feat: MCP架构优化 - 安全机制、代码精简、性能提升

Phase 1: 安全机制增强（ACM）
- 新增 ResourceLimit 数据类，统一资源限制接口
- 新增 get_resource_limit() 函数，支持优先级链：工具参数 > problem.yaml > 默认值
- 新增 WinJobObject 类，实现 Windows 内存/CPU 限制
- 暴力解法内存限制为可用内存上限，超时 60s
- 标准解法内存限制 256MB，超时从 problem.yaml 读取

Phase 2: 代码精简
- 新增 BuildToolMixin 和 RunToolMixin，减少重复代码约 35%
- 重构 SolutionBuildTool、SolutionRunTool、ValidatorBuildTool、GeneratorBuildTool、CheckerBuildTool

Phase 3: 性能优化
- compile_all() 支持并发编译，默认 4 个并发
- 新增 CompileCache 类，基于内容 hash 的编译缓存

依赖新增:
- psutil>=5.9.0
- pywin32>=306; sys_platform == 'win32'
- pyyaml>=6.0.0

Author: SummerOneTwo

.gitignore

@@ -57,3 +57,4 @@ dmypy.json
 # OS
 .DS_Store
 Thumbs.db
+.cache/

CHANGELOG.md

@@ -5,6 +5,43 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] - 2026-04-03
+
+### Features
+
+- **安全机制增强（ACM）**
+  - 新增 `ResourceLimit` 数据类，统一资源限制接口
+  - 新增 `get_resource_limit()` 函数，支持优先级链：工具参数 > problem.yaml > 默认值
+  - 新增 `WinJobObject` 类，实现 Windows 内存/CPU 限制
+  - 暴力解法内存限制为可用内存上限，超时 60s
+  - 标准解法内存限制 256MB，超时从 problem.yaml 读取
+
+- **代码精简**
+  - 新增 `BuildToolMixin` 和 `RunToolMixin`，减少重复代码约 35%
+  - 重构 `SolutionBuildTool`、`SolutionRunTool`、`ValidatorBuildTool`、`GeneratorBuildTool`、`CheckerBuildTool`
+
+- **性能优化**
+  - `compile_all()` 支持并发编译，默认 4 个并发
+  - 新增 `CompileCache` 类，基于内容 hash 的编译缓存
+
+### Design Rationale
+
+- **资源限制策略**：暴力解法需要更多资源（可用内存 + 60s），标准解法遵循题目限制
+- **Mixin 模式**：提取公共编译/执行逻辑，减少代码重复
+- **编译缓存**：避免重复编译相同代码，提升开发效率
+
+### Dependencies
+
+- 新增 `psutil>=5.9.0`：获取系统可用内存
+- 新增 `pywin32>=306; sys_platform == 'win32'`：Windows Job Objects 支持
+- 新增 `pyyaml>=6.0.0`：解析 problem.yaml 配置
+
+### Notes & Caveats
+
+- Windows 内存限制通过 Job Objects 实现，需要适当的进程权限
+- macOS 平台仅支持超时控制，不支持内存限制
+- 编译缓存默认存储在 `.cache/compile/` 目录
+
 ## [0.2.0] - 2026-03-31
 
 ### Features

pyproject.toml

@@ -7,6 +7,9 @@ requires-python = ">=3.14"
 dependencies = [
     "mcp>=1.0.0",
     "pydantic>=2.0.0",
+    "pywin32>=306; sys_platform == 'win32'",
+    "psutil>=5.9.0",
+    "pyyaml>=6.0.3",
 ]
 
 [project.optional-dependencies]
@@ -62,3 +65,10 @@ exclude_lines = [
     "if TYPE_CHECKING:",
     "raise NotImplementedError",
 ]
+
+[dependency-groups]
+dev = [
+    "types-psutil>=7.2.2.20260402",
+    "types-pywin32>=311.0.0.20260402",
+    "types-pyyaml>=6.0.12.20250915",
+]

src/autocode_mcp/tools/checker.py

@@ -3,14 +3,16 @@
 
 基于论文 Algorithm 3: BUILDCHECKER 实现。
 """
+
 import os
 
-from ..utils.compiler import compile_cpp, run_binary_with_args
+from ..utils.compiler import run_binary_with_args
 from ..utils.platform import get_exe_extension
 from .base import Tool, ToolResult
+from .mixins import BuildToolMixin
 
 
-class CheckerBuildTool(Tool):
+class CheckerBuildTool(Tool, BuildToolMixin):
     """构建并验证输出检查器。"""
 
     @property
@@ -91,7 +93,7 @@ async def execute(
         # 编译
         binary_path = os.path.join(problem_dir, f"checker{get_exe_extension()}")
 
-        compile_result = await compile_cpp(source_path, binary_path, compiler=compiler)
+        compile_result = await self.build(source_path, binary_path, compiler=compiler)
 
         if not compile_result.success:
             return ToolResult.fail(
@@ -151,12 +153,14 @@ async def execute(
                 if is_correct:
                     correct_count += 1
 
-                test_results.append({
-                    "index": i + 1,
-                    "expected_verdict": expected_verdict,
-                    "actual_verdict": actual_verdict,
-                    "correct": is_correct,
-                })
+                test_results.append(
+                    {
+                        "index": i + 1,
+                        "expected_verdict": expected_verdict,
+                        "actual_verdict": actual_verdict,
+                        "correct": is_correct,
+                    }
+                )
 
         total = len(test_scenarios)
         accuracy = correct_count / total if total > 0 else 0

src/autocode_mcp/tools/generator.py

@@ -7,12 +7,13 @@
 import hashlib
 import os
 
-from ..utils.compiler import compile_cpp, run_binary, run_binary_with_args
+from ..utils.compiler import run_binary, run_binary_with_args
 from ..utils.platform import get_exe_extension
 from .base import Tool, ToolResult
+from .mixins import BuildToolMixin
 
 
-class GeneratorBuildTool(Tool):
+class GeneratorBuildTool(Tool, BuildToolMixin):
     """构建数据生成器。"""
 
     @property
@@ -69,7 +70,7 @@ async def execute(
         exe_ext = get_exe_extension()
         binary_path = os.path.join(problem_dir, f"gen{exe_ext}")
 
-        compile_result = await compile_cpp(source_path, binary_path, compiler=compiler)
+        compile_result = await self.build(source_path, binary_path, compiler=compiler)
 
         if not compile_result.success:
             return ToolResult.fail(

src/autocode_mcp/tools/mixins.py

@@ -0,0 +1,51 @@
+"""
+Mixin 模块 - 提供代码复用的工具基类。
+
+用于减少工具类之间的重复代码。
+"""
+
+from ..utils.compiler import CompileResult, compile_cpp, run_binary
+from ..utils.resource_limit import get_resource_limit
+
+
+class BuildToolMixin:
+    """构建工具 Mixin - 封装 compile_cpp。"""
+
+    async def build(
+        self,
+        source_path: str,
+        binary_path: str,
+        compiler: str = "g++",
+        std: str = "c++20",
+        opt_level: str = "O2",
+        timeout: int = 30,
+    ) -> CompileResult:
+        return await compile_cpp(
+            source_path,
+            binary_path,
+            timeout=timeout,
+            compiler=compiler,
+            std=std,
+            opt_level=opt_level,
+        )
+
+
+class RunToolMixin:
+    """运行工具 Mixin - 封装 run_binary 并自动应用资源限制。"""
+
+    async def run(
+        self,
+        binary_path: str,
+        input_data: str,
+        problem_dir: str,
+        solution_type: str,
+        timeout: int | None = None,
+        memory_mb: int | None = None,
+    ):
+        limit = get_resource_limit(problem_dir, solution_type, timeout=timeout, memory_mb=memory_mb)
+        return await run_binary(
+            binary_path,
+            input_data,
+            timeout=limit.timeout_sec,
+            memory_mb=limit.memory_mb,
+        )

src/autocode_mcp/tools/solution.py

@@ -1,14 +1,15 @@
 """
 Solution 工具组 - 解法构建和运行。
 """
+
 import os
 
-from ..utils.compiler import compile_cpp, run_binary
 from ..utils.platform import get_exe_extension
 from .base import Tool, ToolResult
+from .mixins import BuildToolMixin, RunToolMixin
 
 
-class SolutionBuildTool(Tool):
+class SolutionBuildTool(Tool, BuildToolMixin):
     """构建并编译解法。"""
 
     @property
@@ -80,7 +81,7 @@ async def execute(
         binary_name = f"{solution_type}{exe_ext}"
         binary_path = os.path.join(problem_dir, binary_name)
 
-        result = await compile_cpp(source_path, binary_path, compiler=compiler)
+        result = await self.build(source_path, binary_path, compiler=compiler)
 
         if not result.success:
             return ToolResult.fail(
@@ -97,7 +98,7 @@ async def execute(
         )
 
 
-class SolutionRunTool(Tool):
+class SolutionRunTool(Tool, RunToolMixin):
     """运行解法。"""
 
     @property
@@ -153,12 +154,13 @@ async def execute(
 
         if not os.path.exists(binary_path):
             return ToolResult.fail(
-                f"Binary not found: {solution_type}. "
-                f"Please run solution_build first."
+                f"Binary not found: {solution_type}. Please run solution_build first."
             )
 
         # 运行
-        result = await run_binary(binary_path, input_data, timeout=timeout)
+        result = await self.run(
+            binary_path, input_data, problem_dir, solution_type, timeout=timeout
+        )
 
         if result.timed_out:
             return ToolResult.fail(

src/autocode_mcp/tools/validator.py

@@ -3,14 +3,16 @@
 
 基于论文 Algorithm 1: BUILDVALIDATOR 实现。
 """
+
 import os
 
-from ..utils.compiler import compile_cpp, run_binary
+from ..utils.compiler import run_binary
 from ..utils.platform import get_exe_extension
 from .base import Tool, ToolResult
+from .mixins import BuildToolMixin
 
 
-class ValidatorBuildTool(Tool):
+class ValidatorBuildTool(Tool, BuildToolMixin):
     """构建并验证数据校验器。"""
 
     @property
@@ -87,7 +89,7 @@ async def execute(
         # 编译
         binary_path = os.path.join(problem_dir, f"val{get_exe_extension()}")
 
-        compile_result = await compile_cpp(source_path, binary_path, compiler=compiler)
+        compile_result = await self.build(source_path, binary_path, compiler=compiler)
 
         if not compile_result.success:
             return ToolResult.fail(
@@ -122,13 +124,15 @@ async def execute(
             if is_correct:
                 correct_count += 1
 
-            test_results.append({
-                "index": i + 1,
-                "input": input_data[:100] + "..." if len(input_data) > 100 else input_data,
-                "expected_valid": expected_valid,
-                "actual_valid": actual_valid,
-                "correct": is_correct,
-            })
+            test_results.append(
+                {
+                    "index": i + 1,
+                    "input": input_data[:100] + "..." if len(input_data) > 100 else input_data,
+                    "expected_valid": expected_valid,
+                    "actual_valid": actual_valid,
+                    "correct": is_correct,
+                }
+            )
 
         score = correct_count
         total = len(test_cases)

src/autocode_mcp/utils/__init__.py

@@ -1,6 +1,8 @@
 """
 AutoCode MCP Utils 模块。
 """
+
+from .cache import CompileCache
 from .compiler import (
     CompileResult,
     RunResult,
@@ -14,6 +16,7 @@
 from .platform import get_exe_extension, is_linux, is_macos, is_windows
 
 __all__ = [
+    "CompileCache",
     "compile_cpp",
     "run_binary",
     "run_binary_with_args",

src/autocode_mcp/utils/cache.py

@@ -0,0 +1,82 @@
+"""
+编译缓存模块。
+
+缓存已编译的二进制文件，避免重复编译。
+"""
+
+import hashlib
+import shutil
+from pathlib import Path
+
+
+class CompileCache:
+    """编译缓存类。
+
+    缓存已编译的二进制文件，基于源文件内容和编译参数生成缓存键。
+    """
+
+    def __init__(self, cache_dir: str = ".cache/compile"):
+        """初始化缓存。
+
+        Args:
+            cache_dir: 缓存目录路径
+        """
+        self.cache_dir = Path(cache_dir)
+        self.cache_dir.mkdir(parents=True, exist_ok=True)
+
+    def _get_key(self, source_path: str, compiler: str, std: str, opt: str) -> str:
+        """生成缓存键。
+
+        基于源文件内容和编译参数生成 16 字符的哈希键。
+
+        Args:
+            source_path: 源文件路径
+            compiler: 编译器名称
+            std: C++ 标准版本
+            opt: 优化级别
+
+        Returns:
+            str: 16 字符的哈希键
+        """
+        content = Path(source_path).read_text(encoding="utf-8")
+        data = f"{content}:{compiler}:{std}:{opt}"
+        return hashlib.sha256(data.encode()).hexdigest()[:16]
+
+    def get(self, source_path: str, compiler: str, std: str, opt: str) -> str | None:
+        """获取缓存的二进制文件路径。
+
+        Args:
+            source_path: 源文件路径
+            compiler: 编译器名称
+            std: C++ 标准版本
+            opt: 优化级别
+
+        Returns:
+            str | None: 缓存的二进制文件路径，不存在则返回 None
+        """
+        key = self._get_key(source_path, compiler, std, opt)
+        cached_binary = self.cache_dir / key
+
+        if cached_binary.exists():
+            return str(cached_binary)
+        return None
+
+    def set(self, source_path: str, binary_path: str, compiler: str, std: str, opt: str) -> str:
+        """将二进制文件存入缓存。
+
+        Args:
+            source_path: 源文件路径
+            binary_path: 二进制文件路径
+            compiler: 编译器名称
+            std: C++ 标准版本
+            opt: 优化级别
+
+        Returns:
+            str: 缓存后的二进制文件路径
+        """
+        key = self._get_key(source_path, compiler, std, opt)
+        cached_binary = self.cache_dir / key
+
+        shutil.copy2(binary_path, cached_binary)
+
+        return str(cached_binary)