Copilot 智能体机制深度剖析

class MCPProtocolHandler { constructor() { this.schemas = new Map(); this.initializeFunctionSchemas(); } async parseInvocation(xmlString) { const parser = new DOMParser(); const doc = parser.parseFromString(xmlString, 'text/xml'); const functionCalls = doc.getElementsByTagName('function_calls')[0]; if (!functionCalls) { throw new MCPError('Invalid XML: missing function_calls root'); } const invokes = functionCalls.getElementsByTagName('invoke'); const calls = []; for (let i = 0; i < invokes.length; i++) { const invoke = invokes[i]; const functionName = invoke.getAttribute('name'); if (!functionName) { throw new MCPError('Missing function name in invoke ' + i); } // 解析参数 const parameters = this.parseParameters(invoke); // 验证函数调用 await this.validateFunctionCall(functionName, parameters); calls.push({ name: functionName, parameters: parameters, invokeIndex: i }); } return calls[0]; // 当前实现处理单个调用 } parseParameters(invokeElement) { const params = {}; const paramElements = invokeElement.getElementsByTagName('parameter'); for (let i = 0; i < paramElements.length; i++) { const param = paramElements[i]; const name = param.getAttribute('name'); const value = param.textContent; if (!name) { throw new MCPError('Parameter ' + i + ' missing name attribute'); } // 智能类型转换 params[name] = this.convertParameterValue(value, name); } return params; } initializeFunctionSchemas() { // str_replace_editor 模式定义 this.schemas.set('str_replace_editor', { required: ['command', 'path'], properties: { command: { type: 'string', enum: ['view', 'create', 'str_replace', 'insert', 'undo_edit'] }, path: { type: 'string' }, file_text: { type: 'string' } } }); // bash 模式定义 this.schemas.set('bash', { required: ['command'], properties: { command: { type: 'string' }, timeout: { type: 'integer', minimum: 1, maximum: 300 } } }); // report_progress 模式定义 this.schemas.set('report_progress', { required: ['commitMessage', 'prDescription'], properties: { commitMessage: { type: 'string', maxLength: 72 }, prDescription: { type: 'string', maxLength: 65536 } } }); } async validateFunctionCall(name, params) { const schema = this.schemas.get(name); if (!schema) { throw new MCPError('Unknown function: ' + name); } // 必需参数检查 for (const required of schema.required || []) { if (!(required in params)) { throw new MCPError('Missing required parameter "' + required + '"'); } } // 参数类型验证 for (const [key, value] of Object.entries(params)) { const propSchema = schema.properties[key]; if (propSchema && !this.validateType(value, propSchema)) { throw new MCPError('Invalid type for parameter "' + key + '"'); } } // 安全性检查 await this.securityCheck(name, params); } async securityCheck(name, params) { // 路径安全检查 if (params.path && typeof params.path === 'string') { if (params.path.includes('../')) { throw new SecurityError('Path traversal attempt detected'); } if (!params.path.startsWith('/home/runner/work/') && !params.path.startsWith('/tmp/')) { throw new SecurityError('Access denied to path: ' + params.path); } } // 命令注入检查 if (name === 'bash' && params.command) { if (params.command.includes('rm -rf /') || params.command.includes('sudo') || params.command.includes('|sh')) { throw new SecurityError('Dangerous command detected'); } } } }