270 lines
9.6 KiB
Python
270 lines
9.6 KiB
Python
"""市場情報 MCP 啟用證據審核 preview。
|
||
|
||
操作員可貼上外部 MCP 啟用後的 redacted evidence；本模組只做結構化審核，
|
||
不打 health endpoint、不開 DB、不寫入、不啟動 fetch。
|
||
"""
|
||
|
||
|
||
REQUIRED_ENV_VARS = ("MCP_POSTGRES_PASSWORD", "TAVILY_API_KEY", "EXA_API_KEY")
|
||
EXPECTED_HEALTH_TARGETS = (
|
||
"http://localhost:3001/health",
|
||
"http://localhost:3002/health",
|
||
"http://localhost:3003/health",
|
||
"http://localhost:3004/health",
|
||
)
|
||
SAFE_LITERAL_VALUES = {"redacted", "***", "set", "present", "true", "yes", "ok"}
|
||
PROHIBITED_EVIDENCE_FLAGS = (
|
||
"database_write_executed",
|
||
"database_commit_executed",
|
||
"scheduler_attached",
|
||
"crawler_job_started",
|
||
"external_fetch_executed",
|
||
"manual_fetch_executed",
|
||
)
|
||
|
||
|
||
def _truthy(value):
|
||
if isinstance(value, bool):
|
||
return value
|
||
if isinstance(value, (int, float)):
|
||
return bool(value)
|
||
if isinstance(value, str):
|
||
return value.strip().lower() in {"1", "true", "yes", "y", "ok", "pass", "passed", "healthy", "set", "present", "redacted", "***"}
|
||
return False
|
||
|
||
|
||
def _looks_like_secret_literal(value):
|
||
if not isinstance(value, str):
|
||
return False
|
||
normalized = value.strip().lower()
|
||
if not normalized or normalized in SAFE_LITERAL_VALUES:
|
||
return False
|
||
return len(value.strip()) > 2
|
||
|
||
|
||
def _evidence_map(evidence, key):
|
||
value = evidence.get(key)
|
||
return value if isinstance(value, dict) else {}
|
||
|
||
|
||
def _ack(evidence, key):
|
||
acknowledgements = _evidence_map(evidence, "operator_acknowledgements")
|
||
return _truthy(evidence.get(key)) or _truthy(acknowledgements.get(key))
|
||
|
||
|
||
def _env_statuses(evidence):
|
||
env = _evidence_map(evidence, "required_env_vars") or _evidence_map(evidence, "env")
|
||
statuses = []
|
||
for name in REQUIRED_ENV_VARS:
|
||
value = env.get(name)
|
||
statuses.append(
|
||
{
|
||
"name": name,
|
||
"present": _truthy(value),
|
||
"secret_literal_in_payload": _looks_like_secret_literal(value),
|
||
"value_redacted": bool(value) and not _looks_like_secret_literal(value),
|
||
}
|
||
)
|
||
return statuses
|
||
|
||
|
||
def _health_item_ok(item):
|
||
if isinstance(item, bool):
|
||
return item
|
||
if isinstance(item, (int, float)):
|
||
return int(item) == 200
|
||
if isinstance(item, str):
|
||
return item.strip().lower() in {"200", "ok", "pass", "passed", "healthy"}
|
||
if isinstance(item, dict):
|
||
return (
|
||
int(item.get("status_code") or item.get("code") or 0) == 200
|
||
or _truthy(item.get("healthy"))
|
||
or _truthy(item.get("passed"))
|
||
or _truthy(item.get("status"))
|
||
)
|
||
return False
|
||
|
||
|
||
def _health_item_for_target(health, target):
|
||
if isinstance(health, dict):
|
||
if target in health:
|
||
return health[target]
|
||
port = target.rsplit(":", 1)[-1].split("/", 1)[0]
|
||
return health.get(port) or health.get(f"localhost:{port}")
|
||
if isinstance(health, list):
|
||
for item in health:
|
||
if not isinstance(item, dict):
|
||
continue
|
||
value = item.get("url") or item.get("target") or item.get("endpoint")
|
||
port = str(item.get("port") or "")
|
||
if value == target or (port and port in target):
|
||
return item
|
||
return None
|
||
|
||
|
||
def _health_statuses(evidence):
|
||
health = evidence.get("health_checks") or evidence.get("health_targets") or {}
|
||
return [
|
||
{
|
||
"target": target,
|
||
"passed": _health_item_ok(_health_item_for_target(health, target)),
|
||
}
|
||
for target in EXPECTED_HEALTH_TARGETS
|
||
]
|
||
|
||
|
||
def _sample_evidence_template():
|
||
return {
|
||
"required_env_vars": {
|
||
"MCP_POSTGRES_PASSWORD": "redacted",
|
||
"TAVILY_API_KEY": "redacted",
|
||
"EXA_API_KEY": "redacted",
|
||
},
|
||
"health_checks": {
|
||
"http://localhost:3001/health": 200,
|
||
"http://localhost:3002/health": 200,
|
||
"http://localhost:3003/health": 200,
|
||
"http://localhost:3004/health": 200,
|
||
},
|
||
"mcp_router_enabled": True,
|
||
"market_intel_readonly_smoke_passed": True,
|
||
"telemetry": {
|
||
"mcp_calls_table_exists": True,
|
||
"read_only_query_executed": True,
|
||
},
|
||
"operator_acknowledgements": {
|
||
"no_remove_orphans": True,
|
||
"momo_db_preserved": True,
|
||
"router_enabled_after_health": True,
|
||
"rollback_plan_confirmed": True,
|
||
"fetch_gate_left_closed": True,
|
||
},
|
||
}
|
||
|
||
|
||
def build_mcp_activation_evidence_preview(*, evidence=None, phase=None):
|
||
"""審核 redacted MCP runtime evidence；不執行任何外部動作。"""
|
||
evidence = evidence or {}
|
||
payload_received = bool(evidence)
|
||
env_statuses = _env_statuses(evidence)
|
||
health_statuses = _health_statuses(evidence)
|
||
telemetry = _evidence_map(evidence, "telemetry")
|
||
prohibited_flags = [
|
||
key for key in PROHIBITED_EVIDENCE_FLAGS
|
||
if _truthy(evidence.get(key))
|
||
]
|
||
secret_literal_keys = [
|
||
item["name"] for item in env_statuses
|
||
if item["secret_literal_in_payload"]
|
||
]
|
||
gates = [
|
||
{
|
||
"key": "evidence_payload_received",
|
||
"passed": payload_received,
|
||
"label": "已提供 redacted MCP runtime evidence payload",
|
||
},
|
||
{
|
||
"key": "no_secret_literals_in_payload",
|
||
"passed": not secret_literal_keys,
|
||
"label": "payload 只允許 redacted / boolean，不接受真實 secret 字串",
|
||
},
|
||
{
|
||
"key": "required_env_vars_acknowledged",
|
||
"passed": all(item["present"] for item in env_statuses),
|
||
"label": "三個必要 env 已由操作員確認存在",
|
||
},
|
||
{
|
||
"key": "all_health_targets_passed",
|
||
"passed": all(item["passed"] for item in health_statuses),
|
||
"label": "四個 localhost MCP health target 全部 200 / healthy",
|
||
},
|
||
{
|
||
"key": "mcp_router_enabled_after_health",
|
||
"passed": _truthy(evidence.get("mcp_router_enabled"))
|
||
and _ack(evidence, "router_enabled_after_health"),
|
||
"label": "router 僅在 health 全過後啟用",
|
||
},
|
||
{
|
||
"key": "market_intel_readonly_smoke_passed",
|
||
"passed": _truthy(evidence.get("market_intel_readonly_smoke_passed")),
|
||
"label": "market_intel MCP read-only smoke 已通過",
|
||
},
|
||
{
|
||
"key": "telemetry_runtime_confirmed",
|
||
"passed": _truthy(telemetry.get("mcp_calls_table_exists"))
|
||
and _truthy(telemetry.get("read_only_query_executed")),
|
||
"label": "mcp_calls telemetry read-only 查詢鏈路已確認",
|
||
},
|
||
{
|
||
"key": "operator_fallback_confirmed",
|
||
"passed": _ack(evidence, "rollback_plan_confirmed"),
|
||
"label": "router kill switch 與 stop MCP stack fallback 已確認",
|
||
},
|
||
{
|
||
"key": "production_boundaries_acknowledged",
|
||
"passed": _ack(evidence, "no_remove_orphans")
|
||
and _ack(evidence, "momo_db_preserved"),
|
||
"label": "已確認不使用 remove-orphans 且不動 momo-db lifecycle",
|
||
},
|
||
{
|
||
"key": "manual_fetch_gate_left_closed",
|
||
"passed": _ack(evidence, "fetch_gate_left_closed"),
|
||
"label": "啟用 MCP 後仍未打開人工 fetch gate",
|
||
},
|
||
{
|
||
"key": "no_write_or_scheduler_evidence",
|
||
"passed": not prohibited_flags,
|
||
"label": "證據未宣告 DB write、scheduler 或 fetch 已執行",
|
||
},
|
||
]
|
||
blocked_reasons = [
|
||
gate["key"] for gate in gates
|
||
if not gate["passed"]
|
||
]
|
||
accepted = payload_received and not blocked_reasons
|
||
|
||
payload = {
|
||
"mode": (
|
||
"mcp_activation_evidence_review"
|
||
if payload_received
|
||
else "mcp_activation_evidence_preview"
|
||
),
|
||
"phase": phase,
|
||
"evidence_payload_received": payload_received,
|
||
"activation_evidence_accepted": accepted,
|
||
"ready_for_runtime_promotion": accepted,
|
||
"ready_for_fetch_gate_review": accepted,
|
||
"external_mcp_runtime_evidence_complete": accepted,
|
||
"internal_mcp_runtime_evidence_complete": accepted,
|
||
"gate_count": len(gates),
|
||
"passed_gate_count": sum(1 for gate in gates if gate["passed"]),
|
||
"blocked_reasons": blocked_reasons,
|
||
"gates": gates,
|
||
"env_statuses": env_statuses,
|
||
"health_statuses": health_statuses,
|
||
"secret_literal_keys": secret_literal_keys,
|
||
"prohibited_flags": prohibited_flags,
|
||
"sample_evidence_template": _sample_evidence_template(),
|
||
"next_operator_steps": [
|
||
"若本審核通過，再跑 /api/market_intel/mcp_readiness?execute=true&timeout=3 做只讀 runtime smoke",
|
||
"確認 completion audit 的 external/internal runtime 缺口被證據補齊",
|
||
"人工 fetch gate 仍需另行審核，不可因 MCP runtime ready 自動抓外站",
|
||
],
|
||
"payload_persisted": False,
|
||
"evidence_persisted": False,
|
||
"api_executes_health_check": False,
|
||
"api_executes_docker": False,
|
||
"api_executes_ssh": False,
|
||
"api_opens_database_connection": False,
|
||
"api_writes_database": False,
|
||
"api_uses_external_network": False,
|
||
"database_session_created": False,
|
||
"database_write_executed": False,
|
||
"database_commit_executed": False,
|
||
"external_network_executed": False,
|
||
"scheduler_attached": False,
|
||
"writes_executed": False,
|
||
"would_write_database": False,
|
||
}
|
||
return payload
|