优化: 工具调用标识类型安全加固

crates/df-storage/src/crud/conversation_repo.rs

@@ -98,7 +98,9 @@ fn ai_tool_execution_from_row(row: &Row<'_>) -> std::result::Result<AiToolExecut
         // message_id 列老库经 v21 迁移补建。unwrap_or(None) 兜底:
         // 新库空表直接有列;老库行 ALTER 后 NULL;极端情况(迁移未跑/手工删列)防御。
         message_id: row.get("message_id").unwrap_or(None),
-        tool_call_id: row.get("tool_call_id")?,
+        // row.get::<String> 后 From<String> → ToolCallId(newtype 不直接 impl rusqlite::FromSql,
+        // 避免 df-types 反向依赖 rusqlite;Deref<Target=str> 不自动给 ToSql)
+        tool_call_id: row.get::<_, String>("tool_call_id")?.into(),
         tool_name: row.get("tool_name")?,
         arguments: row.get("arguments")?,
         result: row.get("result")?,
@@ -221,7 +223,7 @@ impl_repo!(
             "INSERT INTO ai_tool_executions (id, conversation_id, message_id, tool_call_id, tool_name, arguments, result, status, risk_level, requested_at, executed_at, decided_by)
              VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9, ?10, ?11, ?12)",
             params![
-                rec.id, rec.conversation_id, rec.message_id, rec.tool_call_id, rec.tool_name,
+                rec.id, rec.conversation_id, rec.message_id, &*rec.tool_call_id, rec.tool_name,
                 rec.arguments, rec.result, rec.status, rec.risk_level,
                 rec.requested_at, rec.executed_at, rec.decided_by
             ],
@@ -231,7 +233,7 @@ impl_repo!(
         conn.execute(
             "UPDATE ai_tool_executions SET conversation_id = ?1, message_id = ?2, tool_call_id = ?3, tool_name = ?4, arguments = ?5, result = ?6, status = ?7, risk_level = ?8, requested_at = ?9, executed_at = ?10, decided_by = ?11 WHERE id = ?12",
             params![
-                rec.conversation_id, rec.message_id, rec.tool_call_id, rec.tool_name,
+                rec.conversation_id, rec.message_id, &*rec.tool_call_id, rec.tool_name,
                 rec.arguments, rec.result, rec.status, rec.risk_level,
                 rec.requested_at, rec.executed_at, rec.decided_by, rec.id
             ],
@@ -269,7 +271,7 @@ impl AiToolExecutionRepo {
                 )?;
                 for rec in &records {
                     stmt.execute(params![
-                        rec.id, rec.conversation_id, rec.message_id, rec.tool_call_id, rec.tool_name,
+                        rec.id, rec.conversation_id, rec.message_id, &*rec.tool_call_id, rec.tool_name,
                         rec.arguments, rec.result, rec.status, rec.risk_level,
                         rec.requested_at, rec.executed_at, rec.decided_by
                     ])?;

crates/df-storage/src/models.rs

@@ -1,7 +1,7 @@
 //! 数据模型定义 — 与数据库表对应的 Rust 结构体
 
 use df_ai_core::model::{deserialize_model_configs, ModelConfig};
-use df_types::types::{IdeaStatus, LinkType, NodeType, ProjectStatus, TaskStatus};
+use df_types::types::{IdeaStatus, LinkType, NodeType, ProjectStatus, TaskStatus, ToolCallId};
 use serde::{Deserialize, Serialize};
 
 // ============================================================
@@ -383,7 +383,9 @@ pub struct AiToolExecutionRecord {
     /// 升级后,audit 写入从 ContextManager 取当前 assistant 消息 id 填入。
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub message_id: Option<String>,
-    pub tool_call_id: String,
+    /// 工具调用关联键(跨 tool_calls / pending_approvals / ai_tool_executions)。
+    /// branded newtype 防把 execution_id / conversation_id 等同形 String 误传。
+    pub tool_call_id: ToolCallId,
     pub tool_name: String,
     pub arguments: String,
     pub result: Option<String>,