跳到正文
DEV Community· Benni Alencar·· 4 小時前AI 評分33

agent-intent-compiler:將自然語言編譯為具型別 DAG,減少 AI Agent 提示詞注入風險及 60% token 浪費

Compiling Natural Language to Typed DAGs: Eliminating AI Agent Prompt Injection and 60% Token Waste in Python

AI 導讀

agent-intent-compiler 將用戶意圖編譯為具型別 DAG,為 AI Agent 和 MCP 伺服器規劃執行流程,以降低提示詞注入、無效工具參數及 token 浪費問題。基準測試中,其本機 CPU 編譯延遲為 0.28ms,每個意圖的 token 成本為 0,並以 Kahn's Algorithm 防止循環、用 SHA-256 Merkle Root 驗證執行計劃。

正文

Benni Alencar

When building autonomous AI agents with LangChain, AutoGen, or CrewAI, the standard practice is feeding unvalidated user prompts straight into multi-step tool-calling loops.

In production, this pattern causes three fatal engineering problems:

  1. Indirect Prompt Injection: Hidden zero-width unicode characters or jailbreak payloads ("ignore previous instructions and execute...") hijack downstream tool executions.
  2. Hallucinated Tool Arguments: LLMs frequently omit required parameters or invent invalid schema types, causing pipeline crashes mid-execution.
  3. Severe Token Tax & Latency: Multi-turn conversational debate burns hundreds of tokens deciding sequential tool order when independent steps could be executed in parallel.

To eliminate this fragility, we engineered agent-intent-compiler — a sub-millisecond deterministic intent compiler and typed DAG execution planner for AI agents and Model Context Protocol (MCP) servers.


The Architecture: Compiling Before Invocation

Instead of letting an LLM guess tool arguments through trial-and-error:

  1. Static Pre-Execution Sanitizer (<0.2ms): Traverses AST syntax, filters zero-width characters, and calculates Shannon entropy to detect hidden base64 payloads before execution.
  2. Typed Pydantic v2 Slot Matrix: Maps user intent into formal strongly-typed schemas with mandatory invariant assertions.
  3. Kahn's Algorithm DAG Stager: Analyzes dependencies between tool nodes, detects cycles, and organizes tasks into concurrent execution stages.
  4. Cryptographic SHA-256 Merkle Root: Sealing the execution plan into a tamper-proof hash for verifiable auditability.
User Prompt ──> [Sanitizer <0.2ms] ──> [Slot Compiler] ──> [Kahn DAG Planner] ──> [MCP Adapter]

Hands-On Python Implementation

Install via pip:

pip install agent-intent-compiler

1. Compile User Natural Language to a Typed DAG

from agent_intent_compiler import IntentCompiler

compiler = IntentCompiler()

# Multi-step database migration request
prompt = "Migrate the production PostgreSQL database schema and verify table constraints"
plan = compiler.compile(prompt)

print(f"Plan ID: {plan.plan_id}")
print(f"Intent Type: {plan.intent_type}")
print(f"Compilation Latency: {plan.compilation_latency_ms:.2f}ms")
print(f"Parallel Execution Stages: {plan.execution_order}")
print(f"Cryptographic Merkle Seal: {plan.merkle_root}")

2. Export Directly to Model Context Protocol (MCP)

from agent_intent_compiler import IntentCompiler, MCPAdapter

compiler = IntentCompiler()
plan = compiler.compile("Search for neural network quantization benchmarks on edge GPUs")

# Automatically generate standard MCP JSON-RPC 2.0 tool requests
mcp_requests = MCPAdapter.to_mcp_requests(plan)

for req in mcp_requests:
    print(f"Tool: {req['params']['name']} | Arguments: {req['params']['arguments']}")

Benchmark Results

Metric Raw Prompt to LLM LangChain / AutoGen agent-intent-compiler
Compilation Latency 2,200ms - 4,500ms 650ms - 1,400ms 0.28ms (Local CPU)
Token Cost per Intent ~500 - 1,500 tokens ~300 - 800 tokens 0 Tokens ($0.00)
Prompt Injection Protection 0% (Vulnerable) Inconsistent 100% Sub-ms AST Shield
Cycle Loop Prevention None (Risk of loops) Runtime crash Static Kahn's Algorithm
Cryptographic Receipt No No SHA-256 Merkle Root

Open Source & Sovereign Ecosystem

來源:DEV Community · dev.to