mirror of
https://gitcode.com/JianFeeeee/ModelRouter.git
synced 2026-11-07 09:47:23 +00:00
移除 4 个靠伪造客户端身份/绕过 WAF 才能工作的适配器,内核不再发行任何 非官方调用方式: - opencodezen / opencode / opencodego:靠 x-opencode-* 客户端指纹冒充官方 客户端;zen 免费池明确要求「free tier can only be used in OpenCode」 - agentrouter:伪造 Origin: qwen.ai + Referer + X-Requested-With 绕过阿里云 WAF 保留 12 个官方适配器(openai/deepseek/anthropic/gemini/github/groq/mistral/ ollama/kimicode/qwen38/sensenova/trae),其中 sensenova/qwen38 实测零伪装特征。 本地保留两处:adapters/_local_archive/(gitignored 非递归子目录,不加载) 与线上 /etc/llmsproxy/adapters/(adapter_dir 权威副本,cp -f 不删文件)。 测试同步:删除仅服务于被移除适配器的 11 个测试函数与 usage_cost_test.go; 改写 2 处借 opencode 之名的 provider 测试为用 openai 的 HTML 错误页压缩能力 验证同一契约(适配器钩子拥有错误格式、原文不外泄)。 验证:go test -tags luajit ./... 全绿;二进制内 x-opencode-client / QwenCode/0.2.0 / qwen.ai 等指纹字符串计数归零。
121 lines
4.1 KiB
Go
121 lines
4.1 KiB
Go
package lua
|
|
|
|
import (
|
|
"encoding/json"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// TestAdaptersPreserveToolCalls is the fleet-wide guard for the
|
|
// "orphaned tool result" class of bug: when an agent client replays a turn
|
|
// whose assistant message carries tool_calls, EVERY adapter must forward both
|
|
// the call and the attribution of its result. Dropping the call (or the
|
|
// tool_call_id / tool_name that ties the result to it) makes the model see a
|
|
// result for a call it never made and re-issue the same call forever.
|
|
//
|
|
// The input deliberately uses content:[] — the shape most agent clients emit
|
|
// for a tool-calling assistant turn with no text.
|
|
func TestAdaptersPreserveToolCalls(t *testing.T) {
|
|
vm := NewVM(freshAdapterDir(t))
|
|
if err := vm.Start(); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer vm.Stop()
|
|
|
|
body := `{"model":"m","messages":[
|
|
{"role":"user","content":"read /tmp/x"},
|
|
{"role":"assistant","content":[],"tool_calls":[{"id":"call_abc","type":"function","function":{"name":"read","arguments":"{\"path\":\"/tmp/x\"}"}}]},
|
|
{"role":"tool","tool_call_id":"call_abc","content":"hello world"},
|
|
{"role":"user","content":"summarize"}
|
|
]}`
|
|
const (
|
|
callID = "call_abc"
|
|
fnName = "read"
|
|
toolOut = "hello world"
|
|
lastUser = "summarize"
|
|
)
|
|
|
|
// Adapters that identify a tool result by the call id.
|
|
byID := []string{"openai", "deepseek", "github", "groq", "kimicode", "mistral",
|
|
"sensenova", "trae", "anthropic"}
|
|
|
|
for _, a := range byID {
|
|
out, err := vm.Transform(a, "transform_request", body)
|
|
if err != nil {
|
|
t.Errorf("%s: transform_request: %v", a, err)
|
|
continue
|
|
}
|
|
if !strings.Contains(out, callID) {
|
|
t.Errorf("%s dropped the tool call id %q: %s", a, callID, out)
|
|
}
|
|
if !strings.Contains(out, fnName) {
|
|
t.Errorf("%s dropped the function name %q: %s", a, fnName, out)
|
|
}
|
|
if !strings.Contains(out, toolOut) {
|
|
t.Errorf("%s dropped the tool result: %s", a, out)
|
|
}
|
|
if !strings.Contains(out, lastUser) {
|
|
t.Errorf("%s dropped the final user turn: %s", a, out)
|
|
}
|
|
}
|
|
|
|
// Ollama identifies the result with tool_name (its API has no tool_call_id
|
|
// on assistant turns) and takes arguments as an object, not a JSON string.
|
|
out, err := vm.Transform("ollama", "transform_request", body)
|
|
if err != nil {
|
|
t.Fatalf("ollama: %v", err)
|
|
}
|
|
for _, want := range []string{`"tool_calls"`, fnName, `"tool_name"`, toolOut} {
|
|
if !strings.Contains(out, want) {
|
|
t.Errorf("ollama missing %s: %s", want, out)
|
|
}
|
|
}
|
|
|
|
// Gemini identifies the result by function NAME and has no call id in its
|
|
// wire format; both directions must be present as functionCall /
|
|
// functionResponse parts, and the system role must move to
|
|
// systemInstruction rather than sitting in contents.
|
|
gBody := `{"model":"m","messages":[
|
|
{"role":"system","content":"be brief"},
|
|
{"role":"user","content":"read /tmp/x"},
|
|
{"role":"assistant","content":[],"tool_calls":[{"id":"call_abc","type":"function","function":{"name":"read","arguments":"{\"path\":\"/tmp/x\"}"}}]},
|
|
{"role":"tool","tool_call_id":"call_abc","content":"hello world"}
|
|
]}`
|
|
gout, err := vm.Transform("gemini", "transform_request", gBody)
|
|
if err != nil {
|
|
t.Fatalf("gemini: %v", err)
|
|
}
|
|
for _, want := range []string{`"functionCall"`, `"functionResponse"`, fnName, toolOut, `"systemInstruction"`} {
|
|
if !strings.Contains(gout, want) {
|
|
t.Errorf("gemini missing %s: %s", want, gout)
|
|
}
|
|
}
|
|
// No message may keep the OpenAI-only roles inside contents.
|
|
var greq struct {
|
|
Contents []struct {
|
|
Role string `json:"role"`
|
|
} `json:"contents"`
|
|
}
|
|
if err := json.Unmarshal([]byte(gout), &greq); err != nil {
|
|
t.Fatalf("gemini unmarshal: %v (%s)", err, gout)
|
|
}
|
|
for _, c := range greq.Contents {
|
|
if c.Role != "user" && c.Role != "model" {
|
|
t.Errorf("gemini contents carry an invalid role %q: %s", c.Role, gout)
|
|
}
|
|
}
|
|
|
|
// Negative control: a text-only turn must still be forwarded verbatim.
|
|
plain := `{"model":"m","messages":[{"role":"user","content":"just text"}]}`
|
|
for _, a := range append(byID, "ollama", "gemini") {
|
|
pout, err := vm.Transform(a, "transform_request", plain)
|
|
if err != nil {
|
|
t.Errorf("%s plain: %v", a, err)
|
|
continue
|
|
}
|
|
if !strings.Contains(pout, "just text") {
|
|
t.Errorf("%s dropped plain text: %s", a, pout)
|
|
}
|
|
}
|
|
}
|