修雨
f522a9c2c2
Sync with DingTalk-Real-AI/main (1.0.35–1.0.40): - 1.0.35–1.0.39: chat @-mentions, sheet export, doc strip unsafe chars, PAT batch grants, devdoc RAG, agent_code detection, AI-tag opt-in - 1.0.40 (#486): China mirror via Gitee + npmmirror - (#488) embed skills/ into binary - (#464) strip duplicate H1 on JSONML doc-create # Conflicts: # .github/workflows/release.yml # CHANGELOG.md # README.md # README_zh.md # docs/command-index.md # internal/app/runner.go # internal/app/runner_test.go # internal/auth/channel.go # internal/helpers/devdoc.go # internal/helpers/devdoc_test.go # internal/pat/chmod.go # internal/pat/chmod_test.go # internal/pat/pat.go # internal/transport/client.go # scripts/install-skills.sh # scripts/install.ps1 # scripts/install.sh # skills/mono/references/products/devdoc.md # skills/mono/references/products/simple.md # skills/multi/dingtalk-devdoc/references/devdoc.md # skills/multi/dingtalk-skill/references/skill.md # test/cli_compat/devdoc_test.go # test/cli_compat/helpers_test.go # test/skill_tests.md # test/skill_tests_results.md # test/unit/pat_host_owned_signal_test.go
61 lines
2.2 KiB
Go
61 lines
2.2 KiB
Go
// Copyright 2026 Alibaba Group
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package auth
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
)
|
|
|
|
const (
|
|
// AgentCodeEnv is the primary per-spawn environment variable the host
|
|
// injects to declare "this process is driven by a third-party Agent host,
|
|
// render authorization UI yourselves".
|
|
AgentCodeEnv = "DINGTALK_DWS_AGENTCODE"
|
|
|
|
// AgentCodeEnvCompat is a compatibility alias for hosts that shipped the
|
|
// reversed prefix before AgentCodeEnv became the public spelling.
|
|
AgentCodeEnvCompat = "DWS_DINGTALK_AGENTCODE"
|
|
)
|
|
|
|
// AgentCodeFromEnv returns the effective host agent code and the env name that
|
|
// supplied it.
|
|
//
|
|
// Keep the public env surface intentionally single-spelled. The reversed
|
|
// DWS_DINGTALK_AGENTCODE draft name is not consumed, so host-owned PAT mode,
|
|
// gateway identity headers, and `pat chmod --agentCode` fallback all agree on
|
|
// the same stable signal: DINGTALK_DWS_AGENTCODE.
|
|
func AgentCodeFromEnv() (string, string) {
|
|
if value := strings.TrimSpace(os.Getenv(AgentCodeEnv)); value != "" {
|
|
return value, AgentCodeEnv
|
|
}
|
|
return "", ""
|
|
}
|
|
|
|
func AgentCodeEnvPresent() bool {
|
|
value, _ := AgentCodeFromEnv()
|
|
return value != ""
|
|
}
|
|
|
|
// HostOwnsPATFlow reports whether the current process is running under a
|
|
// third-party Agent host that will render the PAT authorization card
|
|
// itself. The trigger is DINGTALK_DWS_AGENTCODE being non-empty. The CLI
|
|
// deliberately does not consult any other signal (DINGTALK_AGENT /
|
|
// DWS_CHANNEL / the wire claw-type header) for this decision so that
|
|
// server-side routing tags and the host-owned UI contract remain independent
|
|
// concerns.
|
|
func HostOwnsPATFlow() bool {
|
|
return AgentCodeEnvPresent()
|
|
}
|