Files
metona-ai-desktop/package.json
T
thzxx 6b2b587c94
CI / 类型检查 + Lint + 单元测试 (push) Failing after 5m45s
CI / 全量测试 (Electron ABI) (push) Failing after 5m22s
CI / 产物编译验证 (push) Successful in 10m0s
feat: v0.6.0 全量审计修复 — 安全加固 + 死代码激活 + 依赖治理
基于全量源码审计(electron/ 70+ 文件、src/ 45+ 文件完整读取)的
四阶段迭代,修复 1 项安全缺陷、8 项功能缺陷、依赖与文档系统性脱节。

【P0 安全与数据正确性】
- S-1 数据导出泄露明文密钥:data:export 全量导出直接透传
  configService.getAll()(敏感 key 解密返回),导出文件含明文 API Key。
  新增 sanitizeExportConfig(shared.ts)逐 key 脱敏 + 5 项回归测试
- F-3 session_summaries 无级联删除:删会话后摘要永久残留。建表语句补
  FOREIGN KEY ON DELETE CASCADE + 迁移 8 重建存量表(幂等检测)+ 2 项测试
- F-4 macOS activate 重建窗口后确认弹框失效:窗口创建收敛为 createMainWindow
  单一入口(beforeLoad 补 setMainWindow/IPC 注册),TrayManager 补
  rebindWindow,app:selectFolder 改 event.sender 动态解析窗口

【P1 死代码激活与功能补全】
- F-1 会话右键菜单挂载:ContextMenu session 分支(重命名/置顶/归档/
  导出/删除)约 200 行此前无任何触发点,Sidebar SessionItem 挂载
  onContextMenu;置顶/归档 label 随状态切换显示
- F-2 归档会话不可找回:Sidebar 新增「已归档」折叠面板(恢复入口),
  归档功能形成完整闭环
- F-7 Provider 白名单校验:createAdapter/buildFallbackAdapter 未知
  provider 显式拒绝(此前静默落入 DeepSeekAdapter 以空配置失败)
- F-8 死配置治理:接通 5 项(llm.temperature/llm.maxTokens 注入引擎、
  security.promptInjectionDefense 控制 SecurityScanHook+消息检测、
  logging.auditEnabled 控制 AuditLogHook、logging.traceEnabled 控制
  SessionRecorder,均 fail-secure 仅显式 false 关闭);删除 4 项
  无消费者配置(requireWriteConfirmation/maxFileWriteSizeKB/fontSize/
  animationMode)

【P2 依赖治理与 UX 修缮】
- D-1 移除僵尸依赖 electron-store/zod/rehype-raw(源码零引用,
  共裁 24 包);README 技术栈表同步删除虚假宣称
- metona-toast 升级 0.2.1 → 0.5.0(API 全兼容:107 种图标类型、
  配置项超集,default/configure/use 接口不变)
- F-5 工作空间手输路径实时落库中间态:改 pendingPath 草稿 + 显式
  「校验」按钮(选择文件夹与手输共用 validatePath 流程)
- F-6 确认弹框超时滞留:倒计时归零时主动 refreshPending(后端超时
  已删条目,拉取后弹框自然消解)
- D-3 ChatInput accept 移除 .pdf(分类器不识别,误导性入口);
  Onboarding 切换 Provider 自动填充默认 URL(与 LLMSettings 一致)

【P3 文档口径收敛】
- README:工具数 30+→28、版本 0.6.0、测试数 252、配置表补 F-8 接通项
- built-in/index.ts 计数注释 30→28
- docs/网络工具 v2 存储键名统一为点号口径(searxng.enabled)
- docs/完整设计指南修正 db.handlers.ts 失效路径引用为 data.ts

【验证】
- lint 0 error / 0 warning
- typecheck 双工程(node+web)0 错误
- test:electron 24 文件 252 用例全通过(+7 新增:导出脱敏 ×5、
  级联删除 ×2)
- electron-vite build 成功(metona-toast 0.5.0 chunk 正常)
- 系统 Node 模式 npm test 225 通过 + 27 ABI skip(符合预期)
2026-08-22 18:28:31 +08:00

99 lines
3.0 KiB
JSON

{
"name": "metona-ai-desktop",
"version": "0.6.0",
"description": "MetonaAI Desktop — 生产级通用 AI Agent 智能体桌面应用",
"main": "dist-electron/main/main.js",
"author": "Metona Team",
"license": "MIT",
"type": "module",
"scripts": {
"dev": "electron-vite dev",
"build": "npm run prebuild && electron-vite build && electron-builder",
"prebuild": "npm dedupe && node -e \"require('fs').rmSync('release',{recursive:true,force:true})\"",
"build:renderer": "electron-vite build --rendererOnly",
"build:electron": "tsc -p tsconfig.node.json",
"preview": "vite preview",
"lint": "eslint .",
"lint:fix": "eslint . --fix",
"format": "prettier --write \"src/**/*.{ts,tsx,css}\" \"electron/**/*.ts\"",
"typecheck": "tsc --noEmit -p tsconfig.node.json && tsc --noEmit -p tsconfig.web.json",
"typecheck:node": "tsc -p tsconfig.node.json --noEmit",
"test": "vitest run",
"test:watch": "vitest",
"test:electron": "cross-env ELECTRON_RUN_AS_NODE=1 electron node_modules/vitest/vitest.mjs run",
"prepare": "husky"
},
"lint-staged": {
"electron/**/*.{ts,tsx}": [
"eslint --fix",
"prettier --write"
],
"src/**/*.{ts,tsx}": [
"eslint --fix",
"prettier --write"
],
"src/**/*.css": [
"prettier --write"
]
},
"dependencies": {
"@emotion/react": "^11.14.0",
"@emotion/styled": "^11.14.1",
"@metona-team/metona-toast": "^0.5.0",
"@modelcontextprotocol/sdk": "^1.12.1",
"@mui/icons-material": "^9.1.1",
"@mui/material": "^9.1.2",
"better-sqlite3": "^11.9.1",
"date-fns": "^4.1.0",
"dotenv": "^17.4.2",
"electron-log": "^5.3.3",
"fuse.js": "^7.1.0",
"lru-cache": "^11.1.0",
"nanoid": "^5.1.5",
"node-html-parser": "^6.1.13",
"react": "^19.1.0",
"react-dom": "^19.1.0",
"react-markdown": "^10.1.0",
"react-virtuoso": "^4.18.12",
"rehype-highlight": "^7.0.2",
"remark-gfm": "^4.0.1",
"shell-quote": "^1.10.0",
"zustand": "^5.0.5"
},
"devDependencies": {
"@electron-toolkit/preload": "^3.0.1",
"@electron-toolkit/utils": "^4.0.0",
"@eslint/js": "^9.39.5",
"@tailwindcss/typography": "^0.5.16",
"@tailwindcss/vite": "^4.1.7",
"@types/better-sqlite3": "^7.6.13",
"@types/node": "^22.15.29",
"@types/react": "^19.1.6",
"@types/react-dom": "^19.1.6",
"@types/shell-quote": "^1.7.5",
"@vitejs/plugin-react": "^4.5.2",
"autoprefixer": "^10.4.21",
"cross-env": "^10.1.0",
"electron": "^35.5.1",
"electron-builder": "^26.0.12",
"electron-vite": "^3.1.0",
"eslint": "^9.28.0",
"husky": "^9.1.7",
"lint-staged": "^17.3.0",
"lucide-react": "^0.511.0",
"postcss": "^8.5.4",
"prettier": "^3.5.3",
"tailwindcss": "^4.1.7",
"typescript": "^5.8.3",
"typescript-eslint": "^8.67.0",
"vite": "^6.3.5",
"vitest": "^3.2.1"
},
"allowScripts": {
"electron@35.7.5": true,
"better-sqlite3@11.10.0": true,
"esbuild@0.25.12": true,
"electron-winstaller@5.4.0": true
}
}