`gjmdZddlmZddlZddlZddlmZddlm Z ddl m Z ddl m Z mZejeZdd d d d d Ze d ZddZdd ddZddZddZ d ddZy)z?ACP permission bridging for Hermes dangerous-command approvals.) annotationsN) TimeoutError)count)Callable)AllowedOutcomePermissionOptiononcesessionalwaysdeny) allow_once allow_session allow_alwaysr deny_alwaysc@ td|dy#t$rYywxYw)zFReturn whether the installed ACP SDK accepts a permission option kind. __probe__probe option_idkindnameFT)r Exception)rs J/root/.hermes/venv/lib/python3.12/site-packages/acp_adapter/permissions.py _permission_option_supports_kindr s,;TH  s  F) smart_deniedc2tdddg}|s|jtddd|r|s|jtddd|jtdd d |s(td r|jtd d d |S)z8Return ACP options that match Hermes approval semantics.r z Allow oncerrrzAllow for sessionz Allow alwaysr reject_onceDeny reject_alwaysrz Deny always)rappendr)allow_permanentroptionss r_build_permission_optionsr$)s \ G '% $   | (##   NN#f=vVW <_M '$"   Nc ddl}dtt}|r|d|n|}|r|d|nd|}|j||dd|j |j |g||d  S) u+Return the ACP tool-call update attached to a permission request. ``request_permission`` expects a ``ToolCallUpdate`` payload — produced by ``_acp.update_tool_call`` — not a ``ToolCallStart``. Each request gets a unique ``perm-check-N`` id so concurrent requests don't collide. rNz perm-check-z: z $ z$ executepending)command description)titlerstatuscontent raw_input)acpnext_PERMISSION_REQUEST_IDSupdate_tool_call tool_content text_block)r)r*_acp tool_call_idr+ content_texts r_build_permission_tool_callr8Ls &=!> ?@L+6{m2gY 'GE4?k]$wi0r'^L   ""4??<#@AB%kB ! r%ct|tsy|j}||vrtj d|yt j |dS)z;Map an ACP permission outcome into Hermes approval strings.r z1Permission request returned unknown option_id: %s) isinstancerrloggerwarning_OPTION_ID_TO_HERMESget)outcomeallowed_option_idsrs r_map_outcome_to_hermesrAbsH g~ .!!I**JIV  # #Iv 66r%c>ddd dfd}|S)a Return a Hermes-compatible approval callback that bridges to ACP. The callback accepts ``command`` and ``description`` plus optional keyword arguments such as ``allow_permanent`` used by ``tools.approval.prompt_dangerous_approval()``. Args: request_permission_fn: The ACP connection's ``request_permission`` coroutine. loop: The event loop on which the ACP connection lives. session_id: Current ACP session id. timeout: Seconds to wait for a response before auto-denying. TFr"rcddlm}t||}t||}||}||td} | y | j } | y|D chc]} | j} } t| j| S#t tf$r0} | jtjd | Yd} ~ yd} ~ wwxYwcc} w) Nr)safe_schedule_threadsaferC) session_id tool_callr#z.Permission request: failed to schedule on loop)r; log_messager )timeoutz*Permission request timed out or failed: %s)r@) agent.async_utilsrEr$r8r;result FutureTimeoutrcancelr<rrAr?)r)r*r"r_rEr#rGcorofutureresponseexcoptionr@looprequest_permission_fnrFrIs r _callbackz)make_approval_callback.._callbacks ?++%  0E $!  * $H  > }}W}5H  =DE6f..EE%   1  y)  MMO NNG M FsBCC&B??C) r)strr*rWr"boolrrXrNobjectreturnrW)rUrTrFrIrVs```` rmake_approval_callbackr\nsV0!%" + + +  +  +  +  + + Z r%)rrWrZrX)r"rXrrXrZzlist[PermissionOption])r)rWr*rW)r?rYr@zset[str]rZrW)gN@) rUrrTzasyncio.AbstractEventLooprFrWrIfloatrZzCallable[..., str])__doc__ __future__rasynciologgingconcurrent.futuresrrL itertoolsrtypingr acp.schemarr getLogger__name__r;r=r1rr$r8rAr\r[r%rrhsE"<   8 $    (49  ,0  F, 7  A#A #AA A  Ar%