@eoasmxd/freya 0.4.0 → 0.4.2

package/src/packages/ui/src/features/config/ConfigModal.tsx

@@ -3,6 +3,7 @@ import { GlobalConfigPanel } from './panels/GlobalConfigPanel.jsx';
 import { ProviderConfigPanel } from './panels/ProviderConfigPanel.jsx';
 import { PromptConfigPanel } from './panels/PromptConfigPanel.jsx';
 import { PluginConfigPanel } from './panels/PluginConfigPanel.jsx';
+import { SkillConfigPanel } from './panels/SkillConfigPanel.jsx';
 
 interface ConfigModalProps {
   onClose: () => void;
@@ -13,13 +14,14 @@ export const ConfigModal: React.FC<ConfigModalProps> = ({
   onClose,
   getApiUrl
 }) => {
-  const [activeTab, setActiveTab] = useState<'global' | 'providers' | 'prompts' | 'plugins'>('global');
+  const [activeTab, setActiveTab] = useState<'global' | 'providers' | 'prompts' | 'plugins' | 'skills'>('global');
 
   const getTabTitle = () => {
     if (activeTab === 'global') return '全局参数设置';
     if (activeTab === 'providers') return '大模型提供商与模型管理';
     if (activeTab === 'prompts') return '系统提示词管理';
     if (activeTab === 'plugins') return '扩展插件管理';
+    if (activeTab === 'skills') return '技能卡管理';
     return '';
   };
 
@@ -55,6 +57,12 @@ export const ConfigModal: React.FC<ConfigModalProps> = ({
             >
               扩展插件
             </button>
+            <button
+              className={`tab-btn ${activeTab === 'skills' ? 'active' : ''}`}
+              onClick={() => setActiveTab('skills')}
+            >
+              技能卡管理
+            </button>
           </div>
         </div>
 
@@ -85,6 +93,10 @@ export const ConfigModal: React.FC<ConfigModalProps> = ({
             {activeTab === 'plugins' && (
               <PluginConfigPanel getApiUrl={getApiUrl} />
             )}
+
+            {activeTab === 'skills' && (
+              <SkillConfigPanel getApiUrl={getApiUrl} />
+            )}
           </div>
         </div>
       </div>

package/src/packages/ui/src/features/config/panels/SkillConfigPanel.tsx

@@ -0,0 +1,137 @@
+import React, { useEffect, useState } from 'react';
+
+interface SkillEntry {
+  id: string;
+  name: string;
+  description: string;
+  enabled: boolean;
+  source: 'builtin' | 'runtime';
+}
+
+interface SkillConfigPanelProps {
+  getApiUrl: (path: string) => string;
+}
+
+export const SkillConfigPanel: React.FC<SkillConfigPanelProps> = ({ getApiUrl }) => {
+  const [skills, setSkills] = useState<SkillEntry[]>([]);
+  const [loading, setLoading] = useState<boolean>(true);
+  const [toasts, setToasts] = useState<{ id: string; message: string; type: 'success' | 'error' | 'info' }[]>([]);
+
+  const showToast = (message: string, type: 'success' | 'error' | 'info' = 'success') => {
+    const id = (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function')
+      ? crypto.randomUUID()
+      : Math.random().toString(36).substring(2, 15);
+    setToasts(prev => [...prev, { id, message, type }]);
+    setTimeout(() => {
+      setToasts(prev => prev.filter(t => t.id !== id));
+    }, 3000);
+  };
+
+  const loadSkills = async () => {
+    try {
+      setLoading(true);
+      const res = await fetch(getApiUrl('/api/config/skills'));
+      const json = await res.json();
+      if (json.success && Array.isArray(json.data)) {
+        setSkills(json.data);
+      }
+    } catch (err) {
+      console.error('加载技能列表失败:', err);
+      showToast('加载技能列表失败', 'error');
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  useEffect(() => {
+    loadSkills();
+  }, []);
+
+  const toggleSkill = async (skillId: string, enabled: boolean) => {
+    try {
+      const res = await fetch(getApiUrl('/api/config/skills/toggle'), {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ skillId, enabled })
+      });
+      const json = await res.json();
+      if (json.success) {
+        showToast(`技能 "${skillId}" 已${enabled ? '启用' : '禁用'}`, 'success');
+        loadSkills();
+      } else {
+        showToast(`切换技能状态失败: ${json.message || json.error}`, 'error');
+      }
+    } catch (err) {
+      console.error('切换技能状态失败:', err);
+      showToast('切换技能状态失败', 'error');
+    }
+  };
+
+  if (loading && skills.length === 0) {
+    return <div style={{ padding: '1rem', color: 'var(--text-secondary)', fontSize: '0.85rem' }}>正在加载技能卡配置...</div>;
+  }
+
+  if (!loading && skills.length === 0) {
+    return (
+      <div style={{ padding: '2rem 1rem', textAlign: 'center', color: 'var(--text-secondary)', fontSize: '0.85rem' }}>
+        暂未扫描到任何技能卡。可在 <code>~/.freya/skills/</code> 目录下添加 <code>*.md</code> 技能卡文件。
+      </div>
+    );
+  }
+
+  return (
+    <div className="plugins-list">
+      {skills.map((skill) => {
+        const displayName = skill.name || skill.id;
+        const displayDesc = skill.description || '未提供描述信息';
+        const isBuiltin = skill.source === 'builtin';
+
+        return (
+          <div key={skill.id} className="plugin-card">
+            <div>
+              <div className="plugin-title">
+                {displayName}
+                <span style={{ fontSize: '0.72rem', color: 'var(--text-secondary)', fontWeight: 'normal', marginLeft: '0.5rem' }}>
+                  ({skill.id})
+                </span>
+                <span
+                  style={{
+                    fontSize: '0.68rem',
+                    marginLeft: '0.5rem',
+                    padding: '0.1rem 0.4rem',
+                    borderRadius: '4px',
+                    background: isBuiltin ? 'rgba(59, 130, 246, 0.15)' : 'rgba(16, 185, 129, 0.15)',
+                    color: isBuiltin ? '#60a5fa' : '#34d399'
+                  }}
+                >
+                  {isBuiltin ? '内置' : '自定义'}
+                </span>
+              </div>
+              <div className="plugin-desc">{displayDesc}</div>
+            </div>
+            <div>
+              <label className="switch">
+                <input
+                  type="checkbox"
+                  checked={skill.enabled}
+                  onChange={(e) => toggleSkill(skill.id, e.target.checked)}
+                />
+                <span className="slider" />
+              </label>
+            </div>
+          </div>
+        );
+      })}
+
+      {toasts.length > 0 && (
+        <div className="toast-container">
+          {toasts.map(t => (
+            <div key={t.id} className={`toast-card ${t.type}`}>
+              <span>{t.message}</span>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+};

package/src/plugins/plugin-tool-mysql/src/audit.ts

@@ -0,0 +1,103 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import type { FreyaContext, LLMMessage } from '@eoasmxd/freya-sdk';
+
+export interface AuditResult {
+  passed: boolean;
+  reason: string;
+}
+
+/** 前置 SQL 安全与完整性审查审计服务 */
+export class SqlAuditService {
+  private cachedPrompt: string | null = null;
+
+  /** 双通道探针加载审计提示词模板 */
+  private async loadAuditPrompt(ctx: FreyaContext): Promise<string> {
+    if (this.cachedPrompt) {
+      return this.cachedPrompt;
+    }
+
+    const promptFileName = 'plugin.prompt.mysql.select.audit.md';
+    const runtimeOverridePath = path.join(ctx.paths.projectRoot, 'config', 'prompts', promptFileName);
+
+    try {
+      const content = await fs.readFile(runtimeOverridePath, 'utf-8');
+      if (content.trim()) {
+        this.cachedPrompt = content;
+        return content;
+      }
+    } catch {
+      // 运行时覆盖不存在，继续降级读取内置模板
+    }
+
+    const currentDir = path.dirname(fileURLToPath(import.meta.url));
+    const packageDefaultPath = path.resolve(currentDir, '..', 'config', 'prompts', promptFileName);
+
+    try {
+      const content = await fs.readFile(packageDefaultPath, 'utf-8');
+      this.cachedPrompt = content;
+      return content;
+    } catch (err: any) {
+      ctx.logger.error(`加载内置 SQL 审计提示词模板失败: ${packageDefaultPath}`, err);
+      return '';
+    }
+  }
+
+  /** 执行前置独立 LLM 分析审查 */
+  public async audit(sql: string, connectionName: string, ctx: FreyaContext): Promise<AuditResult> {
+    const trimmedSql = sql.trim();
+    if (!trimmedSql) {
+      return { passed: false, reason: 'SQL 语句内容不能为空。' };
+    }
+
+    const auditPrompt = await this.loadAuditPrompt(ctx);
+    if (!auditPrompt) {
+      return { passed: false, reason: 'SQL 审计提示词模板未就绪，安全拒绝执行。' };
+    }
+
+    const messages: LLMMessage[] = [
+      {
+        role: 'system',
+        content: auditPrompt
+      },
+      {
+        role: 'user',
+        content: JSON.stringify({
+          connection: connectionName,
+          sql: trimmedSql
+        }, null, 2)
+      }
+    ];
+
+    try {
+      const response = await ctx.llm.chat(messages);
+      const rawOutput = response.message?.content?.trim() || '';
+
+      const cleaned = rawOutput
+        .replace(/^```json\s*/i, '')
+        .replace(/^```\s*/i, '')
+        .replace(/\s*```$/i, '')
+        .trim();
+
+      const parsed = JSON.parse(cleaned);
+      if (typeof parsed.passed === 'boolean') {
+        return {
+          passed: parsed.passed,
+          reason: parsed.reason ? String(parsed.reason) : (parsed.passed ? '审查通过' : '未提供拦截原因')
+        };
+      }
+
+      return {
+        passed: false,
+        reason: `审查响应结构不符合预期: ${rawOutput}`
+      };
+    } catch (err: any) {
+      ctx.logger.error('前置 LLM SQL 审计过程发生异常', err);
+      return {
+        passed: false,
+        reason: `SQL 安全审查服务调用失败: ${err?.message || err}`
+      };
+    }
+  }
+}

package/src/plugins/plugin-tool-mysql/src/index.ts

@@ -0,0 +1,44 @@
+import type { FreyaContext, ToolPlugin, FreyaTool } from '@eoasmxd/freya-sdk';
+import { MysqlPoolManager } from './pool-manager.js';
+import { SqlAuditService } from './audit.js';
+import { MysqlQueryTool } from './tools.js';
+
+/** MySQL 数据库查询工具箱插件 */
+export default class MysqlToolsPlugin implements ToolPlugin {
+  type = 'tool' as const;
+
+  private poolManager?: MysqlPoolManager;
+  private auditService = new SqlAuditService();
+  private tools: FreyaTool[] = [];
+
+  async setup(ctx: FreyaContext): Promise<void> {
+    this.poolManager = new MysqlPoolManager(ctx);
+    this.tools = [
+      new MysqlQueryTool(this.poolManager, this.auditService)
+    ];
+
+    const available = this.poolManager.getAvailableConnectionNames();
+    ctx.logger.info(`MySQL 工具箱插件初始化就绪，已注册连接: [${available.join(', ') || '暂未配置'}]`);
+  }
+
+  getId(): string {
+    return 'mysql';
+  }
+
+  getInstructionPrompt(): string {
+    return 'plugin.prompt.mysql';
+  }
+
+  getTools(): FreyaTool[] {
+    return this.tools;
+  }
+
+  async stop(ctx: FreyaContext): Promise<void> {
+    if (this.poolManager) {
+      await this.poolManager.closeAll();
+      ctx.logger.info('MySQL 工具箱连接资源已全部释放。');
+    }
+  }
+}
+
+export const Plugin = MysqlToolsPlugin;

package/src/plugins/plugin-tool-mysql/src/pool-manager.ts

@@ -0,0 +1,132 @@
+import mysql from 'mysql2/promise';
+import type { FreyaContext } from '@eoasmxd/freya-sdk';
+
+/** MySQL 连接配置契约 */
+export interface MysqlConnectionConfig {
+  name: string;
+  host?: string;
+  port?: number;
+  user?: string;
+  password?: string;
+  database?: string;
+  connectionLimit?: number;
+  connectTimeout?: number;
+}
+
+/** 安全解算嵌套或扁平配置值 */
+function getNestedConfig(config: Record<string, any>, keyPath: string): any {
+  if (!config) return undefined;
+  if (keyPath in config) return config[keyPath];
+  const parts = keyPath.split('.');
+  let current: any = config;
+  for (const part of parts) {
+    if (current && typeof current === 'object' && part in current) {
+      current = current[part];
+    } else {
+      return undefined;
+    }
+  }
+  return current;
+}
+
+/** MySQL 多命名连接池管理器 */
+export class MysqlPoolManager {
+  private pools = new Map<string, mysql.Pool>();
+  private connectionConfigs = new Map<string, MysqlConnectionConfig>();
+  private defaultConnectionName: string = 'default';
+
+  constructor(private ctx: FreyaContext) {
+    this.reloadConfigs();
+  }
+
+  /** 加载与同步配置 */
+  public reloadConfigs(): void {
+    this.connectionConfigs.clear();
+    const config = this.ctx.config || {};
+    this.defaultConnectionName = getNestedConfig(config, 'mysql.defaultConnection') || 'default';
+
+    const connections = getNestedConfig(config, 'mysql.connections');
+    if (Array.isArray(connections)) {
+      for (const item of connections) {
+        if (item && typeof item === 'object' && item.name) {
+          this.connectionConfigs.set(item.name, {
+            name: String(item.name),
+            host: item.host ? String(item.host) : '127.0.0.1',
+            port: item.port ? Number(item.port) : 3306,
+            user: item.user ? String(item.user) : 'root',
+            password: item.password ? String(item.password) : '',
+            database: item.database ? String(item.database) : undefined,
+            connectionLimit: item.connectionLimit ? Number(item.connectionLimit) : 5,
+            connectTimeout: item.connectTimeout ? Number(item.connectTimeout) : 10000
+          });
+        }
+      }
+    }
+
+    if (this.connectionConfigs.size === 0) {
+      const singleHost = getNestedConfig(config, 'mysql.host');
+      if (singleHost) {
+        this.connectionConfigs.set(this.defaultConnectionName, {
+          name: this.defaultConnectionName,
+          host: String(singleHost),
+          port: getNestedConfig(config, 'mysql.port') ? Number(getNestedConfig(config, 'mysql.port')) : 3306,
+          user: getNestedConfig(config, 'mysql.user') ? String(getNestedConfig(config, 'mysql.user')) : 'root',
+          password: getNestedConfig(config, 'mysql.password') ? String(getNestedConfig(config, 'mysql.password')) : '',
+          database: getNestedConfig(config, 'mysql.database') ? String(getNestedConfig(config, 'mysql.database')) : undefined,
+          connectionLimit: getNestedConfig(config, 'mysql.connectionLimit') ? Number(getNestedConfig(config, 'mysql.connectionLimit')) : 5,
+          connectTimeout: getNestedConfig(config, 'mysql.connectTimeout') ? Number(getNestedConfig(config, 'mysql.connectTimeout')) : 10000
+        });
+      }
+    }
+  }
+
+  /** 获取指定名称的数据库连接池 */
+  public getPool(targetName?: string): { pool: mysql.Pool; config: MysqlConnectionConfig } {
+    this.reloadConfigs();
+    const connectionName = targetName || this.defaultConnectionName;
+    const conf = this.connectionConfigs.get(connectionName);
+
+    if (!conf) {
+      const available = Array.from(this.connectionConfigs.keys()).join(', ') || '无配置';
+      throw new Error(`未找到名为 "${connectionName}" 的 MySQL 连接配置。当前可用连接: [${available}]`);
+    }
+
+    let pool = this.pools.get(connectionName);
+    if (!pool) {
+      pool = mysql.createPool({
+        host: conf.host,
+        port: conf.port,
+        user: conf.user,
+        password: conf.password,
+        database: conf.database,
+        connectionLimit: conf.connectionLimit,
+        connectTimeout: conf.connectTimeout,
+        waitForConnections: true,
+        queueLimit: 0,
+        dateStrings: true
+      });
+      this.pools.set(connectionName, pool);
+      this.ctx.logger.info(`MySQL 连接池已创建: [${connectionName}] -> ${conf.user}@${conf.host}:${conf.port}/${conf.database || ''}`);
+    }
+
+    return { pool, config: conf };
+  }
+
+  /** 获取所有可用连接名称 */
+  public getAvailableConnectionNames(): string[] {
+    return Array.from(this.connectionConfigs.keys());
+  }
+
+  /** 释放所有已建立的连接池资源 */
+  public async closeAll(): Promise<void> {
+    for (const [name, pool] of this.pools.entries()) {
+      try {
+        await pool.end();
+        this.ctx.logger.info(`MySQL 连接池已释放: [${name}]`);
+      } catch (err: any) {
+        this.ctx.logger.warn(`关闭 MySQL 连接池 [${name}] 时发生异常: ${err?.message || err}`);
+      }
+    }
+    this.pools.clear();
+  }
+}

package/src/plugins/plugin-tool-mysql/src/tools.ts

@@ -0,0 +1,100 @@
+import type { FreyaContext, ToolDefinition, FreyaTool } from '@eoasmxd/freya-sdk';
+import type { MysqlPoolManager } from './pool-manager.js';
+import type { SqlAuditService } from './audit.js';
+
+/** 脱敏错误信息中的敏感凭据 */
+function sanitizeErrorMessage(err: any, password?: string): string {
+  let message = err?.message || String(err);
+  if (password) {
+    message = message.replaceAll(password, '******');
+  }
+  return message;
+}
+
+/** MySQL 数据库查询执行工具 */
+export class MysqlQueryTool implements FreyaTool {
+  constructor(
+    private poolManager: MysqlPoolManager,
+    private auditService: SqlAuditService
+  ) {}
+
+  getDefinition(): ToolDefinition {
+    return {
+      name: 'mysql_query',
+      description: '执行 MySQL SELECT 查询语句并返回结构化数据。执行前会进行独立 LLM 安全与完整性审核，支持通过 connection 指定目标连接。',
+      parameters: {
+        type: 'object',
+        properties: {
+          sql: {
+            type: 'string',
+            description: '待执行的 SQL 查询语句'
+          },
+          connection: {
+            type: 'string',
+            description: '目标数据库连接名称（可选，若未指定则使用系统默认连接）'
+          },
+          params: {
+            type: 'array',
+            items: {},
+            description: '可选的参数化查询参数列表'
+          }
+        },
+        required: ['sql']
+      }
+    };
+  }
+
+  async execute(args: Record<string, any>, ctx: FreyaContext): Promise<string> {
+    const rawSql = typeof args.sql === 'string' ? args.sql.trim() : '';
+    if (!rawSql) {
+      return '❌ 参数错误: sql 语句不能为空。';
+    }
+
+    const connectionName = typeof args.connection === 'string' && args.connection.trim()
+      ? args.connection.trim()
+      : undefined;
+
+    const queryParams = Array.isArray(args.params) ? args.params : undefined;
+
+    const auditResult = await this.auditService.audit(rawSql, connectionName || 'default', ctx);
+    if (!auditResult.passed) {
+      return `❌ SQL 审查未通过，已拒绝执行。\n原因: ${auditResult.reason}`;
+    }
+
+    let currentPassword = '';
+    try {
+      const { pool, config } = this.poolManager.getPool(connectionName);
+      currentPassword = config.password || '';
+
+      const maxRows = Number(ctx.config?.mysql?.maxRows ?? ctx.config?.['mysql.maxRows']) || 100;
+      const [rows] = await pool.query(rawSql, queryParams);
+
+      if (!Array.isArray(rows)) {
+        return JSON.stringify({
+          connection: config.name,
+          database: config.database || null,
+          affectedRows: (rows as any).affectedRows ?? 0,
+          info: (rows as any).info || '查询已完成'
+        }, null, 2);
+      }
+
+      const totalCount = rows.length;
+      const truncated = totalCount > maxRows;
+      const data = truncated ? rows.slice(0, maxRows) : rows;
+
+      return JSON.stringify({
+        connection: config.name,
+        database: config.database || null,
+        totalCount,
+        returnedCount: data.length,
+        truncated,
+        notice: truncated ? `结果集超过最大限制 ${maxRows} 条，已自动截断返回前 ${maxRows} 条记录。` : undefined,
+        data
+      }, null, 2);
+    } catch (err: any) {
+      const safeMessage = sanitizeErrorMessage(err, currentPassword);
+      ctx.logger.error(`MySQL 查询执行异常: ${safeMessage}`);
+      return `❌ MySQL 查询执行失败: ${safeMessage}`;
+    }
+  }
+}

package/src/plugins/plugin-weixin-channel/src/index.ts

@@ -2,8 +2,7 @@ import type { ChannelPlugin, FreyaAttachment, FreyaCommand, FreyaContext } from
 import crypto from "node:crypto";
 import fs from "node:fs/promises";
 import path from "node:path";
-// @ts-ignore
-import qrcodeTerminal from "qrcode-terminal";
+import QRCode from "qrcode";
 
 interface WeixinBotConfig {
   id: string;
@@ -279,48 +278,24 @@ export default class FreyaWeixinChannelPlugin implements ChannelPlugin {
         throw new Error("获取微信登录二维码失败：服务端未返回 qrcode");
       }
 
-      const matrix: number[][] = [];
-      qrcodeTerminal.generate(scanUrl, { small: false }, (code: string) => {
-        const lines = code.split("\n");
-        for (const line of lines) {
-          const cleanLine = line.replace(/[\r\n]/g, "");
-          if (!cleanLine) continue;
-          const row: number[] = [];
-          const re = /\x1b\[(40|47)m  \x1b\[0m/g;
-          let match;
-          while ((match = re.exec(cleanLine)) !== null) {
-            row.push(match[1] === "40" ? 1 : 0);
-          }
-          if (row.length > 0) {
-            matrix.push(row);
-          }
-        }
+      const qrAscii = await QRCode.toString(scanUrl, {
+        type: "utf8",
+        errorCorrectionLevel: "M",
+        margin: 2
       });
 
-      const size = matrix.length;
-      let svgContent = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${size} ${size}" width="180" height="180" style="shape-rendering:crispEdges;">`;
-      svgContent += `<rect width="${size}" height="${size}" fill="#ffffff"/>`;
-      for (let y = 0; y < size; y++) {
-        const row = matrix[y];
-        for (let x = 0; x < row.length; x++) {
-          if (row[x] === 1) {
-            svgContent += `<rect x="${x}" y="${y}" width="1" height="1" fill="#000000"/>`;
-          }
-        }
-      }
-      svgContent += `</svg>`;
-
-      const base64Svg = Buffer.from(svgContent).toString("base64");
-      const qrDataUri = `data:image/svg+xml;base64,${base64Svg}`;
-
       this.pollWeixinQrStatus(ctx, accountId, config, qrcode).catch((err) => {
         ctx.logger.error(`微信账号 [${accountId}] 后台监听扫码绑定失败:`, err.message);
       });
 
-      return `⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
+      return (
+        `⚠️ **微信账号 [${accountId}] 登录二维码已成功生成！**\n\n` +
         `**[微信扫码] 请使用微信扫描下方二维码绑定账号 [${accountId}]**：\n\n` +
-        `![微信登录二维码](${qrDataUri})\n\n` +
-        `*(提示：若二维码未能正常显示，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`;
+        "```text\n" +
+        qrAscii +
+        "\n```\n\n" +
+        `*(提示：若字符二维码未能正常显示或无法扫描，您可以直接点击 [打开微信二维码网页](${scanUrl}) 扫码绑定)*`
+      );
     } catch (err: any) {
       ctx.logger.error(`微信账号 [${accountId}] 拉取扫码登录失败:`, err.message);
       return `❌ 拉取微信登录二维码失败: ${err.message}`;