߲jFUdZddlmZddlZddlmZddlmZmZddl m Z m Z m Z m Z edd Zd ed <ed d Zd ed <dZdZded<ed d!dZd"dZd#dZd$dZed%dZd"dZd&dZd"dZd&dZd'dZd(dZe d)dZe d d*dZ d d+dZy),aaContext-local state for delegate_task child execution. A Hermes process may itself be a Kanban dispatcher worker with HERMES_KANBAN_* in os.environ. In-process delegate_task children and cron jobs fired via ``cronjob(action="run")`` are NOT dispatcher-owned, so identity gates must fail closed for them without mutating the process-global environment. ) annotationsN)contextmanager) ContextVarToken)IteratorMappingMutableMappingoverloadhermes_delegated_child_contextF)defaultzContextVar[bool]_DELEGATED_CHILD_CONTEXT#hermes_non_dispatcher_owned_context_NON_DISPATCHER_OWNED_CONTEXTHERMES_DELEGATED_CHILD_CONTEXT)HERMES_KANBAN_TASKHERMES_KANBAN_RUN_IDHERMES_KANBAN_CLAIM_LOCKHERMES_KANBAN_GOAL_MODEHERMES_KANBAN_GOAL_MAX_TURNSztuple[str, ...]KANBAN_ENV_KEYSc#Ktjd} ddlm}||5ddddtj |y#1swYxYw#tj |wxYww)zMark child execution and isolate its task-local session identity. Even a context entered without an id must restore the parent's session ContextVar (child construction calls ``set_current_session_id``).Tr)scoped_current_session_idN)r setgateway.session_contextrreset) session_idtokenrs =/home/ubuntu/.hermes/hermes-agent/agent/delegation_context.pydelegated_child_contextrs` % ( ( .E.E &z 2    !&&u-   !&&u-s1A0AA AA0 AAA--A0c<ttjS)zI7@YRUEU)[n[pG &' NIs A+A+ctjrytjjtd}|sy|dk(ryddlm}||jj}tjjddj}|r(|||jjk(ry |j||jjy#t$rYywxYw)afWhether Kanban mutations at *path* (a board DB or board-metadata root) are denied for this process: always for an in-process delegate child (the parent's own board); for a spawned descendant only when *path* is the dispatcher-pinned ``HERMES_KANBAN_DB`` or lies under the fenced root the marker carries. A legacy ``"1"`` marker fences everything.Tr1Fr;r)PathHERMES_KANBAN_DB) r r"r2r3r7pathlibrI expanduserresolver4 relative_to ValueError)pathmarkerrItargetpinneds rkanban_path_is_fencedrTys  ##% ZZ^^6 ;F  } $Z " " $ , , .F ZZ^^. 3 9 9 ;F &DL335==??4<224<<>?  s3C:: DDcyNr#rBs rdelegated_child_subprocess_envrXsNQr$cyrVr#rWs rrXrXsORr$ctsVtjjds7|r&|jds$|jts|dSt |St |tjS|S)zCarry worker/delegate descendant denial across a real process spawn. Location and credentials are untouched; callers retain their existing secret policy. Dispatcher workers and supervised tool transports grant their own explicit scope. rN)r.r2r3r"r7dictrGrWs rrXrXsc / 0BJJNNCW4X!56#''B\:]{t1S 1 #+BJJ ??3 ??r$rV)rz str | NonereturnIterator[None])r\r!)r\ Token[bool])rr^r\None)r\r])r\r=)rBz,Mapping[str, str] | MutableMapping[str, str]r\dict[str, str])rPz'os.PathLike[str] | str'r\r!)rBzMapping[str, str]r\r`)rBr_r\dict[str, str] | None)rBz3Mapping[str, str] | MutableMapping[str, str] | Noner\ra)__doc__ __future__rr2 contextlibr contextvarsrrtypingrrr r r __annotations__rr7rrr%r'r*r,r/r5r.r?rGrTrXr#r$rrhs# %)>>-78Xbg-h*h3==blq2r/r=$  . .0 3 /  1 1] @d &0 Q Q R R@D @ < @ @r$