Aska
7e39153a69
#1 工具布尔标记生效(agent-106, 安全红线): loop toolSchemas/runToolCalls 加 allow-set 安全门 restrictSchemas/applyToolSecurityGate——群聊/陌生人只暴露允许工具(默认关), 被拒not_allowed软提示+AuditEvent, owner全工具不变; 身份靠 ActorEnv(非提示词) #2 checkpoint 恢复(agent-109): run.go LoadLatest + resumableStopReason门控(只恢复in-flight工具循环,不出答案不续跑), 幂等不重放副作用, 新会话不误恢复; resume_test 4用例 #3 tool_result(agent-108, 协议层): Anthropic 原生tool_result块(tool_use_id/is_error)非user纯文本 + OpenAI tool消息补tool_call_id; Content加ToolCallID/IsError等; (loop接线层2处留待,见备注) #6 capacity_awaken推送(agent-107): onCapacity从只Debug改推WS hub(BroadcastCapacityAwaken, sessionId定向+payload对齐前端AwakenPayload) 管理面板移动端(agent-110): AdminApp 汉堡菜单+抽屉侧栏+标题truncate防换行, RBAC守卫不受影响 全仓 build/vet/test绿 + 前端build绿; 前端无涉差异已对齐 备注: #3 loop接线层2处(assistant工具轮append历史 + Message.ToolCallID/IsError)留给后续; #4代审/#5子代理触发/#7拆文件后置(主人说后三不急)
97 lines
3.8 KiB
Go
97 lines
3.8 KiB
Go
package loop
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"git.yeij.top/AskaEth/Cyrene_v2/internal/capability/restrict"
|
|
"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/capacity"
|
|
"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/memory"
|
|
"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/model"
|
|
)
|
|
|
|
// seedL4Habit writes a canonical intent record memory (the closed-loop write-back
|
|
// format produced by capacity.RecordIntent) recording that "搞一下这个部署" is a task
|
|
// for persona-a.
|
|
func seedL4Habit(t *testing.T, store *memory.Store) {
|
|
t.Helper()
|
|
ctx := context.Background()
|
|
if _, err := store.Add(ctx, memory.MemoryItem{
|
|
PersonaID: "persona-a",
|
|
Scope: memory.ScopeUser,
|
|
Kind: memory.KindRelationship,
|
|
Content: "intent:isTask=true;taskKind=ops;confidence=0.85;text=搞一下这个部署",
|
|
}); err != nil {
|
|
t.Fatalf("seed L4 habit memory: %v", err)
|
|
}
|
|
}
|
|
|
|
// TestLoop_Capacity_L4_WakesOnLearnedHabit_OwnerEnv proves the L4 feed: with a
|
|
// retrieved user habit recording that the phrase is a task, an otherwise-undecided
|
|
// turn wakes in the owner-full env, and the model is advertised the awake tool set.
|
|
func TestLoop_Capacity_L4_WakesOnLearnedHabit_OwnerEnv(t *testing.T) {
|
|
t.Parallel()
|
|
store := newTestMemoryStore(t)
|
|
seedL4Habit(t, store)
|
|
td := capacityToolSet(t)
|
|
ad := &mockAdapter{stream: []mgResp{{resp: model.Response{Content: "好的"}}}}
|
|
a := newTestAgent(t, ad, td)
|
|
dec := capacity.New(capacity.Config{Enabled: true, MinConfidence: 0.6})
|
|
l := New(Options{
|
|
Agent: a,
|
|
MaxRounds: 8,
|
|
OnStream: func(model.StreamEvent) {},
|
|
Capacity: dec,
|
|
Retriever: memory.NewRetriever(store),
|
|
PersonaID: "persona-a",
|
|
})
|
|
ctx := WithSessionEnv(context.Background(), OwnerEnv())
|
|
if _, err := l.Run(ctx, "sess", []model.Message{model.TextMessage(model.RoleUser, "搞一下那个部署")}); err != nil {
|
|
t.Fatalf("Run: %v", err)
|
|
}
|
|
if len(ad.streamReqs) == 0 {
|
|
t.Fatal("no streaming request captured")
|
|
}
|
|
set := toolSet(ad.streamReqs[0].Tools)
|
|
// L4 read the learned habit → awake → web-search is advertised (awake set).
|
|
if !hasAll(set, "terminal", "file", "web-search") {
|
|
t.Fatalf("owner L4 tools = %v, want awake set incl web-search", toolNames(ad.streamReqs[0].Tools))
|
|
}
|
|
}
|
|
|
|
// TestLoop_Capacity_L4_RestrictedEnv_NoOwnerHabitRead proves the L4 isolation red
|
|
// line: in a group/stranger context the loop passes no recall, so the decider falls
|
|
// back to L1/L2 and the owner's habit memory is never used to wake the intent.
|
|
func TestLoop_Capacity_L4_RestrictedEnv_NoOwnerHabitRead(t *testing.T) {
|
|
t.Parallel()
|
|
store := newTestMemoryStore(t)
|
|
seedL4Habit(t, store)
|
|
td := capacityToolSet(t)
|
|
ad := &mockAdapter{stream: []mgResp{{resp: model.Response{Content: "好的"}}}}
|
|
a := newTestAgent(t, ad, td)
|
|
dec := capacity.New(capacity.Config{Enabled: true, MinConfidence: 0.6})
|
|
l := New(Options{
|
|
Agent: a,
|
|
MaxRounds: 8,
|
|
OnStream: func(model.StreamEvent) {},
|
|
Capacity: dec,
|
|
Retriever: memory.NewRetriever(store),
|
|
PersonaID: "persona-a",
|
|
})
|
|
ctx := WithSessionEnv(context.Background(), SessionEnv{ActorEnv: restrict.ActorGroupMember, MemWritable: false})
|
|
if _, err := l.Run(ctx, "sess", []model.Message{model.TextMessage(model.RoleUser, "搞一下那个部署")}); err != nil {
|
|
t.Fatalf("Run: %v", err)
|
|
}
|
|
if len(ad.streamReqs) == 0 {
|
|
t.Fatal("no streaming request captured")
|
|
}
|
|
set := toolSet(ad.streamReqs[0].Tools)
|
|
// Restricted env → L4 silent → the turn stays undecided, and the design/11 §3
|
|
// security gate hides every tool that is not marked AllowInGroup (terminal/file
|
|
// are unmarked). So the model sees nothing: web-search is absent (owner habit
|
|
// not read) and even the quiet-set tools are closed to a group session.
|
|
if len(set) != 0 {
|
|
t.Fatalf("restricted tools = %v, want none (security gate closes unmarked tools)", toolNames(ad.streamReqs[0].Tools))
|
|
}
|
|
}
|