Kris
bd60c15df0
实现了 Teams 机器人所需的全功能组件，包括： - 基础命令解析与帮助卡片生成 - 租户验证与访问控制 - 自定义 UA 与媒体工具 - 消息分块、批注处理与会话管理 - 防抖、缓存与配置路由能力 - 投票、配对、审计与运行时状态管理 - TTS 语音合成与卡片构建工具 - 群组管理与权限控制逻辑
75 lines
2.2 KiB
Python
75 lines
2.2 KiB
Python
"""Microsoft Teams 工具策略 (Tools Policy)。
|
|
|
|
Team/Channel 级 tools allow/deny + toolsBySender 策略。
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Any
|
|
|
|
|
|
class ToolPolicy:
|
|
def __init__(self, config: dict[str, Any] | None = None):
|
|
config = config or {}
|
|
self._global_allow: set[str] = set(config.get("tools_allow", []))
|
|
self._global_deny: set[str] = set(config.get("tools_deny", []))
|
|
self._tools_by_sender: dict[str, set[str]] = {}
|
|
sender_tools = config.get("tools_by_sender", {}) or {}
|
|
for sender_id, tools in sender_tools.items():
|
|
self._tools_by_sender[sender_id] = set(tools)
|
|
|
|
def is_tool_allowed(
|
|
self,
|
|
tool_name: str,
|
|
sender_id: str = "",
|
|
team_id: str = "",
|
|
channel_id: str = "",
|
|
) -> bool:
|
|
sender_tools = self._tools_by_sender.get(sender_id)
|
|
if sender_tools is not None:
|
|
return tool_name in sender_tools
|
|
|
|
if tool_name in self._global_deny:
|
|
return False
|
|
|
|
if self._global_allow:
|
|
return tool_name in self._global_allow
|
|
|
|
return True
|
|
|
|
def get_allowed_tools(self, sender_id: str = "") -> list[str] | None:
|
|
sender_tools = self._tools_by_sender.get(sender_id)
|
|
if sender_tools is not None:
|
|
return list(sender_tools)
|
|
if self._global_allow:
|
|
return list(self._global_allow)
|
|
return None
|
|
|
|
|
|
def resolve_tool_policy(
|
|
config: dict[str, Any],
|
|
tool_name: str,
|
|
sender_id: str = "",
|
|
team_id: str = "",
|
|
channel_id: str = "",
|
|
) -> bool:
|
|
teams_config = config.get("teams", {}) or {}
|
|
team_config = (teams_config.get(team_id) or teams_config.get("*")) or {}
|
|
|
|
if team_config:
|
|
team_tools = team_config.get("tools", {}) or {}
|
|
if tool_name in team_tools.get("deny", []):
|
|
return False
|
|
if team_tools.get("allow"):
|
|
return tool_name in team_tools["allow"]
|
|
|
|
global_deny = set(config.get("tools_deny", []))
|
|
if tool_name in global_deny:
|
|
return False
|
|
|
|
global_allow = set(config.get("tools_allow", []))
|
|
if global_allow:
|
|
return tool_name in global_allow
|
|
|
|
return True
|