fix(extension): 按Schema资源作用域校验引用

backend/app/extensions/contributions.py

@@ -682,6 +682,13 @@ def validate_settings_definition(
             field.minimum is not None or field.maximum is not None
         ):
             raise _settings_schema_error(plugin_id, f"Only number settings accept bounds: {field.key}")
+        if any(
+            bound is not None and not math.isfinite(bound)
+            for bound in (field.minimum, field.maximum)
+        ):
+            raise _settings_schema_error(
+                plugin_id, f"Number setting bounds must be finite: {field.key}"
+            )
         if field.minimum is not None and field.maximum is not None and field.minimum > field.maximum:
             raise _settings_schema_error(plugin_id, f"Setting bounds are reversed: {field.key}")
         if field.type == PluginSettingType.secret and field.default is not None:
@@ -746,8 +753,8 @@ def validate_command_spec(plugin_id: str, spec: PluginCommandSpec) -> None:
     if spec.parameters.get("type", "object") != "object":
         raise ExtensionError("PLUGIN_COMMAND_INVALID", "Command parameters must be an object schema.")
     try:
-        reject_external_schema_references(spec.parameters)
         Draft202012Validator.check_schema(spec.parameters)
+        reject_external_schema_references(spec.parameters)
     except (SchemaReferenceError, SchemaError) as exc:
         message = exc.message if isinstance(exc, SchemaError) else str(exc)
         raise ExtensionError(

backend/app/extensions/mcp.py

@@ -680,8 +680,8 @@ class McpBridge:
                 f"MCP tool inputSchema must be an object schema: {remote_name}",
             )
         try:
-            reject_external_schema_references(schema)
             Draft202012Validator.check_schema(schema)
+            reject_external_schema_references(schema)
         except (SchemaReferenceError, SchemaError) as exc:
             message = exc.message if isinstance(exc, SchemaError) else str(exc)
             raise McpBridgeError(

backend/app/extensions/runtime.py

@@ -1043,8 +1043,8 @@ def _arguments_model_from_schema(
 def _validate_tool_schema(spec: DeclarativeToolSpec) -> None:
     schema = spec.parameters or {"type": "object", "properties": {}}
     try:
-        reject_external_schema_references(schema)
         Draft202012Validator.check_schema(schema)
+        reject_external_schema_references(schema)
     except (SchemaReferenceError, SchemaError) as exc:
         message = exc.message if isinstance(exc, SchemaError) else str(exc)
         raise ExtensionError(