添加前端适配说明书

Author: lioensky

审核系统开发文档和适配说明.md

@@ -0,0 +1,84 @@
+# VCP Tool Call Manual Approval API
+
+Here is the documentation for the Phase 1 backend implementation to facilitate frontend integration.
+
+## Backend to Frontend (WebSocket Notification)
+
+When a tool call requires manual approval, the backend broadcasts a `tool_approval_request` to all connected [AdminPanel](file:///h:/VCP/VCPToolBox/WebSocketServer.js#541-555) clients.
+
+**Message Type:** `tool_approval_request`
+
+**Payload Format:**
+```json
+{
+  "type": "tool_approval_request",
+  "data": {
+    "requestId": "approve-1710348740345-6n2d9sk0p",
+    "toolName": "LinuxShellExecutor",
+    "maid": "VCPMaid",
+    "args": {
+      "command": "rm -rf /"
+    },
+    "timestamp": "2024-03-14T00:52:20.345+08:00"
+  }
+}
+```
+
+- `requestId`: Unique identifier for this approval request.
+- `toolName`: The name of the tool being called.
+- `maid`: The identity (maid) initiating the call.
+- `args`: The arguments passed to the tool.
+- `timestamp`: Specific local time of the request.
+
+---
+
+## Frontend to Backend (Approval Decision)
+
+The frontend should send back a `tool_approval_response` once the user clicks "Allow" or "Reject".
+
+**Message Type:** `tool_approval_response`
+
+**Payload Format:**
+```json
+{
+  "type": "tool_approval_response",
+  "data": {
+    "requestId": "approve-1710348740345-6n2d9sk0p",
+    "approved": true
+  }
+}
+```
+
+- `requestId`: Must match the `requestId` received in the request.
+- `approved`: `true` to allow execution, `false` to reject. 
+
+---
+
+## Configuration Settings
+
+The logic is controlled by [toolApprovalConfig.json](file:///h:/VCP/VCPToolBox/toolApprovalConfig.json) in the project root:
+
+```json
+{
+  "enabled": false,
+  "timeoutMinutes": 5,
+  "approveAll": false,
+  "approvalList": [
+    "TestTool1",
+    "TestTool2"
+  ]
+}
+```
+
+- `enabled`: Global switch for the feature.
+- `timeoutMinutes`: Automatic rejection if no response is received within this time.
+- `approveAll`: If `true`, all tool calls will require manual approval (ignoring `approvalList`).
+- `approvalList`: specific list of tool names that require approval if `approveAll` is `false`.
+
+---
+
+## Implementation Status
+- [x] Configuration loading & hot-reloading ([ToolApprovalManager](file:///h:/VCP/VCPToolBox/modules/toolApprovalManager.js#5-78))
+- [x] Tool call interception ([Plugin.js](file:///h:/VCP/VCPToolBox/Plugin.js))
+- [x] Promise-based waiting with timeout
+- [x] WebSocket broadcasting and response handling