sycommon-python-lib 0.2.7a14__py3-none-any.whl → 0.2.7a16__py3-none-any.whl

sycommon/agent/deep_agent.py

@@ -374,8 +374,8 @@ class AgentConfig(BaseModel):
     internal_model_name: Optional[str] = None
     # 敏感检测提示词（应用层可覆盖）；未传(None)用基础库 DEFAULT_DETECT_PROMPT
     sensitive_detect_prompt: Optional[str] = None
-    # 命中敏感后的动作："downgrade"=降级内部模型继续；"block"=直接阻断不执行
-    sensitive_action: str = "downgrade"
+    # 命中敏感后的动作："allow"=不检测放行；"downgrade"=降级内部模型继续；"block"=直接阻断不执行
+    sensitive_action: str = "allow"
 
     # 系统提示词
     system_prompt: str = DEFAULT_SYSTEM_PROMPT
@@ -1421,17 +1421,21 @@ async def _sync_skills_to_sandbox(
                 if remote_content and remote_content.file_data:
                     # FileData 是 TypedDict(dict), 用键访问而非属性
                     content = remote_content.file_data.get("content", "") or ""
-                    # 沙箱 /read 对大文件(如 skill-creator 的 34KB SKILL.md)返回
-                    # encoding=base64，直接解析会因找不到 "version:" 行而误判为"无版本"
-                    # → 每次新建 Agent 都全量重传。base64 时先解码再解析。
-                    encoding = remote_content.file_data.get("encoding", "utf-8")
-                    if encoding == "base64" and content:
-                        try:
-                            import base64 as _b64
-                            content = _b64.b64decode(content).decode("utf-8", errors="replace")
-                        except Exception:
-                            pass
-                    return _parse_skill_version(content)
+                    # 优先直接解 version(明文小文件最快);
+                    # 解不出再兜底解码 base64——沙箱 /read 对大文件(如 skill-creator 的
+                    # 34KB SKILL.md)返回 base64, 但 encoding 标志位可能漏标/误标,
+                    # 若依赖该标志位,漏标时会因找不到 "version:" 行误判为"无版本"
+                    # → 每次新建 Agent 都全量重传。改为「先解 → 解不出再 b64 兜底」,
+                    # 不依赖 encoding 字段, 对明文/base64 两种返回都正确。
+                    version = _parse_skill_version(content)
+                    if version:
+                        return version
+                    try:
+                        import base64 as _b64
+                        decoded = _b64.b64decode(content).decode("utf-8", errors="replace")
+                        return _parse_skill_version(decoded)
+                    except Exception:
+                        return ""
             except Exception:
                 pass
             return ""

sycommon/agent/middleware/sensitive_guard.py

@@ -10,7 +10,7 @@
 共享同一实例，避免敏感数据通过委派链继续流向外部模型。
 
 agent 本就是内部模型（model_tier="internal"）时短路放行，不检测。
-检测失败 fail-close（视为敏感，降级内部模型）。
+检测失败 fail-open（视为不敏感，放行）。
 """
 import asyncio
 from typing import Any, Awaitable, Callable, List, Optional
@@ -228,8 +228,8 @@ class SensitiveGuardMiddleware(AgentMiddleware):
         state: Optional[DowngradeState] = None,
         # 应用层可覆盖检测提示词；未传(None)用 DEFAULT_DETECT_PROMPT
         detect_prompt: Optional[str] = None,
-        # 命中敏感后的动作："downgrade"=降级内部模型继续；"block"=直接阻断(不调任何模型)
-        action: str = "downgrade",
+        # 命中敏感后的动作："allow"=不检测放行；"downgrade"=降级内部模型继续；"block"=直接阻断(不调任何模型)
+        action: str = "allow",
         # 阻断模式下的异步提示回调（与 on_downgrade 区分文案）；downgrade 模式不用
         on_block: Optional[Callable[[], Awaitable[None]]] = None,
         # 测试注入：绕过懒加载的真实 get_llm
@@ -241,7 +241,8 @@ class SensitiveGuardMiddleware(AgentMiddleware):
         self._internal_name = internal_model_name
         self._on_downgrade = on_downgrade
         self._on_block = on_block
-        self._action = action if action in ("downgrade", "block") else "downgrade"
+        # 默认 allow（不检测）：应用层未显式指定时按"放行"处理，避免误伤。
+        self._action = action if action in ("downgrade", "block", "allow") else "allow"
         self._enabled = enabled
         self._state = state or DowngradeState()
         self._detect_prompt = detect_prompt or DEFAULT_DETECT_PROMPT
@@ -301,16 +302,14 @@ class SensitiveGuardMiddleware(AgentMiddleware):
         return self._internal_raw
 
     async def _detect(self, messages: List[BaseMessage]) -> SensitiveCheck:
-        """一次检测：命中即返回 SensitiveCheck。fail-close（异常→视为敏感）。
+        """一次检测：命中即返回 SensitiveCheck。fail-open（识别不出来→视为不敏感放行）。
 
         稳定性策略：
         - 检测提示词只描述「判什么敏感」，不要求模型自己格式化输出；
         - 直接用 detector.ainvoke 拿原始文本，本方法用正则提 {…} 再 Pydantic 解析；
         - 单轮、零修正重试，避免 with_structured_output 的解析重试烧 token。
-        解析失败时 fail-close 视为敏感（宁可错杀不让敏感外泄）。
+        识别失败时 fail-open 视为不敏感（默认放行），避免误伤正常请求。
         """
-        import json
-        import re
         content = _messages_to_text(messages)
         try:
             detector = await self._get_detector()
@@ -336,21 +335,24 @@ class SensitiveGuardMiddleware(AgentMiddleware):
             text = raw.content if isinstance(raw, BaseMessage) else str(raw)
             check = _parse_detect_json(text)
             if check is None:
+                # fail-open：识别不出来默认放行（不阻断/不降级），仅告警便于排查。
                 SYLogger.warning(
-                    f"[SensitiveGuard] 检测无有效JSON(fail-close→内部模型): {text[:500]!r}")
-                return SensitiveCheck(is_sensitive=True, reason="no_json_in_detect_output")
+                    f"[SensitiveGuard] 检测无有效JSON(fail-open→放行): {text[:300]!r}")
+                return SensitiveCheck(is_sensitive=False, reason="no_json_in_detect_output")
             return check
         except Exception as e:
-            SYLogger.warning(f"[SensitiveGuard] 检测异常(fail-close→内部模型): {e}")
-            return SensitiveCheck(is_sensitive=True, reason=f"detect_error:{e}")
+            # fail-open：检测异常默认放行，避免检测器自身故障拖垮正常对话。
+            SYLogger.warning(f"[SensitiveGuard] 检测异常(fail-open→放行): {e}")
+            return SensitiveCheck(is_sensitive=False, reason=f"detect_error:{e}")
 
     async def awrap_model_call(
         self,
         request: ModelRequest[ContextT],
         handler: Callable[[ModelRequest[ContextT]], Awaitable[ModelResponse[ResponseT]]],
     ) -> ModelResponse[ResponseT]:
-        # (a) 关闭 / 内部 tier：纯放行，不检测（避免内部模型检内部模型 + 省 token）
-        if not self._enabled or self._model_tier == "internal":
+        # (a) 关闭 / 内部 tier / allow 模式：纯放行，不检测。
+        #     allow = 应用层完全关闭敏感检测（不调用 detector、不阻断、不降级），零开销。
+        if not self._enabled or self._model_tier == "internal" or self._action == "allow":
             return await handler(request)
 
         # (b) 本会话已命中敏感

sycommon/agent/multi_agent_team.py

@@ -133,7 +133,7 @@ class TeamConfig(BaseModel):
     sensitive_guard: bool = True        # 是否启用敏感信息检测守卫
     internal_model_name: Optional[str] = None   # 敏感降级目标内部模型名（应用层透传）
     sensitive_detect_prompt: Optional[str] = None  # 敏感检测提示词（应用层覆盖）
-    sensitive_action: str = "downgrade"  # "downgrade"=降级继续；"block"=阻断
+    sensitive_action: str = "allow"  # "allow"=不检测放行；"downgrade"=降级继续；"block"=阻断
 
     coordinator_prompt: str = ""
     coordinator_name: str = "项目经理"

{sycommon_python_lib-0.2.7a14.dist-info → sycommon_python_lib-0.2.7a16.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sycommon-python-lib
-Version: 0.2.7a14
+Version: 0.2.7a16
 Summary: Add your description here
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown

{sycommon_python_lib-0.2.7a14.dist-info → sycommon_python_lib-0.2.7a16.dist-info}/RECORD

@@ -136,8 +136,8 @@ sycommon/services.py,sha256=CwC_gESafo05Qn41KLQgtulx6PfX7s2FkxlBI-hXve4,24861
 sycommon/agent/__init__.py,sha256=mxceAeUifQ-DKvWp7ZEJIFlmOCb5wpYHPGQw3rwEN8I,4378
 sycommon/agent/agent_manager.py,sha256=UhhaekEumT7g4v_Z1UB4jTp13X0n8M8erYaQdkGGWkA,13620
 sycommon/agent/chat_events.py,sha256=t7qWa6OrIWLfqtd1AnqaVP67QWkn1JxpCBTZYQpoLuM,14226
-sycommon/agent/deep_agent.py,sha256=Y7xQIOmnIda-v_Cf8iEUn61rDD5lfaAPhiXsgUqocy0,74253
-sycommon/agent/multi_agent_team.py,sha256=HFdTmMvJns07rrEsq70GCmILWKDzGxgSh6ZeyhX9Lc4,30260
+sycommon/agent/deep_agent.py,sha256=UT4noiAqRRUv7aFeobsFo3ad-gUA1L6xw0SV06nxTtY,74542
+sycommon/agent/multi_agent_team.py,sha256=l1hIK6ihsyIp6QCH5st74h0d0cVmZaALQAPPqbZWarc,30282
 sycommon/agent/summarization_utils.py,sha256=bqZRFqSekNGlv2mYQPaT_s2QNA5VDTKddi2Va_SkHWc,18376
 sycommon/agent/acp/__init__.py,sha256=vQGMQYAA5-ZaejYmDZ4r4Fklqs17qH3cDXQ5pZlwj-0,1844
 sycommon/agent/acp/client.py,sha256=s-K626b9ierwyEq61gejrW0xOysvrY2PIpYFsFqSHjc,27108
@@ -147,7 +147,7 @@ sycommon/agent/acp/tool.py,sha256=yt6ohKL2y7wIZMNiLv-m5oCg5u1p5GAbqgjzQVt285Y,10
 sycommon/agent/mcp/__init__.py,sha256=iKrdDhIrFsNIkqG_kgcwNe-nOiM6uVfolKv44LfQ-FQ,636
 sycommon/agent/mcp/models.py,sha256=zda4ho-UTYOJ5oPAZPZ-vxhfDRLghUCsMroHnA2A2QQ,1490
 sycommon/agent/mcp/tool_loader.py,sha256=OQa-lE7RL2s3Lqh-kNOKaUrb130hvorB_HjyFBqZBZs,10960
-sycommon/agent/middleware/sensitive_guard.py,sha256=jT-4fNZ5mAvZpoqgVwCuD41iS13zBUdSQvc3up2ziNU,21736
+sycommon/agent/middleware/sensitive_guard.py,sha256=ApmC094ogG4jIwEWRaUawTpQSDs722k0OTjdeAEQ7Qc,22159
 sycommon/agent/middleware/sitecustomize.py,sha256=Bt7XFnWV_LJo89l858AGp5VUkXwefpLGmjkCtLe-CMw,4800
 sycommon/agent/middleware/skill_api_whitelist.py,sha256=e15aJekXegPp64owSCEdUE5y0SmwCQVQCF4jnhReZNU,10958
 sycommon/agent/middleware/skill_wl_check.py,sha256=rCJ9F6aWPh8tVQBIPmcq2lKDsfwiJQduwSUku_8kXfs,3952
@@ -307,8 +307,8 @@ sycommon/tools/syemail.py,sha256=BDFhgf7WDOQeTcjxJEQdu0dQhnHFPO_p3eI0-Ni3LhQ,561
 sycommon/tools/timing.py,sha256=OiiE7P07lRoMzX9kzb8sZU9cDb0zNnqIlY5pWqHcnkY,2064
 sycommon/xxljob/__init__.py,sha256=7eoBlQxv-B39IfRSCY2bkqdGYs1QRe1umAWd88VMEEM,86
 sycommon/xxljob/xxljob_service.py,sha256=1yifwIBNGsCIxLnQjHKiBlbsigc_zvPH-dMTZcNxe-Q,7649
-sycommon_python_lib-0.2.7a14.dist-info/METADATA,sha256=JNchBy3XAiVCP_d1u0Nmz-ft-BiFiEIPKlKiV48ySqw,7962
-sycommon_python_lib-0.2.7a14.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-sycommon_python_lib-0.2.7a14.dist-info/entry_points.txt,sha256=gsR4SssKxDWjRU8ggidzNcdMXDPRSKRS7UaGyNP84Qg,92
-sycommon_python_lib-0.2.7a14.dist-info/top_level.txt,sha256=RgphKrg7nJyZ7irJqbxFr-5H2LUYTvI7ivoWZH2hcD0,29
-sycommon_python_lib-0.2.7a14.dist-info/RECORD,,
+sycommon_python_lib-0.2.7a16.dist-info/METADATA,sha256=p2HPgbumt2j54mpC9qt_alpijwUrntvRvpNQJYBwCnI,7962
+sycommon_python_lib-0.2.7a16.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+sycommon_python_lib-0.2.7a16.dist-info/entry_points.txt,sha256=gsR4SssKxDWjRU8ggidzNcdMXDPRSKRS7UaGyNP84Qg,92
+sycommon_python_lib-0.2.7a16.dist-info/top_level.txt,sha256=RgphKrg7nJyZ7irJqbxFr-5H2LUYTvI7ivoWZH2hcD0,29
+sycommon_python_lib-0.2.7a16.dist-info/RECORD,,