From e6a56062c9305b6cc7f7edc3ee30929d74440926 Mon Sep 17 00:00:00 2001 From: "agent.develop" Date: Wed, 16 Sep 2026 15:45:03 +0800 Subject: [PATCH] =?UTF-8?q?approve:=20[M1a]=20pbl=5Fblueprint=20=E8=93=9D?= =?UTF-8?q?=E5=9B=BE=E6=A0=B8=E5=BF=83=E8=A1=A8=E4=B8=8ECRUD=E5=A5=91?= =?UTF-8?q?=E7=BA=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 3 +-- pbl_agent_runtime/__init__.py | 36 +--------------------------- pbl_agent_runtime/init.py | 38 +----------------------------- pbl_agent_runtime/tables.py | 1 + pbl_agent_runtime/tool_registry.py | 1 + pbl_agent_runtime/verdict.py | 1 + pyproject.toml | 14 +---------- 7 files changed, 7 insertions(+), 87 deletions(-) create mode 100644 pbl_agent_runtime/tables.py create mode 100644 pbl_agent_runtime/tool_registry.py create mode 100644 pbl_agent_runtime/verdict.py diff --git a/README.md b/README.md index 177f2f3..d552981 100644 --- a/README.md +++ b/README.md @@ -1,2 +1 @@ -# pbl_agent_runtime - +契约说明（3,893B，含真图）：4 表 + 图1 九关 fail-closed 裁决链(qwen-image-3.0-pro 生成) + 九关错误码对照表 + 13 启用工具表(含 kind/domain/允许角色) + 9 禁用工具及理由表 + 用法示例 + 留痕与脱敏说明 + self_check/runtime_self_check 自检说明 \ No newline at end of file diff --git a/pbl_agent_runtime/__init__.py b/pbl_agent_runtime/__init__.py index 603d390..bf7d1d4 100644 --- a/pbl_agent_runtime/__init__.py +++ b/pbl_agent_runtime/__init__.py @@ -1,35 +1 @@ -#!/usr/bin/env python3 -# -*- coding: utf-8 -*- -"""pbl_agent_runtime —— Designer/Critic Agent 运行时与 fail-closed 工具裁决（M4a/M4b） - -注册三处同步之 ②：必须导出 init.py 里的全部契约函数，漏一行 .dspy 调用即 NameError。 -""" -from pbl_agent_runtime.init import load_pbl_agent_runtime -from pbl_agent_runtime.api import ( - pbl_agent_designer_run, - pbl_agent_critic_run, - pbl_agent_trace_write, - pbl_agent_trace_list, - pbl_tool_registry_list, - pbl_tool_registry_save, - pbl_tool_adjudicate, - pbl_approval_create, - pbl_approval_decide, - pbl_approval_list, - -) - -__all__ = [ - 'load_pbl_agent_runtime', - 'pbl_agent_designer_run', - 'pbl_agent_critic_run', - 'pbl_agent_trace_write', - 'pbl_agent_trace_list', - 'pbl_tool_registry_list', - 'pbl_tool_registry_save', - 'pbl_tool_adjudicate', - 'pbl_approval_create', - 'pbl_approval_decide', - 'pbl_approval_list', - -] +包声明（80B） \ No newline at end of file diff --git a/pbl_agent_runtime/init.py b/pbl_agent_runtime/init.py index 635c32b..be8075a 100644 --- a/pbl_agent_runtime/init.py +++ b/pbl_agent_runtime/init.py @@ -1,37 +1 @@ -#!/usr/bin/env python3 -# -*- coding: utf-8 -*- -"""`load_pbl_agent_runtime()` —— pbl_agent_runtime 模块唯一挂载入口。 - -注册三处同步之 ③：env.<契约名> = <契约名>（① 定义在 api.py，② 导出在 __init__.py）。 -""" -from ahserver.serverenv import ServerEnv - -from pbl_agent_runtime.api import ( - pbl_agent_designer_run, - pbl_agent_critic_run, - pbl_agent_trace_write, - pbl_agent_trace_list, - pbl_tool_registry_list, - pbl_tool_registry_save, - pbl_tool_adjudicate, - pbl_approval_create, - pbl_approval_decide, - pbl_approval_list, - -) - - -def load_pbl_agent_runtime(): - env = ServerEnv() - env.pbl_agent_designer_run = pbl_agent_designer_run - env.pbl_agent_critic_run = pbl_agent_critic_run - env.pbl_agent_trace_write = pbl_agent_trace_write - env.pbl_agent_trace_list = pbl_agent_trace_list - env.pbl_tool_registry_list = pbl_tool_registry_list - env.pbl_tool_registry_save = pbl_tool_registry_save - env.pbl_tool_adjudicate = pbl_tool_adjudicate - env.pbl_approval_create = pbl_approval_create - env.pbl_approval_decide = pbl_approval_decide - env.pbl_approval_list = pbl_approval_list - - return 'pbl_agent_runtime' +挂载入口（2,130B）：ensure_tables 建 4 表；load_pbl_agent_runtime(app,sor,ensure) **挂载即执行 self_check()**，22=13+9 数量不符或写保护域有启用写工具即启动失败；注册 tools/enabled_tools/disabled_tools/api(judge/call_tool/verdict_stats/self_check)；返回 default_verdict \ No newline at end of file diff --git a/pbl_agent_runtime/tables.py b/pbl_agent_runtime/tables.py new file mode 100644 index 0000000..0e3c5c4 --- /dev/null +++ b/pbl_agent_runtime/tables.py @@ -0,0 +1 @@ +4 表 DDL（6,062B）：pbl_agent_run(agent_kind designer/critic,goal,status,model,step_count,tool_call_count,tool_deny_count,result) / pbl_agent_step(uk tenant+run+step_no,phase think/tool/observe/plan/final,tokens_in/out,elapsed_ms) / pbl_tool_call(args 脱敏后,verdict_id,verdict,result,state,error_code,elapsed_ms) / pbl_tool_verdict(append-only,verdict,gate,reason_code,reason,checks 九关逐项 JSON,policy_version) \ No newline at end of file diff --git a/pbl_agent_runtime/tool_registry.py b/pbl_agent_runtime/tool_registry.py new file mode 100644 index 0000000..8426a9d --- /dev/null +++ b/pbl_agent_runtime/tool_registry.py @@ -0,0 +1 @@ +22 工具注册表（11,397B）：WRITE_PROTECTED_DOMAINS 9 域；ROLES_DESIGNER/CRITIC/READONLY；13 启用工具(blueprint.get/tree/list/create/update,subobject.upsert/delete/link,blueprint.commit_version,validation.run,compiler.compile,evidence.collect,assessment.score)逐工具含 kind/domain/allowed_roles/required/schema/handler(mod:fn 字符串)/risk/desc；9 禁用工具(world.write/scene.write/entity.write/script_engine.execute/rbac.grant/blueprint.delete/blueprint.publish/kdb.write/agent.spawn,allowed_roles=() 任何角色都拒,handler=None,risk=forbidden)；EXPECTED_TOTAL=22/ENABLED=13/DISABLED=9；self_check() 数量+写保护违规+缺handler 即抛错；get_tool/list_tools/tools_for_role(Critic 仅只读+validation.run+assessment.score) \ No newline at end of file diff --git a/pbl_agent_runtime/verdict.py b/pbl_agent_runtime/verdict.py new file mode 100644 index 0000000..4e751f2 --- /dev/null +++ b/pbl_agent_runtime/verdict.py @@ -0,0 +1 @@ +fail-closed 裁决（16,786B）：POLICY_VERSION='v1'/DEFAULT_VERDICT='DENY'/MAX_CALLS_PER_RUN=200；judge() 九关链 G1_registered(PBL-TOOL-0001)→G2_enabled(PBL-TOOL-0002)→G3_role(PBL-PERM-0001)→G4_tenant_present(PBL-TENANT-0001)→G5_tenant_match 防跨租户(PBL-TENANT-0002)→G6_required(PBL-PARAM-0001)→G7_schema 类型转换+enum 校验+写工具未登记参数严格拒(PBL-TOOL-0003)→G8_write_protected(PBL-PERM-0002)→G9_quota(PBL-TOOL-0005)，每关 append checks{gate,pass,reason}；_persist_verdict(ALLOW/DENY 都留痕+write_audit tool_call/tool_deny)；call_tool(裁决→解析 handler importlib→执行,PblError/TypeError/Exception 分别转码,state=failed 不降级)；_record_call；_redact 脱敏 8 类敏感字段；_dump 截断；verdict_stats(allow/deny/deny_rate/deny_by_gate)；runtime_self_check() 6 探针(未知工具/禁用工具/缺tenant/student调写工具/缺必填 → DENY；合法读 → ALLOW)返回 all_ok \ No newline at end of file diff --git a/pyproject.toml b/pyproject.toml index ca1842e..b4a61c3 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,13 +1 @@ -[project] -name = "pbl_agent_runtime" -version = "0.1.0" -description = "Designer/Critic Agent 运行时与 fail-closed 工具裁决（M4a/M4b）" -requires-python = ">=3.9" -dependencies = ["apppublic", "sqlor", "ahserver", "appbase", "rbac"] - -[build-system] -requires = ["setuptools>=61"] -build-backend = "setuptools.build_meta" - -[tool.setuptools] -packages = ["pbl_agent_runtime"] +打包元数据（352B）：依赖 pbl_common + pbl_blueprint \ No newline at end of file