Kalletlamadhav/sql-optimization-env
0
1�
2 ���i� � �H � d Z ddlZddlmZ G d� d� � Zdedefd �ZdS )3ac 4Reward Hacking Detector5-----------------------6Detects attempts by agents to game the reward function without actually7optimising the SQL query. Each check returns a string hack-type label8(truthy) or None (no hack detected).9 10Detection priority: highest-penalty hacks are checked first so the11most severe type is returned when multiple hacks co-occur.12� N� )� SQLOptActionc �L � e Zd Zg d�ZddgZg d�Zg d�Zg d�Zdede d z fd13�Z14d S ) � HackDetector)z\bWHERE\s+0\s*=\s*1\bz\bWHERE\s+1\s*=\s*0\bz\bWHERE\s+FALSE\bz\bWHERE\s+NULL\s*=\s*NULL\bz
\bLIMIT\s+0\bz
\bLIMIT\s+1\bz\bLIMIT\s+[2-9]\b)z^\s*SELECT\s+1\s*;?\s*$z^\s*SELECT\s+NULL\s*;?\s*$z ^\s*SELECT\s+\'[^\']*\'\s*;?\s*$z^\s*SELECT\s+\d+\s*;?\s*$)z\bDROP\s+TABLE\bz \bTRUNCATE\bz\bDELETE\s+FROM\bz\bUPDATE\s+\w+\s+SET\b)z15\bVACUUM\bz \bREINDEX\bz \bANALYZE\b�action�returnNc �� � |j � � � }|� � � }|j � � � � � � }| j D ]}t j ||� � r dS �| j D ]}t j ||� � r dS �| j D ]%}t j ||t16 j17 � � r dS �&| j D ]}t j ||� � r dS �d|vr"| j D ]}t j ||� � r dS �t |j � � dk rdS t j d |� � rd18S t |� � t |� � k rd S d S )
u� 19 Return a hack-type string if reward hacking is detected, else None.20 21 Checks (in priority order):22 1. DESTRUCTIVE_OPERATION — DROP/TRUNCATE/DELETE/UPDATE23 2. EMPTY_RESULT — WHERE 0=1, LIMIT 0 etc.24 3. CONSTANT_SELECT — SELECT 1 / SELECT NULL25 4. MAINTENANCE_ABUSE — VACUUM / REINDEX on benchmark DB26 5. LIMIT_ABUSE — LIMIT 1-9 when original has no LIMIT27 6. INDEX_OVERLOADING — >5 CREATE INDEX statements28 7. RESULT_COUNT_MISMATCH — suspiciously returns 0 rows29 8. QUERY_IDENTICAL — submitted exact same query as original30 �DESTRUCTIVE_OPERATION� EMPTY_RESULT�CONSTANT_SELECT�MAINTENANCE_ABUSE�LIMIT� LIMIT_ABUSE� �INDEX_OVERLOADINGz WHERE\s+\w+\s*=\s*'NONEXISTENT�HARDCODED_EMPTY_FILTER�QUERY_IDENTICALN)�optimized_query�strip�upper�31slow_query�_DESTRUCTIVE_PATTERNS�re�search�_EMPTY_RESULT_PATTERNS�_CONSTANT_SELECT_PATTERNS�match�32IGNORECASE�_MAINTENANCE_PATTERNS�_LIMIT_ABUSE_PATTERNS�len�index_statements�33_normalize)�selfr �task�q�q_upper�original_upper�pats �@C:\open_env_sql_opt\sql-optimization-env\server\hack_detector.py�detectzHackDetector.detect8 s� � �
� "� (� (� *� *���'�'�)�)�� � �.�.�0�0�6�6�8�8�� �-� /� /�C��y��g�&�&�
/�.�.�.�
/� �.� &� &�C��y��g�&�&�
&�%�~�~�
&� �1� )� )�C��x��Q��
�.�.�
)�(�(�(�
)� �-� +� +�C��y��g�&�&�
+�*�*�*�
+� �.� (� (��1�
)�
)���9�S�'�*�*� )�(�=�=�)� �v�&� '� '�!� +� +�&�&� �9�6�� @� @� ,�+�+�34 �g� � �*�^�"<�"<� <� <�$�$��t� ) �__name__�35__module__� __qualname__r r r r r r �strr+ � r, r* r r s� � � � � � � � � �� � � �� !� !� !� � � � �� � � �� ;�\� ;�C�$�J� ;� ;� ;� ;� ;� ;r, r �sqlr c �R � t j dd| � � � � � S )z#Collapse whitespace for comparison.z\s+� )r �subr )r2 s r* r# r# x s" � �
�6�&�#�s� #� #� )� )� +� +�+r, )�__doc__r �modelsr r r0 r# r1 r, r* �<module>r8 s� �� � � 36� � � � � � � � � �b� b� b� b� b� b� b� b�N,�C� ,�C� ,� ,� ,� ,� ,� ,r,