Autumn-27
052cf63338
模型若照抄提示词里的中文标签(如「拦截:DENY:...」),旧解析要求关键词在行首, 会判为无法解析 → 按 fail_action(默认 allow)兜底,导致真实拦截被放行。 - ParseVerdict 改为扫描行内最早出现的 ALLOW/ASK/DENY 关键词,容忍前缀标签 - 提示词输出段改用箭头并明确禁止输出中文标签,附合法输出示例 - 新增 prompt_test.go 覆盖标签回显、全角冒号、大小写、超长理由截断等场景 Claude-Session: https://claude.ai/code/session_019QXSCDmzimwnjntBNCgUD7
46 lines
1.6 KiB
Go
46 lines
1.6 KiB
Go
package intercept
|
|
|
|
import "testing"
|
|
|
|
func TestParseVerdict(t *testing.T) {
|
|
cases := []struct {
|
|
name string
|
|
in string
|
|
wantAction string
|
|
wantReason string
|
|
}{
|
|
{"bare allow", "ALLOW", "allow", ""},
|
|
{"bare deny", "DENY:删除生产文件(D4)", "deny", "删除生产文件(D4)"},
|
|
{"bare ask", "ASK:归属不明", "ask", "归属不明"},
|
|
{"lowercase", "deny: rm 系统文件", "deny", "rm 系统文件"},
|
|
{"fullwidth colon", "DENY：命中D4", "deny", "命中D4"},
|
|
// The model echoing the prompt's Chinese label must NOT fall through to
|
|
// unparseable (which would fail-open on a real DENY).
|
|
{"echoed label deny", "拦截:DENY:命中D5", "deny", "命中D5"},
|
|
{"echoed label allow", "放行:ALLOW", "allow", ""},
|
|
{"echoed label ask", "转人工：ASK:无法判断影响面", "ask", "无法判断影响面"},
|
|
{"leading whitespace/blank line", "\n ALLOW\n", "allow", ""},
|
|
{"extra trailing text on later line", "DENY:清库(D4)\n其它解释", "deny", "清库(D4)"},
|
|
{"unparseable", "我认为这个命令没问题", "", ""},
|
|
{"empty", "", "", ""},
|
|
}
|
|
for _, c := range cases {
|
|
t.Run(c.name, func(t *testing.T) {
|
|
v := ParseVerdict(c.in)
|
|
if v.Action != c.wantAction {
|
|
t.Errorf("action = %q, want %q (in=%q)", v.Action, c.wantAction, c.in)
|
|
}
|
|
if v.Reason != c.wantReason {
|
|
t.Errorf("reason = %q, want %q (in=%q)", v.Reason, c.wantReason, c.in)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestParseVerdictReasonCapped(t *testing.T) {
|
|
long := "DENY:" + string(make([]byte, 500))
|
|
if got := ParseVerdict(long); len(got.Reason) > 200 {
|
|
t.Errorf("reason length = %d, want <= 200", len(got.Reason))
|
|
}
|
|
}
|