@eoasmxd/freya 0.4.0 → 0.4.1

package/core/dist/command/commands/skill-commands.js

@@ -10,10 +10,11 @@ export function registerSkillCommands(deps) {
         return '🔧 当前未激活任何技能。';
     };
     const handleList = async () => {
-        if (skills.size === 0) {
+        const activeSkills = Array.from(skills.values()).filter((s) => s.enabled !== false);
+        if (activeSkills.length === 0) {
             return '📋 暂无可用技能。';
         }
-        const lines = Array.from(skills.values()).map((s) => `- **${s.name}** — ${s.description || '无描述'}`).join('\n');
+        const lines = activeSkills.map((s) => `- **${s.name}** \`${s.id}\` — ${s.description || '无描述'}`).join('\n');
         return `### 📋 可用技能\n\n${lines}`;
     };
     const handleSet = async (skillId, sessionId) => {
@@ -21,8 +22,8 @@ export function registerSkillCommands(deps) {
             return '❌ 用法：`\`/skill set <skillId>\``。';
         }
         const skill = skills.get(skillId);
-        if (!skill) {
-            return `❌ 技能 \`${skillId}\` 不存在。请使用 \`/skill list\` 查看可用技能。`;
+        if (!skill || skill.enabled === false) {
+            return `❌ 技能 \`${skillId}\` 不存在或未启用。请使用 \`/skill list\` 查看可用技能。`;
         }
         await sessionManager.updateSession(sessionId, { activeSkillId: skillId });
         return `✅ 已激活技能: **${skill.name}** \`${skillId}\`。`;

package/core/dist/config/config-manager.d.ts

@@ -3,6 +3,7 @@ import type { FreyaLLMRegistry } from '../llm/llm-registry.js';
 import type { FreyaPluginManager } from '../plugin/plugin-manager.js';
 import type { FreyaPromptManager } from '../prompt/prompt-manager.js';
 import { FreyaConfigSchemaRegistry } from './schema-registry.js';
+import type { FreyaSkillRegistry, FreyaSkill } from '../skill/skill-registry.js';
 /** 核心统一配置管理器 */
 export declare class FreyaConfigManager {
     private context;
@@ -11,7 +12,8 @@ export declare class FreyaConfigManager {
     private llmRegistry;
     private pluginManager;
     private promptManager;
-    constructor(context: FreyaContext, schemaRegistry: FreyaConfigSchemaRegistry, promptManager: FreyaPromptManager, llmRegistry: FreyaLLMRegistry, pluginManager: FreyaPluginManager);
+    private skillRegistry?;
+    constructor(context: FreyaContext, schemaRegistry: FreyaConfigSchemaRegistry, promptManager: FreyaPromptManager, llmRegistry: FreyaLLMRegistry, pluginManager: FreyaPluginManager, skillRegistry?: FreyaSkillRegistry);
     /** 获取全部敏感字段的 keyPath 列表 */
     getSensitiveKeys(): string[];
     loadAndInit(): Promise<void>;
@@ -38,6 +40,8 @@ export declare class FreyaConfigManager {
     removeModel(providerId: string, modelId: string): Promise<string>;
     listPlugins(): Promise<any[]>;
     togglePlugin(pluginId: string, enabled: boolean): Promise<string>;
+    listSkills(): FreyaSkill[];
+    toggleSkill(skillId: string, enabled: boolean): Promise<string>;
     readPrompt(name: string): Promise<string>;
     writePrompt(name: string, content: string): Promise<string>;
     editPrompt(name: string, targetContent: string, replacementContent: string): Promise<string>;

package/core/dist/config/config-manager.js

@@ -138,12 +138,14 @@ export class FreyaConfigManager {
     llmRegistry;
     pluginManager;
     promptManager;
-    constructor(context, schemaRegistry, promptManager, llmRegistry, pluginManager) {
+    skillRegistry;
+    constructor(context, schemaRegistry, promptManager, llmRegistry, pluginManager, skillRegistry) {
         this.context = context;
         this.schemaRegistry = schemaRegistry;
         this.promptManager = promptManager;
         this.llmRegistry = llmRegistry;
         this.pluginManager = pluginManager;
+        this.skillRegistry = skillRegistry;
     }
     /** 获取全部敏感字段的 keyPath 列表 */
     getSensitiveKeys() {
@@ -475,6 +477,16 @@ export class FreyaConfigManager {
             return '❌ 插件服务未初始化。';
         return await this.pluginManager.togglePlugin(pluginId, enabled);
     }
+    listSkills() {
+        if (!this.skillRegistry)
+            return [];
+        return this.skillRegistry.getAllSkills();
+    }
+    async toggleSkill(skillId, enabled) {
+        if (!this.skillRegistry)
+            return '❌ 技能注册表服务未初始化。';
+        return await this.skillRegistry.toggleSkill(skillId, enabled);
+    }
     async readPrompt(name) {
         const promptName = String(name).trim().toUpperCase();
         if (!ALLOWED_PROMPTS.has(promptName)) {

package/core/dist/kernel.js

@@ -54,7 +54,7 @@ export class FreyaKernel {
         const promptManager = new FreyaPromptManager(promptRegistry, ctx.logger);
         this.pluginManager = new FreyaPluginManager(configSchemaRegistry, commandRegistry, promptRegistry);
         await this.pluginManager.loadConfiguredPlugins(pluginRegistry, ctx);
-        const configManager = new FreyaConfigManager(ctx, configSchemaRegistry, promptManager, llmRegistry, this.pluginManager);
+        const configManager = new FreyaConfigManager(ctx, configSchemaRegistry, promptManager, llmRegistry, this.pluginManager, skillRegistry);
         configManager.registerCoreSchema();
         await configManager.loadAndInit();
         await configManager.resolveAndFreeze();
@@ -72,7 +72,7 @@ export class FreyaKernel {
         this.connectionManager = new FreyaConnectionManager(ctx.eventBus, ctx.logger);
         const configToolbox = new ConfigToolbox(configManager, ctx);
         const sessionToolbox = new SessionToolbox(this.sessionManager);
-        const metaToolbox = new FreyaMetaToolbox(this.sessionManager, toolRegistry);
+        const metaToolbox = new FreyaMetaToolbox(this.sessionManager, toolRegistry, skillRegistry);
         toolRegistry.registerToolbox(configToolbox);
         toolRegistry.registerToolbox(sessionToolbox);
         toolRegistry.registerToolbox(metaToolbox);

package/core/dist/skill/skill-registry.d.ts

@@ -4,14 +4,24 @@ export interface FreyaSkill {
     name: string;
     description: string;
     content: string;
+    enabled: boolean;
+    source: 'builtin' | 'runtime';
 }
-/** 技能注册表，从 skills/ 目录加载 Markdown 格式技能 */
+/** 技能注册表，从 skills/ 目录加载 Markdown 格式技能并管理软开关状态 */
 export declare class FreyaSkillRegistry {
     private skills;
+    private context?;
     loadSkills(context: FreyaContext): Promise<void>;
     /** 从指定目录加载技能到内存注册表中 */
     private loadSkillsFromDirectory;
-    getSkills(): Map<string, FreyaSkill>;
+    /** 获取技能列表（默认只返回启用状态的技能） */
+    getSkills(onlyEnabled?: boolean): Map<string, FreyaSkill>;
+    /** 获取全量技能数组（供管理控制台使用） */
+    getAllSkills(): FreyaSkill[];
+    /** 切换技能的启用/禁用状态并持久化 */
+    toggleSkill(skillId: string, enabled: boolean): Promise<string>;
+    /** 持久化当前所有技能启停状态至 skills.json */
+    private persistSkillsConfig;
     get(id: string): FreyaSkill | undefined;
     has(id: string): boolean;
     /** 解析技能文件的 YAML Frontmatter */

package/core/dist/skill/skill-registry.js

@@ -1,24 +1,57 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import { APP_ROOT, PROJECT_ROOT } from '../utils/paths.js';
-/** 技能注册表，从 skills/ 目录加载 Markdown 格式技能 */
+/** 技能注册表，从 skills/ 目录加载 Markdown 格式技能并管理软开关状态 */
 export class FreyaSkillRegistry {
     skills = new Map();
+    context;
     async loadSkills(context) {
+        this.context = context;
         const runtimeSkillsDir = path.join(PROJECT_ROOT, 'skills');
         const defaultSkillsDir = path.join(APP_ROOT, 'skills');
+        const configSkillsPath = path.join(PROJECT_ROOT, 'config', 'skills.json');
         try {
             await fs.mkdir(runtimeSkillsDir, { recursive: true });
-            await this.loadSkillsFromDirectory(defaultSkillsDir, context);
-            await this.loadSkillsFromDirectory(runtimeSkillsDir, context);
-            context.logger.info(`动态技能扫描完成。共加载了 ${this.skills.size} 个物理技能。`);
+            await this.loadSkillsFromDirectory(defaultSkillsDir, 'builtin', context);
+            await this.loadSkillsFromDirectory(runtimeSkillsDir, 'runtime', context);
+            let configList = [];
+            try {
+                const raw = await fs.readFile(configSkillsPath, 'utf-8');
+                const parsed = JSON.parse(raw);
+                if (Array.isArray(parsed)) {
+                    configList = parsed;
+                }
+            }
+            catch {
+                configList = [];
+            }
+            const configMap = new Map();
+            for (const item of configList) {
+                if (item && typeof item.id === 'string' && typeof item.enabled === 'boolean') {
+                    configMap.set(item.id, item.enabled);
+                }
+            }
+            let configChanged = false;
+            for (const skill of this.skills.values()) {
+                if (configMap.has(skill.id)) {
+                    skill.enabled = configMap.get(skill.id);
+                }
+                else {
+                    configChanged = true;
+                }
+            }
+            if (configChanged || configList.length !== this.skills.size) {
+                await this.persistSkillsConfig(configSkillsPath);
+            }
+            const enabledCount = Array.from(this.skills.values()).filter((s) => s.enabled).length;
+            context.logger.info(`动态技能扫描完成。共加载 ${this.skills.size} 个物理技能 (已启用: ${enabledCount})。`);
         }
         catch (err) {
             context.logger.error('扫描物理技能 skills 目录遭遇故障:', err);
         }
     }
     /** 从指定目录加载技能到内存注册表中 */
-    async loadSkillsFromDirectory(dirPath, context) {
+    async loadSkillsFromDirectory(dirPath, source, context) {
         try {
             const files = await fs.readdir(dirPath);
             for (const file of files) {
@@ -26,11 +59,16 @@ export class FreyaSkillRegistry {
                     const rawContent = await fs.readFile(path.join(dirPath, file), 'utf-8');
                     const { metadata, content } = this.parseFrontmatter(rawContent);
                     if (metadata.id) {
+                        const defaultEnabled = metadata.defaultEnabled !== undefined
+                            ? metadata.defaultEnabled !== 'false'
+                            : source === 'builtin';
                         this.skills.set(metadata.id, {
                             id: metadata.id,
                             name: metadata.name || file.replace('.md', ''),
                             description: metadata.description || '',
-                            content: content.trim()
+                            content: content.trim(),
+                            enabled: defaultEnabled,
+                            source
                         });
                     }
                 }
@@ -40,8 +78,51 @@ export class FreyaSkillRegistry {
             context.logger.warn(`扫描技能目录失败: ${dirPath}`, err);
         }
     }
-    getSkills() {
-        return this.skills;
+    /** 获取技能列表（默认只返回启用状态的技能） */
+    getSkills(onlyEnabled = true) {
+        if (!onlyEnabled) {
+            return this.skills;
+        }
+        const filtered = new Map();
+        for (const [id, skill] of this.skills.entries()) {
+            if (skill.enabled) {
+                filtered.set(id, skill);
+            }
+        }
+        return filtered;
+    }
+    /** 获取全量技能数组（供管理控制台使用） */
+    getAllSkills() {
+        return Array.from(this.skills.values());
+    }
+    /** 切换技能的启用/禁用状态并持久化 */
+    async toggleSkill(skillId, enabled) {
+        const skill = this.skills.get(skillId);
+        if (!skill) {
+            return `❌ 未找到 ID 为 "${skillId}" 的技能，请检查名称是否正确。`;
+        }
+        if (skill.enabled === enabled) {
+            return `ℹ️ 技能 "${skill.name || skillId}" 状态已是 ${enabled ? '启用' : '禁用'}。`;
+        }
+        skill.enabled = enabled;
+        const configSkillsPath = path.join(PROJECT_ROOT, 'config', 'skills.json');
+        try {
+            await this.persistSkillsConfig(configSkillsPath);
+            this.context?.logger.info(`技能 "${skill.name || skillId}" 已切换为: ${enabled ? '启用' : '禁用'}`);
+            return `✅ 技能 "${skill.name || skillId}" 已成功${enabled ? '启用' : '禁用'}。`;
+        }
+        catch (err) {
+            return `❌ 技能状态变更成功，但写入 skills.json 失败: ${err.message}`;
+        }
+    }
+    /** 持久化当前所有技能启停状态至 skills.json */
+    async persistSkillsConfig(configSkillsPath) {
+        await fs.mkdir(path.dirname(configSkillsPath), { recursive: true });
+        const payload = Array.from(this.skills.values()).map((s) => ({
+            id: s.id,
+            enabled: s.enabled
+        }));
+        await fs.writeFile(configSkillsPath, JSON.stringify(payload, null, 2) + '\n', 'utf-8');
     }
     get(id) {
         return this.skills.get(id);

package/core/dist/tools/meta/index.d.ts

@@ -1,10 +1,12 @@
 import type { FreyaTool, FreyaToolbox } from '@eoasmxd/freya-sdk';
 import type { FreyaSessionManager } from '../../session/session-manager.js';
 import type { FreyaToolRegistry } from '../tool-registry.js';
+import type { FreyaSkillRegistry } from '../../skill/skill-registry.js';
 export declare class FreyaMetaToolbox implements FreyaToolbox {
     private sessionManager;
     private toolRegistry?;
-    constructor(sessionManager: FreyaSessionManager, toolRegistry?: FreyaToolRegistry | undefined);
+    private skillRegistry?;
+    constructor(sessionManager: FreyaSessionManager, toolRegistry?: FreyaToolRegistry | undefined, skillRegistry?: FreyaSkillRegistry | undefined);
     getId(): string;
     getInstructionPrompt(): string;
     getTools(): FreyaTool[];

package/core/dist/tools/meta/index.js

@@ -1,9 +1,11 @@
 export class FreyaMetaToolbox {
     sessionManager;
     toolRegistry;
-    constructor(sessionManager, toolRegistry) {
+    skillRegistry;
+    constructor(sessionManager, toolRegistry, skillRegistry) {
         this.sessionManager = sessionManager;
         this.toolRegistry = toolRegistry;
+        this.skillRegistry = skillRegistry;
     }
     getId() {
         return 'meta';
@@ -99,6 +101,12 @@ export class FreyaMetaToolbox {
                     if (!sessionId) {
                         return '❌ 错误：无法从执行上下文中提取当前会话ID。';
                     }
+                    if (this.skillRegistry) {
+                        const skill = this.skillRegistry.get(skillId);
+                        if (!skill || !skill.enabled) {
+                            return `❌ 错误：技能 [${skillId}] 不存在或已被系统管理员禁用，无法切入该模式。`;
+                        }
+                    }
                     await this.sessionManager.updateSession(sessionId, { activeSkillId: skillId });
                     return `已成功切入 [${skillId}] 技能特长工作模式。`;
                 }

package/core/dist/web/config-api.js

@@ -177,6 +177,24 @@ export class FreyaConfigApi {
                 res.end(JSON.stringify({ success: !msg.startsWith('❌'), message: msg }));
                 return true;
             }
+            if (pathname === '/api/config/skills' && req.method === 'GET') {
+                const skills = this.configManager.listSkills();
+                res.writeHead(200, this.headers);
+                res.end(JSON.stringify({ success: true, data: skills }));
+                return true;
+            }
+            if (pathname === '/api/config/skills/toggle' && req.method === 'POST') {
+                const { skillId, enabled } = await this.getBody(req);
+                if (!skillId) {
+                    res.writeHead(200, this.headers);
+                    res.end(JSON.stringify({ success: false, error: '缺少必要参数: skillId' }));
+                    return true;
+                }
+                const msg = await this.configManager.toggleSkill(skillId, enabled);
+                res.writeHead(200, this.headers);
+                res.end(JSON.stringify({ success: !msg.startsWith('❌'), message: msg }));
+                return true;
+            }
             const promptMatch = pathname.match(/^\/api\/config\/prompts\/([^/]+)$/);
             if (promptMatch && req.method === 'GET') {
                 const promptName = decodeURIComponent(promptMatch[1]);

package/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eoasmxd/freya-core",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "private": false,
   "license": "MIT",
   "publishConfig": {
@@ -16,7 +16,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0",
+    "@eoasmxd/freya-sdk": "^0.4.1",
     "ws": "^8.18.0"
   },
   "devDependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eoasmxd/freya",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "license": "MIT",
   "type": "module",
   "description": "Freya - 微内核智能体系统",
@@ -35,8 +35,9 @@
     "src"
   ],
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0",
+    "@eoasmxd/freya-sdk": "^0.4.1",
     "ws": "^8.18.0",
+    "mysql2": "^3.11.0",
     "qrcode-terminal": "^0.12.0"
   },
   "scripts": {

package/plugins/plugin-gemini/package.json

@@ -18,7 +18,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0"
+    "@eoasmxd/freya-sdk": "^0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-openai/package.json

@@ -18,7 +18,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0"
+    "@eoasmxd/freya-sdk": "^0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-telegram-channel/package.json

@@ -19,7 +19,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0"
+    "@eoasmxd/freya-sdk": "^0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-fs/package.json

@@ -21,7 +21,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0"
+    "@eoasmxd/freya-sdk": "^0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-memory/package.json

@@ -21,7 +21,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@eoasmxd/freya-sdk": "^0.4.0"
+    "@eoasmxd/freya-sdk": "^0.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",

package/plugins/plugin-tool-mysql/config/prompts/plugin.prompt.mysql.md

@@ -0,0 +1,9 @@
+MySQL 数据库查询工具箱。
+
+提供执行标准 SQL 只读查询语句并返回结构化 JSON 数据结果的能力。
+
+使用规范：
+1. 本工具仅支持执行 SELECT 查询语句，严禁执行任何非 SELECT 语句，禁止执行任何增删改或 DDL 破坏性语句。
+2. 严禁主观猜测表名与字段名，必须严格基于上下文或业务 Skill 指南中确定、已知的数据结构编写 SQL。
+3. 支持通过 `connection` 参数指定目标数据库连接名称，若不传则自动使用默认连接。
+4. 单次查询返回结果条数受到系统安全限制截断，编写查询时建议显式使用合理的 `LIMIT` 子句。

package/plugins/plugin-tool-mysql/config/prompts/plugin.prompt.mysql.select.audit.md

@@ -0,0 +1,26 @@
+你是一个严格的 SQL 安全与完整性审查审计员。你的唯一职责是对待执行的 SQL 查询语句进行安全与完整性审查。
+
+审查准则：
+1. **完整性审查**：
+   - SQL 语句必须语法结构完整、语义明确。
+   - 严禁包含伪代码、截断残缺语句或未闭合的括号/引号。
+
+2. **只读安全约束**：
+   - 必须仅为 SELECT 查询操作（仅允许 SELECT 查询语句，严禁执行 SHOW、EXPLAIN、DESCRIBE 等其他语句）。
+   - 严禁包含任何数据修改语句（如 INSERT、UPDATE、DELETE、REPLACE 等）。
+   - 严禁包含任何数据定义与删除语句（如 DROP、TRUNCATE、ALTER、CREATE 等）。
+   - 严禁包含权限管理、事务控制等系统级命令（如 GRANT、REVOKE、LOCK TABLES 等）。
+   - 严禁利用分号 `;` 拼接多条执行语句进行批处理或 SQL 注入攻击。
+   - 严禁包含高危文件读写或外部系统交互指令（如 INTO OUTFILE、INTO DUMPFILE、LOAD DATA、LOAD_FILE 等）。
+
+输出规范：
+请直接返回合法且不包含 Markdown 代码块标记（如 ```json）的纯 JSON 字符串，格式如下：
+{
+  "passed": true,
+  "reason": "审核通过，为合法的只读查询语句。"
+}
+或
+{
+  "passed": false,
+  "reason": "具体的拦截阻断原因"
+}

package/plugins/plugin-tool-mysql/dist/audit.d.ts

@@ -0,0 +1,13 @@
+import type { FreyaContext } from '@eoasmxd/freya-sdk';
+export interface AuditResult {
+    passed: boolean;
+    reason: string;
+}
+/** 前置 SQL 安全与完整性审查审计服务 */
+export declare class SqlAuditService {
+    private cachedPrompt;
+    /** 双通道探针加载审计提示词模板 */
+    private loadAuditPrompt;
+    /** 执行前置独立 LLM 分析审查 */
+    audit(sql: string, connectionName: string, ctx: FreyaContext): Promise<AuditResult>;
+}

package/plugins/plugin-tool-mysql/dist/audit.js

@@ -0,0 +1,87 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+/** 前置 SQL 安全与完整性审查审计服务 */
+export class SqlAuditService {
+    cachedPrompt = null;
+    /** 双通道探针加载审计提示词模板 */
+    async loadAuditPrompt(ctx) {
+        if (this.cachedPrompt) {
+            return this.cachedPrompt;
+        }
+        const promptFileName = 'plugin.prompt.mysql.select.audit.md';
+        const runtimeOverridePath = path.join(ctx.paths.projectRoot, 'config', 'prompts', promptFileName);
+        try {
+            const content = await fs.readFile(runtimeOverridePath, 'utf-8');
+            if (content.trim()) {
+                this.cachedPrompt = content;
+                return content;
+            }
+        }
+        catch {
+            // 运行时覆盖不存在，继续降级读取内置模板
+        }
+        const currentDir = path.dirname(fileURLToPath(import.meta.url));
+        const packageDefaultPath = path.resolve(currentDir, '..', 'config', 'prompts', promptFileName);
+        try {
+            const content = await fs.readFile(packageDefaultPath, 'utf-8');
+            this.cachedPrompt = content;
+            return content;
+        }
+        catch (err) {
+            ctx.logger.error(`加载内置 SQL 审计提示词模板失败: ${packageDefaultPath}`, err);
+            return '';
+        }
+    }
+    /** 执行前置独立 LLM 分析审查 */
+    async audit(sql, connectionName, ctx) {
+        const trimmedSql = sql.trim();
+        if (!trimmedSql) {
+            return { passed: false, reason: 'SQL 语句内容不能为空。' };
+        }
+        const auditPrompt = await this.loadAuditPrompt(ctx);
+        if (!auditPrompt) {
+            return { passed: false, reason: 'SQL 审计提示词模板未就绪，安全拒绝执行。' };
+        }
+        const messages = [
+            {
+                role: 'system',
+                content: auditPrompt
+            },
+            {
+                role: 'user',
+                content: JSON.stringify({
+                    connection: connectionName,
+                    sql: trimmedSql
+                }, null, 2)
+            }
+        ];
+        try {
+            const response = await ctx.llm.chat(messages);
+            const rawOutput = response.message?.content?.trim() || '';
+            const cleaned = rawOutput
+                .replace(/^```json\s*/i, '')
+                .replace(/^```\s*/i, '')
+                .replace(/\s*```$/i, '')
+                .trim();
+            const parsed = JSON.parse(cleaned);
+            if (typeof parsed.passed === 'boolean') {
+                return {
+                    passed: parsed.passed,
+                    reason: parsed.reason ? String(parsed.reason) : (parsed.passed ? '审查通过' : '未提供拦截原因')
+                };
+            }
+            return {
+                passed: false,
+                reason: `审查响应结构不符合预期: ${rawOutput}`
+            };
+        }
+        catch (err) {
+            ctx.logger.error('前置 LLM SQL 审计过程发生异常', err);
+            return {
+                passed: false,
+                reason: `SQL 安全审查服务调用失败: ${err?.message || err}`
+            };
+        }
+    }
+}

package/plugins/plugin-tool-mysql/dist/index.d.ts

@@ -0,0 +1,14 @@
+import type { FreyaContext, ToolPlugin, FreyaTool } from '@eoasmxd/freya-sdk';
+/** MySQL 数据库查询工具箱插件 */
+export default class MysqlToolsPlugin implements ToolPlugin {
+    type: "tool";
+    private poolManager?;
+    private auditService;
+    private tools;
+    setup(ctx: FreyaContext): Promise<void>;
+    getId(): string;
+    getInstructionPrompt(): string;
+    getTools(): FreyaTool[];
+    stop(ctx: FreyaContext): Promise<void>;
+}
+export declare const Plugin: typeof MysqlToolsPlugin;

package/plugins/plugin-tool-mysql/dist/index.js

@@ -0,0 +1,34 @@
+import { MysqlPoolManager } from './pool-manager.js';
+import { SqlAuditService } from './audit.js';
+import { MysqlQueryTool } from './tools.js';
+/** MySQL 数据库查询工具箱插件 */
+export default class MysqlToolsPlugin {
+    type = 'tool';
+    poolManager;
+    auditService = new SqlAuditService();
+    tools = [];
+    async setup(ctx) {
+        this.poolManager = new MysqlPoolManager(ctx);
+        this.tools = [
+            new MysqlQueryTool(this.poolManager, this.auditService)
+        ];
+        const available = this.poolManager.getAvailableConnectionNames();
+        ctx.logger.info(`MySQL 工具箱插件初始化就绪，已注册连接: [${available.join(', ') || '暂未配置'}]`);
+    }
+    getId() {
+        return 'mysql';
+    }
+    getInstructionPrompt() {
+        return 'plugin.prompt.mysql';
+    }
+    getTools() {
+        return this.tools;
+    }
+    async stop(ctx) {
+        if (this.poolManager) {
+            await this.poolManager.closeAll();
+            ctx.logger.info('MySQL 工具箱连接资源已全部释放。');
+        }
+    }
+}
+export const Plugin = MysqlToolsPlugin;

package/plugins/plugin-tool-mysql/dist/pool-manager.d.ts

@@ -0,0 +1,32 @@
+import mysql from 'mysql2/promise';
+import type { FreyaContext } from '@eoasmxd/freya-sdk';
+/** MySQL 连接配置契约 */
+export interface MysqlConnectionConfig {
+    name: string;
+    host?: string;
+    port?: number;
+    user?: string;
+    password?: string;
+    database?: string;
+    connectionLimit?: number;
+    connectTimeout?: number;
+}
+/** MySQL 多命名连接池管理器 */
+export declare class MysqlPoolManager {
+    private ctx;
+    private pools;
+    private connectionConfigs;
+    private defaultConnectionName;
+    constructor(ctx: FreyaContext);
+    /** 加载与同步配置 */
+    reloadConfigs(): void;
+    /** 获取指定名称的数据库连接池 */
+    getPool(targetName?: string): {
+        pool: mysql.Pool;
+        config: MysqlConnectionConfig;
+    };
+    /** 获取所有可用连接名称 */
+    getAvailableConnectionNames(): string[];
+    /** 释放所有已建立的连接池资源 */
+    closeAll(): Promise<void>;
+}