feat: Round 5 - Memory Service, Tool Engine, Call Records, Thinking Logs

- Fix: Session history flash (race condition + WS guard) - Fix: Chat background overlay + sidebar transparency - Fix: IoT device control (Chinese action names, status field) - Feat: Independent memory-service (port 8091, 13 endpoints) - Feat: Independent tool-engine service (port 8092, 13 tools) - Feat: Tool call logs with paginated DevTools panel - Feat: Thinking log records with DevTools panel - Feat: Future development roadmap document - Chore: Updated .gitignore, go.work, DevTools config - Chore: 5-service health check, project review docs
2026-05-18 20:05:14 +08:00
parent b6ec36886c
commit 78e3f450c2
54 changed files with 7846 additions and 106 deletions
@@ -0,0 +1,234 @@
+package tools
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+
+	"github.com/yourname/cyrene-ai/tool-engine/internal/model"
+)
+
+// FileTool provides sandboxed file system operations for the LLM.
+type FileTool struct {
+	dataDir string
+}
+
+// NewFileTool creates a file operation tool with the given data directory.
+func NewFileTool(dataDir string) *FileTool {
+	if dataDir == "" {
+		dataDir = "/tmp/cyrene_data"
+	}
+	return &FileTool{dataDir: dataDir}
+}
+
+// Definition returns the tool definition for LLM function calling.
+func (t *FileTool) Definition() model.ToolDefinition {
+	return model.ToolDefinition{
+		Name:        "file_ops",
+		Description: "文件操作工具。在服务端安全沙盒内读写文件、列出目录、检查文件是否存在、删除文件。所有操作限制在数据目录内，无法访问系统文件。",
+		Parameters: map[string]interface{}{
+			"type": "object",
+			"properties": map[string]interface{}{
+				"action": map[string]interface{}{
+					"type":        "string",
+					"enum":        []string{"read", "write", "list", "exists", "delete"},
+					"description": "操作类型。read: 读取文件；write: 写入文件（覆盖或创建）；list: 列出目录内容；exists: 检查路径是否存在；delete: 删除文件",
+				},
+				"path": map[string]interface{}{
+					"type":        "string",
+					"description": "文件或目录路径（相对于数据目录），如 \"notes/todo.txt\"",
+				},
+				"content": map[string]interface{}{
+					"type":        "string",
+					"description": "写入内容（write 操作时必需）",
+				},
+			},
+			"required": []string{"action", "path"},
+		},
+	}
+}
+
+// Execute performs file operations.
+func (t *FileTool) Execute(ctx context.Context, arguments map[string]interface{}) (*model.ToolResult, error) {
+	action, ok := arguments["action"].(string)
+	if !ok || action == "" {
+		return &model.ToolResult{ID: "", Error: "缺少 action 参数"}, nil
+	}
+
+	relPath, ok := arguments["path"].(string)
+	if !ok || relPath == "" {
+		return &model.ToolResult{ID: "", Error: "缺少 path 参数"}, nil
+	}
+
+	safePath, err := t.resolveSafePath(relPath)
+	if err != nil {
+		return &model.ToolResult{ID: "", Error: err.Error()}, nil
+	}
+
+	switch action {
+	case "read":
+		return t.handleRead(safePath, relPath)
+	case "write":
+		content, _ := arguments["content"].(string)
+		return t.handleWrite(safePath, relPath, content)
+	case "list":
+		return t.handleList(safePath, relPath)
+	case "exists":
+		return t.handleExists(safePath, relPath)
+	case "delete":
+		return t.handleDelete(safePath, relPath)
+	default:
+		return &model.ToolResult{
+			ID:    "",
+			Error: fmt.Sprintf("未知操作: %s，支持: read, write, list, exists, delete", action),
+		}, nil
+	}
+}
+
+func (t *FileTool) resolveSafePath(relPath string) (string, error) {
+	clean := filepath.Clean(relPath)
+
+	if err := os.MkdirAll(t.dataDir, 0755); err != nil {
+		return "", fmt.Errorf("创建数据目录失败: %v", err)
+	}
+
+	abs := filepath.Join(t.dataDir, clean)
+
+	realPath, err := filepath.EvalSymlinks(abs)
+	if err != nil {
+		if os.IsNotExist(err) {
+			if !strings.HasPrefix(filepath.Clean(abs), filepath.Clean(t.dataDir)+string(filepath.Separator)) &&
+				filepath.Clean(abs) != filepath.Clean(t.dataDir) {
+				return "", fmt.Errorf("路径穿越检测: %s 不在允许的数据目录内", relPath)
+			}
+			return abs, nil
+		}
+		return "", fmt.Errorf("路径解析失败: %v", err)
+	}
+
+	if !strings.HasPrefix(realPath, filepath.Clean(t.dataDir)+string(filepath.Separator)) &&
+		realPath != filepath.Clean(t.dataDir) {
+		return "", fmt.Errorf("路径穿越检测: %s 不在允许的数据目录内", relPath)
+	}
+
+	return realPath, nil
+}
+
+func (t *FileTool) handleRead(absPath, relPath string) (*model.ToolResult, error) {
+	const maxSize = 100 * 1024
+
+	info, err := os.Stat(absPath)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return &model.ToolResult{ID: "", Error: fmt.Sprintf("文件不存在: %s", relPath)}, nil
+		}
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("读取文件失败: %v", err)}, nil
+	}
+
+	if info.IsDir() {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("路径是目录，不能用 read 操作: %s", relPath)}, nil
+	}
+
+	if info.Size() > maxSize {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("文件过大 (%d bytes)，超过限制 (%d bytes)", info.Size(), maxSize)}, nil
+	}
+
+	data, err := os.ReadFile(absPath)
+	if err != nil {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("读取文件失败: %v", err)}, nil
+	}
+
+	return &model.ToolResult{
+		ID:     "",
+		Output: fmt.Sprintf("文件: %s\n大小: %d bytes\n---\n%s", relPath, len(data), string(data)),
+	}, nil
+}
+
+func (t *FileTool) handleWrite(absPath, relPath, content string) (*model.ToolResult, error) {
+	dir := filepath.Dir(absPath)
+	if err := os.MkdirAll(dir, 0755); err != nil {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("创建目录失败: %v", err)}, nil
+	}
+
+	if err := os.WriteFile(absPath, []byte(content), 0644); err != nil {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("写入文件失败: %v", err)}, nil
+	}
+
+	return &model.ToolResult{
+		ID:     "",
+		Output: fmt.Sprintf("已写入文件: %s (%d bytes)", relPath, len(content)),
+	}, nil
+}
+
+func (t *FileTool) handleList(absPath, relPath string) (*model.ToolResult, error) {
+	entries, err := os.ReadDir(absPath)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return &model.ToolResult{ID: "", Error: fmt.Sprintf("目录不存在: %s", relPath)}, nil
+		}
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("读取目录失败: %v", err)}, nil
+	}
+
+	if len(entries) == 0 {
+		return &model.ToolResult{ID: "", Output: fmt.Sprintf("目录: %s\n(空目录)", relPath)}, nil
+	}
+
+	var result strings.Builder
+	result.WriteString(fmt.Sprintf("目录: %s\n共 %d 项:\n", relPath, len(entries)))
+	for _, entry := range entries {
+		icon := "📄"
+		if entry.IsDir() {
+			icon = "📁"
+		}
+		info, _ := entry.Info()
+		size := ""
+		if info != nil && !entry.IsDir() {
+			size = fmt.Sprintf(" (%d bytes)", info.Size())
+		}
+		result.WriteString(fmt.Sprintf("  %s %s%s\n", icon, entry.Name(), size))
+	}
+
+	return &model.ToolResult{ID: "", Output: result.String()}, nil
+}
+
+func (t *FileTool) handleExists(absPath, relPath string) (*model.ToolResult, error) {
+	info, err := os.Stat(absPath)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return &model.ToolResult{ID: "", Output: fmt.Sprintf("路径不存在: %s", relPath)}, nil
+		}
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("检查路径失败: %v", err)}, nil
+	}
+
+	kind := "文件"
+	if info.IsDir() {
+		kind = "目录"
+	}
+
+	return &model.ToolResult{
+		ID:     "",
+		Output: fmt.Sprintf("路径存在: %s (%s, %d bytes)", relPath, kind, info.Size()),
+	}, nil
+}
+
+func (t *FileTool) handleDelete(absPath, relPath string) (*model.ToolResult, error) {
+	info, err := os.Stat(absPath)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return &model.ToolResult{ID: "", Error: fmt.Sprintf("文件不存在: %s", relPath)}, nil
+		}
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("删除文件失败: %v", err)}, nil
+	}
+
+	if info.IsDir() {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("不能删除目录（安全限制）: %s", relPath)}, nil
+	}
+
+	if err := os.Remove(absPath); err != nil {
+		return &model.ToolResult{ID: "", Error: fmt.Sprintf("删除文件失败: %v", err)}, nil
+	}
+
+	return &model.ToolResult{ID: "", Output: fmt.Sprintf("已删除文件: %s", relPath)}, nil
+}