`gj+UdZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z ddlmZddlmZddlmZdd lmZmZej.eZed Gd d ZeegefZe ddZded<edZhdZ dZ!dZ"dZ#d&dZ$d'dZ%d(dZ&d)dZ'd*dZ(d+dZ)d+dZ*d,dZ+d+dZ,d-d Z-d.d!Z.d/d0d"Z/d1d#Z0d2d$Z1 d3 d4d%Z2y)5aPre-execution ACP edit approval helpers. This module is intentionally isolated from the generic tool registry. ACP binds an edit approval requester in a ContextVar for the duration of one ACP agent run; CLI, gateway, and other sessions leave it unset and therefore bypass this guard. ) annotationsN) TimeoutError) ContextVarToken) dataclass)count)Path)AnyCallableT)frozencDeZdZUdZded<ded<ded<ded<ded <y ) EditProposalz?A proposed single-file edit that can be shown to an ACP client.str tool_namepath str | Noneold_textnew_textdict[str, Any] argumentsN)__name__ __module__ __qualname____doc____annotations__L/root/.hermes/venv/lib/python3.12/site-packages/acp_adapter/edit_approval.pyrrs IN IMrrACP_EDIT_APPROVAL_REQUESTER)defaultz(ContextVar[EditApprovalRequester | None]_EDIT_APPROVAL_REQUESTER>.env .env.local.env.productionid_rsa id_ed25519askworkspace_sessionsessionc,tj|S)z>#D)H07888.D J J Y]]=% 01 /+Hk9e  q R$KD6"RSS  y/  rcg}tjd|tjD]5}|jdj }|s%|j |7tjd|tjD]g}|jdj }|jdj }|r|j ||sW|j |i|S)Nz/^\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)$r"z+^\*\*\*\s+Move\s+File:\s*(.+?)\s*->\s*(.+)$)refinditer MULTILINEgroupstripappend) patch_bodypathsmatchrsrcdsts r_extract_v4a_patch_pathsrgsE:  {{1~##%  LL 6   kk!n""$kk!n""$  LL   LL   Lrc D|jd}t|tr|s tdt |}|s tdt |dk(r|dndj |}t |dk(rt|dnd}td|||t|S)NrSzpatch content requiredz no file paths found in V4A patchr"rz, rJ) r8 isinstancerrKrglenjoinrDrrL)rrbrc proposal_pathrs r_proposal_for_patch_v4armsw'J j# &j122 $Z 0E ;<< #E aE!HTYYu5EM14Uq#E!H-dH  y/  rc|dk(r t|S|dk(r2|jdd}|dk(r t|S|dk(r t|Sy)z:Return an edit proposal for supported file mutation calls.rIrSmoder;N)rMr8rYrm)rrros rbuild_edit_proposalrpsWL ' 22G}}VY/ 9 .y9 9 7?*95 5 rct|jj}|Dchc]}|j}}d|vsd|vryt|jjt vScc}w)Nz.gitz.sshT)r r>partslowernameSENSITIVE_AUTO_APPROVE_NAMES)rrrpartlowereds r_is_sensitive_auto_approve_pathrxsg J ! ! # ) )E(-.tzz|.G. Fg- :?? "&B BB/sA3cJt|xstj}|tk(st|jryt |jj jd}|tk(ry|tk(r@t tjjd} |j|yy#t$rYnwxYw|st |j jd} |j|y#t$rYywxYw)zReturn whether an ACP edit proposal may bypass the prompt for this session. This is intentionally session-scoped and conservative: sensitive paths still ask even under autonomous policies. F)strictT)rAUTO_APPROVE_ASKr`rxrr r>resolveAUTO_APPROVE_SESSIONAUTO_APPROVE_WORKSPACEtempfile gettempdir relative_torK)proposalpolicycwdrtmp_rootroots rshould_auto_approve_editrs ++ , 2 2 4F !!%DX]]%S   ) ) + 3 35 3 AD %% ''++-.66e6D    X &     9'')111?D   &  s$5C CCD D"!D"ct}|y t||}|y t||}|ryt j dd idS#t$r>}tj d||t j dd|didcYd}~Sd}~wwxYw#t$r"}tj d|d}Yd}~d}~wwxYw) zRun ACP edit approval if bound. Returns a JSON tool-error string when the edit must be blocked, otherwise ``None`` so dispatch can continue. Requester exceptions deny by default. Nz5Could not build ACP edit approval proposal for %s: %srXz.Edit approval denied: could not prepare diff ()F) ensure_asciiz&ACP edit approval requester failed: %sz:Edit approval denied by ACP client; file was not modified.)r9rp ExceptionloggerwarningjsondumpsrU)rrr.rexcapproveds rmaybe_require_edit_approvalrs,-Ir&y)<  (+,  ::w \]lq rr rNPY[^_zz7&TUXTYYZ$[\kpqqr ?Es4 A B B3BBB CB<<Cc ddl}dtt}|j|d|jdd|j |j|j |jg|j|jd S) z._requester'sX/>  * Z13 +HfcBKK LfV^VcVcdC |,\ Z vM O -X6 $!  *  K   > }}W}5H (It4 GY - ; Dd3|C 9 Z ITX Y Z.y)  MMO NNJC P s)8C C2 C/.C/2D1&D,,D1)rrreturnrUr)rrrrrrs````` r make_acp_edit_approval_requesterrs) ) V r)r.EditApprovalRequester | Nonerr)r2rrNone)rr)rr)rrrr)rrrr)rbrrz list[str])rrrrrzEditProposal | None)rrrrUr7)rrrrrrrrU)rrrrrr)rr)gN@N) rr rzasyncio.AbstractEventLooprrrfloatrz+Callable[[], tuple[str, str | None]] | NonerEditApprovalRequester)3r __future__rasynciorloggingr\rconcurrent.futuresrr contextvarsrr dataclassesr itertoolsrpathlibr typingr r getLoggerrrrrUrr!rrrur{r~r}r/r3r5r9rDrMrYrgrmrprxrrrrrrrrsE#  <)!   8 $ $!,!56EO! FB ( a, 3 * ' *;  B0. CBs>4GK 4#4 #44 4 E 4  4r