sycommon-python-lib 0.2.7a26__py3-none-any.whl → 0.2.7a27__py3-none-any.whl

sycommon/agent/middleware/sensitive_guard.py

@@ -193,12 +193,14 @@ def _parse_detect_json(text: str) -> Optional[SensitiveCheck]:
     #     或 "is_sensitive: true- reason: ..." 这种换行被吞的畸形文本）。
     #     注意：在 4a/4b 走完仍未返回时才到这里，此时要么没大括号、
     #     要么大括号是工具结果片段（不是判定 JSON），用正则从全文提判定字段更稳。
-    m_bool = re.search(r'is[_\s\-]*sensitive["\']?\s*[:：]\s*(true|false)', text, re.I)
+    # 🔑 支持 [:：=] 三种分隔符：模型常写 "is_sensitive: true"(冒号) 或
+    #    "is_sensitive=true"(等号，Qwen thinking 模式常见)，否则等号写法会漏判 fail-open。
+    m_bool = re.search(r'is[_\s\-]*sensitive["\']?\s*[:：=]\s*(true|false)', text, re.I)
     if m_bool:
         data = {"is_sensitive": m_bool.group(1).lower() == "true"}
         # reason: 取到行尾（容忍换行被吞成空格，遇下一个字段名停止）
         m_reason = re.search(
-            r'reason["\']?\s*[:：]\s*["\']?(.+?)(?=\s*(?:[\-]*\s*)?(?:reason|source|is[_\s\-]*sensitive)["\']?\s*[:：]|$)',
+            r'reason["\']?\s*[:：=]\s*["\']?(.+?)(?=\s*(?:[\-]*\s*)?(?:reason|source|is[_\s\-]*sensitive)["\']?\s*[:：=]|$)',
             text, re.I | re.DOTALL)
         if m_reason:
             r = m_reason.group(1).strip()
@@ -206,9 +208,16 @@ def _parse_detect_json(text: str) -> Optional[SensitiveCheck]:
             r = r.split("\n", 1)[0].strip().strip('"\'')
             if r:
                 data["reason"] = r
-        m_source = re.search(r'source["\']?\s*[:：]\s*["\']?(user_input|tool_result|history)', text, re.I)
+        # 🔑 source 容错：模型可能把 user_input 写残(如 "user_in")或带尾随文字。
+        #    匹配 user_input/tool_result/history 的【前缀】(user_in → user_input)，
+        #    匹配不到时默认 user_input（最安全的阻断来源判定，避免整条 fail-open）。
+        m_source = re.search(r'source["\']?\s*[:：=]\s*["\']?(user_input|tool_result|history)',
+                             text, re.I)
         if m_source:
             data["source"] = m_source.group(1).lower()
+        elif "user" in text.lower() and "input" not in text.lower():
+            # 疑似 user_input 写残但能看出是用户输入来源
+            pass  # 留默认值
         try:
             return SensitiveCheck(**{k: v for k, v in data.items() if v is not None})
         except Exception:

{sycommon_python_lib-0.2.7a26.dist-info → sycommon_python_lib-0.2.7a27.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sycommon-python-lib
-Version: 0.2.7a26
+Version: 0.2.7a27
 Summary: Add your description here
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown

{sycommon_python_lib-0.2.7a26.dist-info → sycommon_python_lib-0.2.7a27.dist-info}/RECORD

@@ -148,7 +148,7 @@ sycommon/agent/mcp/__init__.py,sha256=iKrdDhIrFsNIkqG_kgcwNe-nOiM6uVfolKv44LfQ-F
 sycommon/agent/mcp/models.py,sha256=zda4ho-UTYOJ5oPAZPZ-vxhfDRLghUCsMroHnA2A2QQ,1490
 sycommon/agent/mcp/tool_loader.py,sha256=OQa-lE7RL2s3Lqh-kNOKaUrb130hvorB_HjyFBqZBZs,10960
 sycommon/agent/middleware/sandbox_path_guard.py,sha256=K1SnxA8pDxkCSucOkranwUvC9_8rd3l_-TIR8gMMTK8,8102
-sycommon/agent/middleware/sensitive_guard.py,sha256=ApmC094ogG4jIwEWRaUawTpQSDs722k0OTjdeAEQ7Qc,22159
+sycommon/agent/middleware/sensitive_guard.py,sha256=8e7qSAoak0MNB5fRLscQF0PVGZ07SKdwmGk590GubOI,22870
 sycommon/agent/middleware/sitecustomize.py,sha256=Bt7XFnWV_LJo89l858AGp5VUkXwefpLGmjkCtLe-CMw,4800
 sycommon/agent/middleware/skill_api_whitelist.py,sha256=2qVsrwS6VkkPKHrvjJMNUfBDokdMJkP-mn-V-ZCn7X8,16643
 sycommon/agent/middleware/skill_wl_check.py,sha256=rCJ9F6aWPh8tVQBIPmcq2lKDsfwiJQduwSUku_8kXfs,3952
@@ -308,8 +308,8 @@ sycommon/tools/syemail.py,sha256=BDFhgf7WDOQeTcjxJEQdu0dQhnHFPO_p3eI0-Ni3LhQ,561
 sycommon/tools/timing.py,sha256=OiiE7P07lRoMzX9kzb8sZU9cDb0zNnqIlY5pWqHcnkY,2064
 sycommon/xxljob/__init__.py,sha256=7eoBlQxv-B39IfRSCY2bkqdGYs1QRe1umAWd88VMEEM,86
 sycommon/xxljob/xxljob_service.py,sha256=1yifwIBNGsCIxLnQjHKiBlbsigc_zvPH-dMTZcNxe-Q,7649
-sycommon_python_lib-0.2.7a26.dist-info/METADATA,sha256=DBrGqUqt5wJG8QAqbbRk7ZfswekMXYBMztNXrW0BnhM,7962
-sycommon_python_lib-0.2.7a26.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-sycommon_python_lib-0.2.7a26.dist-info/entry_points.txt,sha256=gsR4SssKxDWjRU8ggidzNcdMXDPRSKRS7UaGyNP84Qg,92
-sycommon_python_lib-0.2.7a26.dist-info/top_level.txt,sha256=RgphKrg7nJyZ7irJqbxFr-5H2LUYTvI7ivoWZH2hcD0,29
-sycommon_python_lib-0.2.7a26.dist-info/RECORD,,
+sycommon_python_lib-0.2.7a27.dist-info/METADATA,sha256=dHa4n60XhmhUlWAD-LbZ0mlBimwEJq-W8gmb2s6H-oA,7962
+sycommon_python_lib-0.2.7a27.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+sycommon_python_lib-0.2.7a27.dist-info/entry_points.txt,sha256=gsR4SssKxDWjRU8ggidzNcdMXDPRSKRS7UaGyNP84Qg,92
+sycommon_python_lib-0.2.7a27.dist-info/top_level.txt,sha256=RgphKrg7nJyZ7irJqbxFr-5H2LUYTvI7ivoWZH2hcD0,29
+sycommon_python_lib-0.2.7a27.dist-info/RECORD,,