123 lines
3.5 KiB
TypeScript
123 lines
3.5 KiB
TypeScript
import { Injectable } from '@nestjs/common';
|
|
import { StudentsService } from '../../students/students.service';
|
|
import { StudentAccessScopeFactory } from '../../students/student-access-scope.factory';
|
|
import type { AgentToolContext, ToolDef, ToolInputResult } from '../agent-tool.types';
|
|
|
|
/** Whitelisted input shape for search_students. */
|
|
interface SearchStudentsInput {
|
|
keyword?: string;
|
|
classId?: number;
|
|
organizationId?: number;
|
|
limit?: number;
|
|
}
|
|
|
|
/** Forbidden input keys — if the model sends these, validation fails. */
|
|
const FORBIDDEN_INPUT_KEYS = new Set([
|
|
'userId',
|
|
'isSuperAdmin',
|
|
'permissions',
|
|
'roles',
|
|
'ability',
|
|
'user',
|
|
'password',
|
|
'token',
|
|
]);
|
|
|
|
@Injectable()
|
|
export class SearchStudentsTool implements ToolDef<SearchStudentsInput> {
|
|
readonly name = 'search_students';
|
|
readonly inputSchema = {
|
|
type: 'object',
|
|
properties: {
|
|
keyword: {
|
|
type: 'string',
|
|
description: '搜索关键词（姓名/学号）',
|
|
maxLength: 100,
|
|
},
|
|
classId: {
|
|
type: 'integer',
|
|
description: '班级ID',
|
|
minimum: 1,
|
|
},
|
|
organizationId: {
|
|
type: 'integer',
|
|
description: '校区ID',
|
|
minimum: 1,
|
|
},
|
|
limit: {
|
|
type: 'integer',
|
|
description: '返回条数上限',
|
|
minimum: 1,
|
|
maximum: 50,
|
|
},
|
|
},
|
|
additionalProperties: false,
|
|
};
|
|
readonly description = '搜索学生，支持关键词、班级、校区筛选。仅返回基础公开字段。';
|
|
readonly requiredPermission = 'student:view';
|
|
|
|
constructor(
|
|
private readonly studentsService: StudentsService,
|
|
private readonly scopeFactory: StudentAccessScopeFactory,
|
|
) {}
|
|
|
|
validate(input: Record<string, unknown>): ToolInputResult<SearchStudentsInput> {
|
|
// Reject forbidden keys
|
|
for (const key of Object.keys(input)) {
|
|
if (FORBIDDEN_INPUT_KEYS.has(key)) {
|
|
return {
|
|
ok: false,
|
|
error: `不允许的输入字段: ${key}`,
|
|
};
|
|
}
|
|
}
|
|
|
|
const allowedKeys = new Set(['keyword', 'classId', 'organizationId', 'limit']);
|
|
for (const key of Object.keys(input)) {
|
|
if (!allowedKeys.has(key)) {
|
|
return { ok: false, error: `不允许的输入字段: ${key}` };
|
|
}
|
|
}
|
|
|
|
const result: SearchStudentsInput = {};
|
|
|
|
if (input.keyword !== undefined) {
|
|
if (typeof input.keyword !== 'string' || input.keyword.length > 100) {
|
|
return { ok: false, error: 'keyword 必须是字符串且长度不超过100' };
|
|
}
|
|
result.keyword = input.keyword;
|
|
}
|
|
|
|
if (input.classId !== undefined) {
|
|
const id = Number(input.classId);
|
|
if (!Number.isInteger(id) || id <= 0) {
|
|
return { ok: false, error: 'classId 必须是正整数' };
|
|
}
|
|
result.classId = id;
|
|
}
|
|
|
|
if (input.organizationId !== undefined) {
|
|
const id = Number(input.organizationId);
|
|
if (!Number.isInteger(id) || id <= 0) {
|
|
return { ok: false, error: 'organizationId 必须是正整数' };
|
|
}
|
|
result.organizationId = id;
|
|
}
|
|
|
|
if (input.limit !== undefined) {
|
|
const limit = Number(input.limit);
|
|
if (!Number.isInteger(limit) || limit < 1 || limit > 50) {
|
|
return { ok: false, error: 'limit 必须是 1 到 50 的整数' };
|
|
}
|
|
result.limit = limit;
|
|
}
|
|
|
|
return { ok: true, value: result };
|
|
}
|
|
|
|
async execute(input: SearchStudentsInput, context: AgentToolContext): Promise<unknown> {
|
|
const scope = this.scopeFactory.buildScope(context);
|
|
return this.studentsService.agentSearchStudents(scope, input);
|
|
}
|
|
}
|