feat(permission): 实现 WebSocket 权限确认机制

重构权限系统，将终端 UI 代码从 core 模块移除，实现基于 WebSocket 的权限确认流程：

Core 模块清理：
- 删除 permission/prompt.ts 和 file-prompt.ts（终端交互）
- 删除 diff.ts 中的 chalk 渲染函数
- 删除 config.ts 中的 inquirer 交互
- 移除 chalk 依赖

Server 权限处理：
- 新增 permission/handler.ts，实现 WebSocket 权限请求/响应
- 更新 agent/adapter.ts 设置权限回调
- 更新 ws.ts 处理 permission_response 消息

Web 权限组件：
- 新增 PermissionDialog 组件，显示权限请求详情和 Diff
- 更新 useChat hook 管理权限状态
- 更新 Chat 页面集成权限弹窗

packages/core/src/permission/checkers/file.ts

@@ -9,7 +9,6 @@ import type {
   PermissionContext,
 } from '../types.js';
 import type { PermissionChecker } from './base.js';
-import { promptFilePermission } from '../file-prompt.js';
 
 const CONFIG_DIR = path.join(os.homedir(), '.ai-terminal-assistant');
 const FILE_PERMISSION_FILE = path.join(CONFIG_DIR, 'file-permissions.json');
@@ -252,28 +251,7 @@ export class FilePermissionChecker implements PermissionChecker {
     sessionKey: string,
     reason: string
   ): Promise<PermissionCheckResult> {
-    // 对于 write/edit 操作，如果有内容信息，使用 diff 显示
-    if ((ctx.operation === 'write' || ctx.operation === 'edit') && ctx.newContent !== undefined) {
-      // 更新 ctx 中的路径为绝对路径
-      const ctxWithAbsPath: FilePermissionContext = {
-        ...ctx,
-        path: absolutePath,
-      };
-
-      const decision = await promptFilePermission(ctxWithAbsPath);
-
-      if (decision.remember) {
-        this.sessionPermissions.set(sessionKey, decision.allow ? 'allow' : 'deny');
-      }
-
-      return {
-        allowed: decision.allow,
-        action: decision.allow ? 'allow' : 'deny',
-        reason: decision.allow ? '用户允许' : '用户拒绝',
-      };
-    }
-
-    // 其他操作使用原有的回调
+    // 如果没有回调，返回需要确认的状态
     if (!this.askCallback) {
       return {
         allowed: false,

packages/core/src/permission/file-prompt.ts

@@ -1,186 +0,0 @@
-/**
- * 文件操作确认提示
- * 显示 diff 对比并让用户确认
- */
-
-import * as readline from 'readline';
-import * as fs from 'fs/promises';
-import chalk from 'chalk';
-import type { FilePermissionContext, PermissionDecision } from './types.js';
-import { computeDiff, formatDiff, countChanges, formatEditDiff } from '../utils/diff.js';
-
-/**
- * 显示文件写入的 diff 并请求确认
- */
-export async function promptFileWrite(ctx: FilePermissionContext): Promise<PermissionDecision> {
-  const { path: filePath, newContent } = ctx;
-
-  if (!newContent) {
-    // 没有内容，使用简单确认
-    return promptSimpleConfirm(ctx);
-  }
-
-  // 读取原文件内容
-  let oldContent: string | null = null;
-  try {
-    oldContent = await fs.readFile(filePath, 'utf-8');
-  } catch {
-    // 文件不存在，是新文件
-  }
-
-  // 如果内容相同，直接允许
-  if (oldContent === newContent) {
-    return { allow: true, remember: false };
-  }
-
-  // 计算 diff
-  const diff = computeDiff(oldContent, newContent);
-  const changes = countChanges(diff);
-
-  // 显示 diff
-  console.log('');
-  console.log(chalk.yellow('📝 文件写入预览'));
-  console.log(chalk.cyan('文件: ') + chalk.white(filePath));
-
-  if (diff.isNew) {
-    console.log(chalk.green('状态: ') + chalk.white('新文件'));
-    console.log(chalk.green(`+${changes.additions} 行`));
-  } else {
-    console.log(chalk.green(`+${changes.additions} 行`) + ' / ' + chalk.red(`-${changes.deletions} 行`));
-  }
-
-  console.log('');
-  console.log(chalk.gray('─'.repeat(60)));
-
-  // 限制显示行数
-  const diffOutput = formatDiff(diff, filePath);
-  const lines = diffOutput.split('\n');
-  const MAX_LINES = 50;
-
-  if (lines.length > MAX_LINES) {
-    console.log(lines.slice(0, MAX_LINES).join('\n'));
-    console.log(chalk.yellow(`\n... 省略 ${lines.length - MAX_LINES} 行 ...`));
-  } else {
-    console.log(diffOutput);
-  }
-
-  console.log(chalk.gray('─'.repeat(60)));
-  console.log('');
-
-  // 询问用户确认
-  return promptConfirm();
-}
-
-/**
- * 显示文件编辑的 diff 并请求确认
- */
-export async function promptFileEdit(ctx: FilePermissionContext): Promise<PermissionDecision> {
-  const { path: filePath, oldContent, newContent } = ctx;
-
-  if (!oldContent || !newContent) {
-    // 没有内容，使用简单确认
-    return promptSimpleConfirm(ctx);
-  }
-
-  // 显示编辑 diff
-  console.log('');
-  console.log(chalk.yellow('✏️  文件编辑预览'));
-  console.log(chalk.cyan('文件: ') + chalk.white(filePath));
-  console.log('');
-  console.log(chalk.gray('─'.repeat(60)));
-  console.log(formatEditDiff(oldContent, newContent));
-  console.log(chalk.gray('─'.repeat(60)));
-  console.log('');
-
-  // 询问用户确认
-  return promptConfirm();
-}
-
-/**
- * 简单确认（无 diff）
- */
-async function promptSimpleConfirm(ctx: FilePermissionContext): Promise<PermissionDecision> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    console.log('');
-    console.log(chalk.yellow('⚠️  文件操作确认'));
-    console.log(chalk.cyan('操作: ') + chalk.white(ctx.operation));
-    console.log(chalk.cyan('文件: ') + chalk.white(ctx.path));
-    console.log('');
-
-    showConfirmOptions();
-
-    rl.question(chalk.yellow('请选择 [y/Y/n/N]: '), (answer) => {
-      rl.close();
-      resolve(parseAnswer(answer));
-    });
-  });
-}
-
-/**
- * 通用确认提示
- */
-async function promptConfirm(): Promise<PermissionDecision> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    showConfirmOptions();
-
-    rl.question(chalk.yellow('请选择 [y/Y/n/N]: '), (answer) => {
-      rl.close();
-      resolve(parseAnswer(answer));
-    });
-  });
-}
-
-/**
- * 显示确认选项
- */
-function showConfirmOptions(): void {
-  console.log(chalk.white('选择操作:'));
-  console.log(chalk.green('  [y] ') + '确认执行');
-  console.log(chalk.green('  [Y] ') + '确认执行，并记住此类操作（本次会话）');
-  console.log(chalk.red('  [n] ') + '拒绝执行');
-  console.log(chalk.red('  [N] ') + '拒绝执行，并记住此类操作（本次会话）');
-  console.log('');
-}
-
-/**
- * 解析用户输入
- */
-function parseAnswer(answer: string): PermissionDecision {
-  const choice = answer.trim();
-
-  switch (choice) {
-    case 'y':
-      return { allow: true, remember: false };
-    case 'Y':
-      return { allow: true, remember: true };
-    case 'N':
-      return { allow: false, remember: true };
-    case 'n':
-    default:
-      return { allow: false, remember: false };
-  }
-}
-
-/**
- * 根据操作类型选择合适的确认提示
- */
-export async function promptFilePermission(ctx: FilePermissionContext): Promise<PermissionDecision> {
-  switch (ctx.operation) {
-    case 'write':
-      return promptFileWrite(ctx);
-    case 'edit':
-      return promptFileEdit(ctx);
-    default:
-      return promptSimpleConfirm(ctx);
-  }
-}

packages/core/src/permission/index.ts

@@ -8,16 +8,17 @@ export type {
   FileOperation,
   FilePermissionContext,
   FilePermissionConfig,
+  WebPermissionContext,
+  WebPermissionConfig,
+  GitOperation,
+  GitPermissionContext,
+  GitPermissionConfig,
 } from './types.js';
 
 export { matchPattern, matchRules, parseCommand, generateAskPattern } from './wildcard.js';
 
 export { PermissionManager, getPermissionManager, resetPermissionManager } from './manager.js';
 
-export { promptPermission, showPermissionDenied, showPermissionAllowed } from './prompt.js';
-
-export { promptFilePermission, promptFileWrite, promptFileEdit } from './file-prompt.js';
-
 // Checker pattern exports
 export type { PermissionChecker, BasePermissionConfig } from './checkers/base.js';
 export { BashPermissionChecker } from './checkers/bash.js';

packages/core/src/permission/prompt.ts

@@ -1,79 +0,0 @@
-import * as readline from 'readline';
-import chalk from 'chalk';
-import type { PermissionContext, PermissionDecision } from './types.js';
-
-/**
- * 在终端中提示用户确认权限
- */
-export async function promptPermission(ctx: PermissionContext): Promise<PermissionDecision> {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-  });
-
-  return new Promise((resolve) => {
-    console.log('');
-    console.log(chalk.yellow('⚠️  权限确认'));
-    console.log(chalk.cyan('命令: ') + chalk.white(ctx.command));
-    console.log(chalk.cyan('目录: ') + chalk.gray(ctx.workdir));
-
-    if (ctx.externalPaths && ctx.externalPaths.length > 0) {
-      console.log(chalk.red('⚠️  此命令访问项目目录外的路径:'));
-      ctx.externalPaths.forEach(p => {
-        console.log(chalk.red('   • ') + chalk.gray(p));
-      });
-    }
-
-    if (ctx.patterns && ctx.patterns.length > 0) {
-      console.log(chalk.gray('匹配模式: ') + ctx.patterns.join(', '));
-    }
-
-    console.log('');
-    console.log(chalk.white('选择操作:'));
-    console.log(chalk.green('  [y] ') + '允许执行');
-    console.log(chalk.green('  [Y] ') + '允许执行，并记住此类命令（本次会话）');
-    console.log(chalk.red('  [n] ') + '拒绝执行');
-    console.log(chalk.red('  [N] ') + '拒绝执行，并记住此类命令（本次会话）');
-    console.log('');
-
-    rl.question(chalk.yellow('请选择 [y/Y/n/N]: '), (answer) => {
-      rl.close();
-
-      const choice = answer.trim();
-
-      switch (choice) {
-        case 'y':
-          resolve({ allow: true, remember: false });
-          break;
-        case 'Y':
-          resolve({ allow: true, remember: true });
-          break;
-        case 'N':
-          resolve({ allow: false, remember: true });
-          break;
-        case 'n':
-        default:
-          resolve({ allow: false, remember: false });
-          break;
-      }
-    });
-  });
-}
-
-/**
- * 显示权限被拒绝的消息
- */
-export function showPermissionDenied(command: string, reason: string): void {
-  console.log('');
-  console.log(chalk.red('🚫 权限被拒绝'));
-  console.log(chalk.cyan('命令: ') + chalk.white(command));
-  console.log(chalk.cyan('原因: ') + chalk.gray(reason));
-  console.log('');
-}
-
-/**
- * 显示权限允许的消息
- */
-export function showPermissionAllowed(command: string): void {
-  console.log(chalk.green('✓ ') + chalk.gray(`执行: ${command}`));
-}