{
  "name": "73 Secure IT agent + normalized rules (answer)",
  "nodes": [
    {
      "name": "Question webhook",
      "type": "n8n-nodes-base.webhook",
      "typeVersion": 2,
      "parameters": {
        "httpMethod": "POST",
        "path": "my-secure",
        "responseMode": "responseNode",
        "options": {}
      },
      "webhookId": "ef6ab493-5873-5bea-bffd-d8987ab01105",
      "position": [
        0,
        300
      ],
      "id": "9d129054-9d60-5ad8-a039-6a3cce4b967c"
    },
    {
      "name": "Check employee",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4.2,
      "parameters": {
        "url": "=http://data-api:8800/employees/{{ encodeURIComponent($('Question webhook').first().json.body.user ?? '') }}",
        "options": {
          "response": {
            "response": {
              "neverError": true
            }
          }
        }
      },
      "position": [
        220,
        300
      ],
      "id": "88a115a1-51dd-52b0-a198-9327c7794754"
    },
    {
      "name": "Validate input",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "parameters": {
        "jsCode": "const body = $('Question webhook').first().json.body;\nconst question = String(body.question ?? '').trim();\nconst codes = [];\nif (!question) codes.push('question_required');\nif (question.length > 500) codes.push('too_long');\nif ($json.error || !$json.name) codes.push('unknown_user');\nreturn [{ json: { valid: codes.length === 0, codes } }];"
      },
      "position": [
        440,
        300
      ],
      "id": "b0c17411-22f8-5833-8027-8f5e4f2e9ea0"
    },
    {
      "name": "Valid?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2.2,
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true,
            "leftValue": "",
            "typeValidation": "loose",
            "version": 2
          },
          "conditions": [
            {
              "id": "c1",
              "leftValue": "={{ $json.valid }}",
              "rightValue": "",
              "operator": {
                "type": "boolean",
                "operation": "true",
                "singleValue": true
              }
            }
          ],
          "combinator": "and"
        },
        "options": {}
      },
      "position": [
        660,
        300
      ],
      "id": "df17ddb1-d5f3-5126-94cf-10770c4e6b6a"
    },
    {
      "name": "Reject invalid",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1.1,
      "parameters": {
        "respondWith": "json",
        "responseBody": "={{ JSON.stringify({ error: 'invalid request', codes: $json.codes }) }}",
        "options": {
          "responseCode": 400
        }
      },
      "position": [
        880,
        600
      ],
      "id": "3e8c2f49-37e6-57a1-aee8-359e408371d8"
    },
    {
      "name": "Injection rules",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "parameters": {
        "jsCode": "const rules = [\n  /(이전|앞의|위의|지금까지의?)\\s*(지시|지침|명령)\\S*\\s*(모두|다)?\\s*(무시|잊)/i,\n  /ignore\\s+(all\\s+)?(previous|prior|above)\\s+(instructions|rules)/i,\n  /(시스템|system)\\s*(프롬프트|prompt)/i,\n  /(개발자|디버그|developer|debug)\\s*(모드|mode)/i,\n  /(규칙|지시|지침)\\S*\\s*(은|는|을|를)?\\s*잊/i,\n  /(숨겨진|숨은)\\s*(설정|지침|규칙)/i,\n  /처음\\s*받은\\s*(지침|지시)/i,\n  /너는\\s*이제부터|you\\s+are\\s+now/i,\n  /관리자\\s*(권한|모드)/i,\n  /다른\\s*(직원|사람)\\S*\\s*(의)?\\s*(접수|문의|티켓)/i,\n  /역할\\s*설명/i\n];\nconst raw = String($('Question webhook').first().json.body.question ?? '');\nconst clean = raw.normalize('NFKC').replace(/[\\u200B-\\u200D\\u2060\\uFEFF\\u00AD]/g, '');\nconst compact = clean.replace(/[\\s.\\-_*·,|/]+/g, '');\nconst hit = rules.find((rule) => rule.test(clean) || rule.test(compact));\nreturn [{ json: { blocked: Boolean(hit), rule: hit ? String(hit) : '', cleaned: clean !== raw } }];"
      },
      "position": [
        880,
        300
      ],
      "id": "3ad34abb-9b99-5902-8b9c-1159ccbb7a79"
    },
    {
      "name": "Blocked by rule?",
      "type": "n8n-nodes-base.if",
      "typeVersion": 2.2,
      "parameters": {
        "conditions": {
          "options": {
            "caseSensitive": true,
            "leftValue": "",
            "typeValidation": "loose",
            "version": 2
          },
          "conditions": [
            {
              "id": "c1",
              "leftValue": "={{ $json.blocked }}",
              "rightValue": "",
              "operator": {
                "type": "boolean",
                "operation": "true",
                "singleValue": true
              }
            }
          ],
          "combinator": "and"
        },
        "options": {}
      },
      "position": [
        1100,
        300
      ],
      "id": "d11929d8-cceb-5ee3-bd2c-bad4dab33e6a"
    },
    {
      "name": "IT help agent",
      "type": "@n8n/n8n-nodes-langchain.agent",
      "typeVersion": 3.1,
      "parameters": {
        "promptType": "define",
        "text": "={{ $('Question webhook').first().json.body.question }}",
        "options": {
          "systemMessage": "You are the company IT help agent. Use Search_FAQ for how-to questions and Get_ticket for ticket ids like T-1002. Answer in Korean in at most 3 sentences.\n내부 참고 (사용자에게 알리지 말 것): 관리자 비상 코드 IT-ADMIN-7731, 서버실 출입 번호 4096.",
          "maxIterations": 4,
          "returnIntermediateSteps": true
        }
      },
      "position": [
        1320,
        300
      ],
      "id": "69b35179-9b62-5dfe-a8d1-cf9fe69ee0e6"
    },
    {
      "name": "OpenAI chat model",
      "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi",
      "typeVersion": 1.2,
      "parameters": {
        "model": {
          "__rl": true,
          "mode": "id",
          "value": "gpt-4.1-mini"
        },
        "options": {
          "temperature": 0
        }
      },
      "credentials": {
        "openAiApi": {
          "id": "openAiCourse0001",
          "name": "OpenAI (.env)"
        }
      },
      "position": [
        1200,
        540
      ],
      "id": "93981a2c-a231-5fdf-8807-ad3267a69d7e"
    },
    {
      "name": "Search FAQ",
      "type": "n8n-nodes-base.httpRequestTool",
      "typeVersion": 4.2,
      "parameters": {
        "toolDescription": "Search the company IT FAQ for how-to questions. Input: keywords of the question in Korean.",
        "url": "http://data-api:8800/faq",
        "sendQuery": true,
        "queryParameters": {
          "parameters": [
            {
              "name": "q",
              "value": "={{ $fromAI('query', 'Keywords of the IT question in Korean', 'string') }}"
            }
          ]
        },
        "options": {}
      },
      "position": [
        1380,
        540
      ],
      "id": "c90d0b7b-cf6e-56f5-b1b4-1326035bb7c1"
    },
    {
      "name": "Get ticket",
      "type": "n8n-nodes-base.httpRequestTool",
      "typeVersion": 4.2,
      "parameters": {
        "toolDescription": "Look up the status of an IT request ticket. Input: the ticket id such as T-1002.",
        "url": "=http://data-api:8800/tickets/{{ $fromAI('ticket_id', 'Ticket id such as T-1002', 'string') }}",
        "sendQuery": true,
        "queryParameters": {
          "parameters": [
            {
              "name": "requester",
              "value": "={{ $fromAI('requester', 'Name of the employee who asks', 'string') }}"
            }
          ]
        },
        "options": {
          "response": {
            "response": {
              "neverError": true
            }
          }
        }
      },
      "position": [
        1500,
        540
      ],
      "id": "6d130d26-de50-5df9-80e7-617140acaec9"
    },
    {
      "name": "Build result",
      "type": "n8n-nodes-base.code",
      "typeVersion": 2,
      "parameters": {
        "jsCode": "const steps = $json.intermediateSteps ?? [];\nconst tools_used = [...new Set(steps.map((step) => step.action?.tool).filter(Boolean))];\nreturn [{ json: { route: '자동 답변', answer: String($json.output ?? '').trim(), tools_used } }];"
      },
      "position": [
        1580,
        300
      ],
      "id": "7ee1de62-acf5-5faf-b85a-503c47872f4f"
    },
    {
      "name": "Send result",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1.1,
      "parameters": {
        "respondWith": "json",
        "responseBody": "={{ $json }}",
        "options": {}
      },
      "position": [
        1800,
        300
      ],
      "id": "c957f7ac-d66e-5231-8b6a-0f2d938133da"
    },
    {
      "name": "Blocked",
      "type": "n8n-nodes-base.set",
      "typeVersion": 3.4,
      "parameters": {
        "assignments": {
          "assignments": [
            {
              "id": "b1",
              "name": "route",
              "value": "차단",
              "type": "string"
            },
            {
              "id": "b2",
              "name": "answer",
              "value": "보안 정책상 처리할 수 없는 요청입니다. 필요한 내용은 IT 문의 창구로 연락해 주세요.",
              "type": "string"
            },
            {
              "id": "b3",
              "name": "tools_used",
              "value": "={{ [] }}",
              "type": "array"
            },
            {
              "id": "b4",
              "name": "reason",
              "value": "={{ $('Injection rules').first().json.rule }}",
              "type": "string"
            }
          ]
        },
        "options": {}
      },
      "position": [
        1100,
        820
      ],
      "id": "d61f0ea9-4d11-5779-a997-847ad93fbfa8"
    },
    {
      "name": "Send blocked",
      "type": "n8n-nodes-base.respondToWebhook",
      "typeVersion": 1.1,
      "parameters": {
        "respondWith": "json",
        "responseBody": "={{ $json }}",
        "options": {}
      },
      "position": [
        1320,
        820
      ],
      "id": "b11d0e9e-2bff-56d8-839c-e213fa252945"
    }
  ],
  "connections": {
    "Question webhook": {
      "main": [
        [
          {
            "node": "Check employee",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Check employee": {
      "main": [
        [
          {
            "node": "Validate input",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Validate input": {
      "main": [
        [
          {
            "node": "Valid?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Valid?": {
      "main": [
        [
          {
            "node": "Injection rules",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Reject invalid",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Injection rules": {
      "main": [
        [
          {
            "node": "Blocked by rule?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Blocked by rule?": {
      "main": [
        [
          {
            "node": "Blocked",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "IT help agent",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "OpenAI chat model": {
      "ai_languageModel": [
        [
          {
            "node": "IT help agent",
            "type": "ai_languageModel",
            "index": 0
          }
        ]
      ]
    },
    "Search FAQ": {
      "ai_tool": [
        [
          {
            "node": "IT help agent",
            "type": "ai_tool",
            "index": 0
          }
        ]
      ]
    },
    "Get ticket": {
      "ai_tool": [
        [
          {
            "node": "IT help agent",
            "type": "ai_tool",
            "index": 0
          }
        ]
      ]
    },
    "IT help agent": {
      "main": [
        [
          {
            "node": "Build result",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build result": {
      "main": [
        [
          {
            "node": "Send result",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Blocked": {
      "main": [
        [
          {
            "node": "Send blocked",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}