@xdxer/dingtalk-agent 0.1.4-beta.8 → 0.1.4

package/dist/src/response-gate.js

@@ -0,0 +1,51 @@
+import { digest, stableStringify } from './events.js';
+export function evaluateResponseGate(kind, rule, perception) {
+    const hardAllowedActions = [...(rule.allowedActions || [])];
+    let decision = 'inspect';
+    let reason = 'policy-inspection';
+    if (kind === 'im.message.mentioned' || kind === 'im.message.dm') {
+        decision = 'engage';
+        reason = kind === 'im.message.mentioned' ? 'trusted-mention' : 'trusted-direct-message';
+    }
+    else if (kind === 'im.message.group') {
+        decision = 'silent';
+        reason = 'ambient-group-unmentioned';
+    }
+    else if (kind === 'agent.heartbeat') {
+        decision = 'inspect';
+        reason = 'heartbeat-no-origin-message';
+    }
+    const softChecks = decision === 'engage'
+        ? [
+            'answer-only-if-within-agent-scope',
+            'do-not-leak-private-context',
+            'if-context-shows-complete-answer-consider-silence',
+            'ask-only-for-blocking-gap',
+        ]
+        : [];
+    if (decision === 'silent' && hardAllowedActions.some((action) => action !== 'silence')) {
+        throw new Error('Response Gate 决定 silent，但 Behavior 仍允许外发动作');
+    }
+    const unsigned = {
+        $schema: 'dingtalk-agent/response-gate@1',
+        decision,
+        reason,
+        hardAllowedActions,
+        softChecks,
+        perceptionHash: perception.hash,
+    };
+    return { ...unsigned, hash: digest(stableStringify(unsigned)) };
+}
+export function verifyResponseGate(input, expectedHash = '') {
+    if (!input || typeof input !== 'object' || Array.isArray(input)) {
+        throw new Error('Response Gate snapshot 必须是 object');
+    }
+    const value = input;
+    const { hash, ...unsigned } = value;
+    const actual = digest(stableStringify(unsigned));
+    if (!hash || actual !== hash || (expectedHash && hash !== expectedHash)) {
+        throw new Error('Response Gate snapshot hash 不一致');
+    }
+    return value;
+}
+//# sourceMappingURL=response-gate.js.map

package/dist/src/response-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-gate.js","sourceRoot":"","sources":["../../src/response-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAKrD,MAAM,UAAU,oBAAoB,CAClC,IAAe,EACf,IAAkB,EAClB,UAA8B;IAE9B,MAAM,kBAAkB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,IAAI,QAAQ,GAAqC,SAAS,CAAA;IAC1D,IAAI,MAAM,GAAG,mBAAmB,CAAA;IAChC,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAChE,QAAQ,GAAG,QAAQ,CAAA;QACnB,MAAM,GAAG,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,wBAAwB,CAAA;IACzF,CAAC;SAAM,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,QAAQ,GAAG,QAAQ,CAAA;QACnB,MAAM,GAAG,2BAA2B,CAAA;IACtC,CAAC;SAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,QAAQ,GAAG,SAAS,CAAA;QACpB,MAAM,GAAG,6BAA6B,CAAA;IACxC,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,KAAK,QAAQ;QACtC,CAAC,CAAC;YACA,mCAAmC;YACnC,6BAA6B;YAC7B,mDAAmD;YACnD,2BAA2B;SAC5B;QACD,CAAC,CAAC,EAAE,CAAA;IACN,IAAI,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,gCAAyC;QAClD,QAAQ;QACR,MAAM;QACN,kBAAkB;QAClB,UAAU;QACV,cAAc,EAAE,UAAU,CAAC,IAAI;KAChC,CAAA;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,YAAY,GAAG,EAAE;IAEjB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,KAA6B,CAAA;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAA;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC","sourcesContent":["import { digest, stableStringify } from './events.js'\nimport type {\n  BehaviorRule, EnrichedInvocation, EventKind, ResponseGateSnapshot,\n} from './types.js'\n\nexport function evaluateResponseGate(\n  kind: EventKind,\n  rule: BehaviorRule,\n  perception: EnrichedInvocation,\n): ResponseGateSnapshot {\n  const hardAllowedActions = [...(rule.allowedActions || [])]\n  let decision: ResponseGateSnapshot['decision'] = 'inspect'\n  let reason = 'policy-inspection'\n  if (kind === 'im.message.mentioned' || kind === 'im.message.dm') {\n    decision = 'engage'\n    reason = kind === 'im.message.mentioned' ? 'trusted-mention' : 'trusted-direct-message'\n  } else if (kind === 'im.message.group') {\n    decision = 'silent'\n    reason = 'ambient-group-unmentioned'\n  } else if (kind === 'agent.heartbeat') {\n    decision = 'inspect'\n    reason = 'heartbeat-no-origin-message'\n  }\n  const softChecks = decision === 'engage'\n    ? [\n      'answer-only-if-within-agent-scope',\n      'do-not-leak-private-context',\n      'if-context-shows-complete-answer-consider-silence',\n      'ask-only-for-blocking-gap',\n    ]\n    : []\n  if (decision === 'silent' && hardAllowedActions.some((action) => action !== 'silence')) {\n    throw new Error('Response Gate 决定 silent，但 Behavior 仍允许外发动作')\n  }\n  const unsigned = {\n    $schema: 'dingtalk-agent/response-gate@1' as const,\n    decision,\n    reason,\n    hardAllowedActions,\n    softChecks,\n    perceptionHash: perception.hash,\n  }\n  return { ...unsigned, hash: digest(stableStringify(unsigned)) }\n}\n\nexport function verifyResponseGate(\n  input: unknown,\n  expectedHash = '',\n): ResponseGateSnapshot {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) {\n    throw new Error('Response Gate snapshot 必须是 object')\n  }\n  const value = input as ResponseGateSnapshot\n  const { hash, ...unsigned } = value\n  const actual = digest(stableStringify(unsigned))\n  if (!hash || actual !== hash || (expectedHash && hash !== expectedHash)) {\n    throw new Error('Response Gate snapshot hash 不一致')\n  }\n  return value\n}\n"]}