sycommon-python-lib 0.2.7a26__tar.gz → 0.2.7a28__tar.gz

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sycommon-python-lib
-Version: 0.2.7a26
+Version: 0.2.7a28
 Summary: Add your description here
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -14,10 +14,10 @@ Requires-Dist: elasticsearch==9.4.1
 Requires-Dist: fastapi==0.139.0
 Requires-Dist: jinja2==3.1.6
 Requires-Dist: kafka-python==3.0.7
-Requires-Dist: langchain==1.3.11
-Requires-Dist: langchain-core==1.4.8
-Requires-Dist: langchain-openai==1.3.3
-Requires-Dist: langfuse==4.13.0
+Requires-Dist: langchain==1.3.12
+Requires-Dist: langchain-core==1.4.9
+Requires-Dist: langchain-openai==1.3.4
+Requires-Dist: langfuse==4.13.2
 Requires-Dist: langgraph==1.2.8
 Requires-Dist: langgraph-checkpoint-postgres==3.1.0
 Requires-Dist: langgraph-checkpoint-redis==0.5.0
@@ -36,7 +36,7 @@ Requires-Dist: sentry-sdk[fastapi]==2.64.0
 Requires-Dist: sqlalchemy[asyncio]==2.0.51
 Requires-Dist: starlette[full]==1.3.1
 Requires-Dist: tiktoken==0.13.0
-Requires-Dist: uvicorn==0.49.0
+Requires-Dist: uvicorn==0.51.0
 Requires-Dist: wecom-aibot-python-sdk==1.0.2
 Requires-Dist: twine==6.2.0
 Requires-Dist: minio==7.2.20

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sycommon-python-lib"
-version = "0.2.7a26"
+version = "0.2.7a28"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -15,10 +15,10 @@ dependencies = [
     "fastapi==0.139.0",
     "jinja2==3.1.6",
     "kafka-python==3.0.7",
-    "langchain==1.3.11",
-    "langchain-core==1.4.8",
-    "langchain-openai==1.3.3",
-    "langfuse==4.13.0",
+    "langchain==1.3.12",
+    "langchain-core==1.4.9",
+    "langchain-openai==1.3.4",
+    "langfuse==4.13.2",
     "langgraph==1.2.8",
     "langgraph-checkpoint-postgres==3.1.0",
     "langgraph-checkpoint-redis==0.5.0",
@@ -37,7 +37,7 @@ dependencies = [
     "sqlalchemy[asyncio]==2.0.51",
     "starlette[full]==1.3.1",
     "tiktoken==0.13.0",
-    "uvicorn==0.49.0",
+    "uvicorn==0.51.0",
     "wecom-aibot-python-sdk==1.0.2",
     "twine==6.2.0",
     "minio==7.2.20",

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/src/sycommon/agent/deep_agent.py

@@ -97,11 +97,12 @@ def _patch_agent_streaming(agent):
     删除此函数及调用即可。
     """
     # 已验证兼容的版本范围(超出仅警告, 不阻断 —— 闭包强校验是真正的安全网)
-    # 1.3.10/1.3.11 + langchain_core 1.4.8 经实测确认闭包结构兼容(amodel_node
-    # freevars 含 _execute_model_async, 内层 freevars 含 _get_bound_model/
-    # _handle_model_output), patch 正常生效。1.3.11 的 _execute_model_async 仍为
-    # ainvoke + 不传 config, 官方未修复, 补丁仍需保留。
-    _VERIFIED = {"langchain": "1.3.11", "langchain_core": "1.4.8"}
+    # 1.3.10/1.3.11/1.3.12 + langchain_core 1.4.8/1.4.9 经实测确认闭包结构兼容
+    # (factory.py 在 1.3.11→1.3.12 字节级无变化: amodel_node freevars 含
+    # _execute_model_async, 内层 freevars 含 _get_bound_model/_handle_model_output),
+    # patch 正常生效。1.3.12 的 _execute_model_async 仍为 ainvoke + 不传 config,
+    # 官方未修复, 补丁仍需保留。
+    _VERIFIED = {"langchain": "1.3.12", "langchain_core": "1.4.9"}
     try:
         import langchain as _lc
         import langchain_core as _lcc

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/src/sycommon/agent/middleware/sensitive_guard.py

@@ -193,12 +193,14 @@ def _parse_detect_json(text: str) -> Optional[SensitiveCheck]:
     #     或 "is_sensitive: true- reason: ..." 这种换行被吞的畸形文本）。
     #     注意：在 4a/4b 走完仍未返回时才到这里，此时要么没大括号、
     #     要么大括号是工具结果片段（不是判定 JSON），用正则从全文提判定字段更稳。
-    m_bool = re.search(r'is[_\s\-]*sensitive["\']?\s*[:：]\s*(true|false)', text, re.I)
+    # 🔑 支持 [:：=] 三种分隔符：模型常写 "is_sensitive: true"(冒号) 或
+    #    "is_sensitive=true"(等号，Qwen thinking 模式常见)，否则等号写法会漏判 fail-open。
+    m_bool = re.search(r'is[_\s\-]*sensitive["\']?\s*[:：=]\s*(true|false)', text, re.I)
     if m_bool:
         data = {"is_sensitive": m_bool.group(1).lower() == "true"}
         # reason: 取到行尾（容忍换行被吞成空格，遇下一个字段名停止）
         m_reason = re.search(
-            r'reason["\']?\s*[:：]\s*["\']?(.+?)(?=\s*(?:[\-]*\s*)?(?:reason|source|is[_\s\-]*sensitive)["\']?\s*[:：]|$)',
+            r'reason["\']?\s*[:：=]\s*["\']?(.+?)(?=\s*(?:[\-]*\s*)?(?:reason|source|is[_\s\-]*sensitive)["\']?\s*[:：=]|$)',
             text, re.I | re.DOTALL)
         if m_reason:
             r = m_reason.group(1).strip()
@@ -206,9 +208,16 @@ def _parse_detect_json(text: str) -> Optional[SensitiveCheck]:
             r = r.split("\n", 1)[0].strip().strip('"\'')
             if r:
                 data["reason"] = r
-        m_source = re.search(r'source["\']?\s*[:：]\s*["\']?(user_input|tool_result|history)', text, re.I)
+        # 🔑 source 容错：模型可能把 user_input 写残(如 "user_in")或带尾随文字。
+        #    匹配 user_input/tool_result/history 的【前缀】(user_in → user_input)，
+        #    匹配不到时默认 user_input（最安全的阻断来源判定，避免整条 fail-open）。
+        m_source = re.search(r'source["\']?\s*[:：=]\s*["\']?(user_input|tool_result|history)',
+                             text, re.I)
         if m_source:
             data["source"] = m_source.group(1).lower()
+        elif "user" in text.lower() and "input" not in text.lower():
+            # 疑似 user_input 写残但能看出是用户输入来源
+            pass  # 留默认值
         try:
             return SensitiveCheck(**{k: v for k, v in data.items() if v is not None})
         except Exception:

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/src/sycommon_python_lib.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sycommon-python-lib
-Version: 0.2.7a26
+Version: 0.2.7a28
 Summary: Add your description here
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -14,10 +14,10 @@ Requires-Dist: elasticsearch==9.4.1
 Requires-Dist: fastapi==0.139.0
 Requires-Dist: jinja2==3.1.6
 Requires-Dist: kafka-python==3.0.7
-Requires-Dist: langchain==1.3.11
-Requires-Dist: langchain-core==1.4.8
-Requires-Dist: langchain-openai==1.3.3
-Requires-Dist: langfuse==4.13.0
+Requires-Dist: langchain==1.3.12
+Requires-Dist: langchain-core==1.4.9
+Requires-Dist: langchain-openai==1.3.4
+Requires-Dist: langfuse==4.13.2
 Requires-Dist: langgraph==1.2.8
 Requires-Dist: langgraph-checkpoint-postgres==3.1.0
 Requires-Dist: langgraph-checkpoint-redis==0.5.0
@@ -36,7 +36,7 @@ Requires-Dist: sentry-sdk[fastapi]==2.64.0
 Requires-Dist: sqlalchemy[asyncio]==2.0.51
 Requires-Dist: starlette[full]==1.3.1
 Requires-Dist: tiktoken==0.13.0
-Requires-Dist: uvicorn==0.49.0
+Requires-Dist: uvicorn==0.51.0
 Requires-Dist: wecom-aibot-python-sdk==1.0.2
 Requires-Dist: twine==6.2.0
 Requires-Dist: minio==7.2.20

{sycommon_python_lib-0.2.7a26 → sycommon_python_lib-0.2.7a28}/src/sycommon_python_lib.egg-info/requires.txt

@@ -8,10 +8,10 @@ elasticsearch==9.4.1
 fastapi==0.139.0
 jinja2==3.1.6
 kafka-python==3.0.7
-langchain==1.3.11
-langchain-core==1.4.8
-langchain-openai==1.3.3
-langfuse==4.13.0
+langchain==1.3.12
+langchain-core==1.4.9
+langchain-openai==1.3.4
+langfuse==4.13.2
 langgraph==1.2.8
 langgraph-checkpoint-postgres==3.1.0
 langgraph-checkpoint-redis==0.5.0
@@ -30,7 +30,7 @@ sentry-sdk[fastapi]==2.64.0
 sqlalchemy[asyncio]==2.0.51
 starlette[full]==1.3.1
 tiktoken==0.13.0
-uvicorn==0.49.0
+uvicorn==0.51.0
 wecom-aibot-python-sdk==1.0.2
 twine==6.2.0
 minio==7.2.20