߲j5 bdZddlmZddlZddlZddlmZejeZ dZ ddZ y)aPropagate agent-turn context into worker threads that dispatch Hermes tools. A bare ``threading.Thread`` / ``ThreadPoolExecutor`` worker starts with an empty ``contextvars.Context`` and no thread-local approval/sudo callbacks, so tool dispatch inside it silently loses the approval ContextVars (gateway sessions then auto-approve dangerous commands) and the CLI callbacks (``prompt_dangerous_approval`` cannot reach the user, GHSA-qg5c-hvr5-hjgr). Call :func:`propagate_context_to_thread` **on the parent thread** (it snapshots at call time) and use the result as the worker target; callbacks are installed for the worker's lifetime and always cleared on exit. ) annotationsN)Callablecddlm}ddlm}|j|j f|j |jf|j|jf|j|jf|j|jffS)uf(getter, setter) pairs for every thread-local prompt callback a tool may need mid-dispatch (lazy: terminal_tool imports tools.approval at load, so a top-level import risks a cycle). Add a new per-thread prompt here — a callback missing from this table is silently absent on every parallel/timeout worker, so the tool believes nobody can answer.r)unlock) terminal_tool)agent.vault_backendsrtoolsr_get_approval_callbackset_approval_callback_get_sudo_password_callbackset_sudo_password_callbackget_unlock_prompt_callbackset_unlock_prompt_callbackget_save_login_prompt_callbackset_save_login_prompt_callbackget_code_prompt_callbackset_code_prompt_callback) vault_unlocktts 9/home/ubuntu/.hermes/hermes-agent/tools/thread_context.py _callback_apirsz <)  & &(@(@ A  + +R-J-J K  4 4l6]6] ^  8 8,:e:e f  2 2L4Y4Y Z  \\ctjd tdtDfd}|S#t$rt j ddY+wxYw)uHWrap *target* to run with the *current* thread's ContextVars and per-thread prompt callbacks (approval, sudo, password-manager unlock). Fail-closed: if callback installation raises they stay ``None`` — dangerous commands are then denied by ``prompt_dangerous_approval`` and the gateway approval queue blocks. Nc34K|]\}}||fyw)N).0gettersetters r z.propagate_context_to_thread../sR&&(+Rsz0Could not capture parent approval/sudo callbacksTexc_infoc:fd}j|S)NciS D]\}}| || i D] \}}|dS#t$rtjddY>wxYw#t$rtjddYSwxYw# D] \}}|dw#t$rtjddYwwxYwxYw)NzaFailed to install propagated approval/sudo callbacks; dangerous-command approval will fail closedTr z2Failed to clear propagated approval/sudo callbacks) Exceptionloggerdebug)rcb_cbargsinstallskwargstargets r_innerz._runner.._inner4s t.v.. ["*#JFB~r #  0t.v.0'/% t % [ KUY[ [!0LL!U*.!000'/% t % 0LL!U*.!00sS ? ?B A% A"!A"% BB C B C CCCC)run)r)r+r-ctxr*r,s`` r_runnerz,propagate_context_to_thread.._runner3s 0(wwvr) contextvars copy_contexttuplerr$r%r&)r,r0r/r*s` @@rpropagate_context_to_threadr4$sa  " " $CHXR-/RR. N5 X GRV WXs> A! A!)r,rreturnr) __doc__ __future__rr1loggingtypingr getLogger__name__r%rr4rrrr<s5 #   8 $ \&r