`gj*vdZddlZddlmZddlmZej eZdededee fdZ d e de fd Z y) zShared path validation helpers for tool implementations. Extracts the ``resolve() + relative_to()`` and ``..`` traversal check patterns previously duplicated across skill_manager_tool, skills_tool, skills_hub, cronjob_tools, and credential_files. N)Path)Optionalpathrootreturnc |j}|j}|j|y#ttf$r}d|cYd}~Sd}~wwxYw)auEnsure *path* resolves to a location within *root*. Returns an error message string if validation fails, or ``None`` if the path is safe. Uses ``Path.resolve()`` to follow symlinks and normalize ``..`` components. Usage:: error = validate_within_dir(user_path, allowed_root) if error: return json.dumps({"error": error}) z Path escapes allowed directory: N)resolve relative_to ValueErrorOSError)rrresolved root_resolvedexcs F/root/.hermes/venv/lib/python3.12/site-packages/tools/path_security.pyvalidate_within_dirrsT8<<>  ]+   81#778s14AA A Apath_strc4t|j}d|vS)zReturn True if *path_str* contains ``..`` traversal components. Quick check for obvious traversal attempts before doing full resolution. z..)rparts)rrs rhas_traversal_componentr%s N E 5=) __doc__loggingpathlibrtypingr getLogger__name__loggerstrrboolrrrr!sX   8 $d$8C=,cdr