools().map((t) => ({
|
|
name: t.name,
|
|
description: t.description,
|
|
category: t.category,
|
|
riskLevel: t.riskLevel,
|
|
requiresPermission: t.requiresPermission,
|
|
enabled: t.enabled,
|
|
}));
|
|
});
|
|
|
|
ipcMain.handle('tools:toggle', async (_event, toolName: string, enabled: boolean) => {
|
|
// M-35 修复: 校验 toolName 合法性,防止配置 key 污染
|
|
if (typeof toolName !== 'string' || !toolName || typeof enabled !== 'boolean') {
|
|
return { success: false, error: 'Invalid parameters' };
|
|
}
|
|
// 校验 toolName 在已注册工具列表中(防止写入任意配置 key)
|
|
const allTools = toolRegistry.listAllTools();
|
|
if (!allTools.some((t) => t.name === toolName)) {
|
|
log.warn(`[IPC] tools:toggle rejected: unknown tool "${toolName}"`);
|
|
return { success: false, error: `Unknown tool: ${toolName}` };
|
|
}
|
|
// 工具开关通过配置持久化
|
|
ctx.configService.set(`tools.${toolName}.enabled`, enabled);
|
|
// 同步到 ToolRegistry(立即生效)
|
|
toolRegistry.setToolEnabled(toolName, enabled);
|
|
// 同步到所有会话引擎的工具列表
|
|
agentEngineManager.setToolsAll(toolRegistry.listTools());
|
|
log.info(`Tool ${toolName} ${enabled ? 'enabled' : 'disabled'}`);
|
|
return { success: true };
|
|
});
|
|
|
|
// ===== 工具就绪查询(P2-9: 从 main.ts beforeLoad 迁入,解决事件竞态) =====
|
|
ipcMain.handle('tools:isReady', () => ({
|
|
ready: ctx.toolsReadyRef.ready,
|
|
toolCount: ctx.toolsReadyRef.toolCount,
|
|
}));
|
|
|
|
// ===== v0.2.0: 工具确认响应(ConfirmationDialog → 主进程) =====
|
|
ipcMain.on('tool:confirmationResponse', (_event, data: unknown) => {
|
|
// M-43 修复: 校验 data 结构,防止 undefined/null 导致 TypeError
|
|
if (!data || typeof data !== 'object') {
|
|
log.warn('[IPC] tool:confirmationResponse rejected: invalid data');
|
|
return;
|
|
}
|
|
const req = data as {
|
|
toolCallId?: unknown;
|
|
approved?: unknown;
|
|
remember?: unknown;
|
|
autoExecute?: unknown;
|
|
};
|
|
if (typeof req.toolCallId !== 'string' || !req.toolCallId) {
|
|
log.warn('[IPC] tool:confirmationResponse rejected: invalid toolCallId');
|
|
return;
|
|
}
|
|
if (typeof req.approved !== 'boolean') {
|
|
log.warn('[IPC] tool:confirmationResponse rejected: invalid approved');
|
|
return;
|
|
}
|
|
const remember = typeof req.remember === 'boolean' ? req.remember : false;
|
|
const autoExecute = typeof req.autoExecute === 'boolean' ? req.autoExecute : false;
|
|
confirmationHook.resolveConfirmation(req.toolCallId, req.approved, remember, autoExecute);
|
|
log.info(
|
|
`[CONFIRM] Tool ${req.toolCallId} ${req.approved ? 'approved' : 'denied'}${remember ? ' (remembered)' : ''}${autoExecute ? ' (autoExecute)' : ''}`,
|
|
);
|
|
});
|
|
|
|
// ===== v0.3.2: 批量工具确认响应(并行工具调用一次性审批) =====
|
|
ipcMain.on('tool:confirmationResponseBatch', (_event, data: unknown) => {
|
|
if (!data || typeof data !== 'object') {
|
|
log.warn('[IPC] tool:confirmationResponseBatch rejected: invalid data');
|
|
return;
|
|
}
|
|
const req = data as {
|
|
toolCallIds?: unknown;
|
|
approved?: unknown;
|
|
remember?: unknown;
|
|
autoExecute?: unknown;
|
|
};
|
|
// 严格校验 toolCallIds 数组
|
|
if (!Array.isArray(req.toolCallIds) || req.toolCallIds.length === 0) {
|
|
log.warn(
|
|
'[IPC] tool:confirmationResponseBatch rejected: toolCallIds must be non-empty array',
|
|
);
|
|
return;
|
|
}
|
|
// 每个元素必须是字符串
|
|
for (const id of req.toolCallIds) {
|
|
if (typeof id !== 'string' || !id) {
|
|
log.warn('[IPC] tool:confirmationResponseBatch rejected: invalid toolCallId in array');
|
|
return;
|
|
}
|
|
}
|
|
if (typeof req.approved !== 'boolean') {
|
|
log.warn('[IPC] tool:confirmationResponseBatch rejected: invalid approved');
|
|
return;
|
|
}
|
|
const remember = typeof req.remember === 'boolean' ? req.remember : false;
|
|
const autoExecute = typeof req.autoExecute === 'boolean' ? req.autoExecute : false;
|
|
const resolved = confirmationHook.resolveConfirmationsBatch(
|
|
req.toolCallIds as string[],
|
|
req.approved,
|
|
remember,
|
|
autoExecute,
|
|
);
|
|
log.info(
|
|
`[CONFIRM] Batch ${req.approved ? 'approved' : 'denied'}: ${resolved.length}/${req.toolCallIds.length} resolved${remember ? ' (remembered)' : ''}${autoExecute ? ' (autoExecute)' : ''}`,
|
|
);
|
|
});
|
|
|
|
// ===== v0.3.2: 拉取当前所有 pending 确认 =====
|
|
ipcMain.handle('tool:getPendingConfirmations', async () => {
|
|
return { success: true, data: confirmationHook.getPendingConfirmations() };
|
|
});
|
|
|
|
// ===== v0.4.1: 会话内拒绝记忆管理(拒绝记忆带 TTL,支持手动恢复询问) =====
|
|
ipcMain.handle('tool:getRememberedDenials', async () => {
|
|
return { success: true, data: confirmationHook.getRememberedDenials() };
|
|
});
|
|
|
|
ipcMain.handle('tool:resetRememberedDenial', async (_event, toolName: unknown) => {
|
|
if (typeof toolName !== 'string' || !toolName) {
|
|
return { success: false, error: 'Invalid toolName' };
|
|
}
|
|
const reset = confirmationHook.resetRememberedDenial(toolName);
|
|
if (reset) {
|
|
log.info(`[CONFIRM] Reset remembered denial for tool "${toolName}" — will ask again`);
|
|
}
|
|
return { success: reset };
|
|
});
|
|
|
|
// ===== v0.2.0: 持久化自动执行设置 =====
|
|
ipcMain.handle('tool:setAutoExecute', async (_event, toolName: unknown, enabled: unknown) => {
|
|
// M-44 修复: 校验 toolName 合法性和 enabled 类型,防止配置 key 污染
|
|
if (typeof toolName !== 'string' || !toolName) {
|
|
return { success: false, error: 'Invalid toolName' };
|
|
}
|
|
if (typeof enabled !== 'boolean') {
|
|
return { success: false, error: 'Invalid enabled (must be boolean)' };
|
|
}
|
|
// 校验 toolName 在已注册工具列表中(与 tools:toggle 保持一致)
|
|
const allTools = toolRegistry.listAllTools();
|
|
if (!allTools.some((t) => t.name === toolName)) {
|
|
log.warn(`[IPC] tool:setAutoExecute rejected: unknown tool "${toolName}"`);
|
|
return { success: false, error: `Unknown tool: ${toolName}` };
|
|
}
|
|
try {
|
|
confirmationHook.setAutoExecute(toolName, enabled);
|
|
log.info(`[CONFIRM] Tool ${toolName} autoExecute set to ${enabled}`);
|
|
return { success: true };
|
|
} catch (error) {
|
|
return { success: false, error: (error as Error).message };
|
|
}
|
|
});
|
|
|
|
ipcMain.handle('tool:getAutoExecuteList', async () => {
|
|
return { success: true, data: confirmationHook.getAutoExecuteList() };
|
|
});
|
|
}
|