+ iHj'ta0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI H t H t ^RI H t ^RIHt^RIHt^RIHtHt]P*!]4t] !RR 7!R R 44t]].]3,t] !R RR 7tR]R&]!^4t0R3mtRtRt Rt!]PD!R]PF4t$]PD!R]PF4t%RRlt&RRlt'RRlt(RRlt)RRlt*RR lt+R!R"lt,R#R$lt-R4]*R5]+R6]-/t.R%R&lt/R'R(lt0R7R)R*llt1R+R,lt2R-R.lt3R/R0lt4R8R1R2llt5R#)9aPre-execution ACP edit approval helpers. Intentionally isolated from the generic tool registry: ACP binds an edit approval requester in a ContextVar for the duration of one ACP agent run; CLI, gateway, and other sessions leave it unset and therefore bypass this guard. ) annotationsN) ContextVarToken) dataclass)count)Path)AnyCallableT)frozenc\]tRt^t$RtR]R&R]R&R]R&R]R&R]R &R tR ]R &R tR #) EditProposalz?A proposed single-file edit that can be shown to an ACP client.str tool_namepath str | Noneold_textnew_textdict[str, Any] argumentsztuple[str, ...]pathsN)__name__ __module__ __qualname____firstlineno____doc____annotations__r__static_attributes__r>/home/ubuntu/.hermes/hermes-agent/acp_adapter/edit_approval.pyr r s,IN IM E?rr ACP_EDIT_APPROVAL_REQUESTER)defaultz(ContextVar[EditApprovalRequester | None]_EDIT_APPROVAL_REQUESTERaskworkspace_sessionsessionz/^\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)$z+^\*\*\*\s+Move\s+File:\s*(.+?)\s*->\s*(.+)$c V^8dQhRRRR/#) requesterzEditApprovalRequester | Nonereturnrr)formats"r __annotate__r+5s33+G3E3rc,\PV4#)zLlLrc \V4pVPR4VPR4r2VeVf \R4h\V4pVf\RV 24h^RIHpV!V\ V4\ V4\VPRR444wrgrV 'gV^8Xd\T ;'gRV 24h\RWV\V44#) old_string new_stringz"old_string and new_string requiredzFailed to read file: )fuzzy_find_and_replace replace_allFz'Could not find match for old_string in patch) rHrErFr@tools.fuzzy_matchrTr boolr rN) rrrRrSrrTr match_count _strategyerrors & r_proposal_for_patch_replacer\Xs ) $D&]]<8)-- :U Z/=>>#D)H07888.D#j/3z?D}V[9\4]/_+H9 q RR$KD6"RSS 4 ? KKrc V^8dQhRRRR/#)r' patch_bodyr r)z list[str]r)r*s"rr+r+js####rc<a\PV4Uu.uF!qP^4P4NK# pp\PV4FoVP V3RlR44K VUu.uFq3'gK VNK up#uupiuupi)c3b<"TF$pSPV4P4xK& R#5iN)groupstrip).0imatchs& r +_extract_v4a_patch_paths..ms%)>z)J K)JAWWQZ   )JE K&&z2 3FY3rcVR8XdVPRR4MRp\PW34pV'd V!V4#R#)z:Return an edit proposal for supported file mutation calls.rVmoder7N)rE_PROPOSAL_BUILDERS)rrrzbuilders&& rbuild_edit_proposalr}s@/8G/C9== +D $$i%67G!(79 2d2rc V^8dQhRRRR/#)r'rr r)rXr)r*s"rr+r+sgg#g$grc\V4P4PUu0uFqP4kK pp\ VRR0,4;'g+\V4P P4\ 9#uupi)z.gitz.ssh)rr:partslowerrXnameSENSITIVE_AUTO_APPROVE_NAMES)rpartlowereds& r_is_sensitive_auto_approve_pathrsi(,T (=(=(?(E(EF(Ezz|(EGF 66** + f ftDz/D/D/FJf/ffGsBc(V^8dQhRRRRRRRR/#) r'proposalr policyr cwdrr)rXr)r*s"rr+r+s)|Sz]arc aa\T;'g\4P4pVP;'gVP3pV\8Xg;\ ;QJdRV4F 'gK RM RM !RV44'dR#VUu.uF,p\ V4P4PRR7NK. ppV\8XdR#V\8Xd\ \P!44PRR7oV'd*\ V4P4PRR7MRo\;QJd VV3RlV4F 'dK R# R#!VV3RlV44#R#uupi)zReturn whether an ACP edit proposal may bypass the prompt for this session. Session-scoped and conservative: sensitive paths still ask under autonomous policies.c38"TFp\V4xK R#5irb)r)rer?s& rrh+should_auto_approve_edit..s([UZPQ)H)K)KUZsTF)strictNc3<"TF;pVPS4;'gSRJ;'dVPS4xK= R#5irb)is_relative_to)rertmpwss& rrhrsF"     $ T T4)S)SD>S>S>rc6\P!RV/RR7#)r[F) ensure_ascii)jsondumps)rs&r_deniedrs ::w(u ==rc$V^8dQhRRRRRR/#)r'rr rrr)rr)r*s"rr+r+s&gg3g>gjgrc\P4pVfR#\W4pTfR#\T!T44pT'dR#\ R4# \d0p\P RY4\ RT R24uRp?#Rp?ii;i \d#p\P RT4RpRp?LzRp?ii;i)zRun ACP edit approval if bound. Returns a JSON tool-error string when the edit must be blocked, otherwise ``None`` so dispatch can continue. Requester exceptions deny by default.Nz5Could not build ACP edit approval proposal for %s: %sz.Edit approval denied: could not prepare diff ()z&ACP edit approval requester failed: %sFz:Edit approval denied by ACP client; file was not modified.)r"rEr} ExceptionloggerwarningrrX)rrr(rexcapproveds&& rmaybe_require_edit_approvalrs ),,.IP&y< (+,4f)e!ff PNPY_GuANOOP ?Es4 AB B$B B B B>B99B>cV^8dQhRR/#)r'rr r)r*s"rr+r+s  | rc ^RIpVPR\\4 2RVP 2RRVP VPVP VPR7.RVPRVP/R 7#) z.__annotate__sww\wdwrc <^RIHp^RIHpHpS e@S !4wrE\ WV4'd#\ PRW@P4R#V!S S S \V4V!RRR R 7V!R R R R 7.V!S4RS R7wrg\VRR4p\VRR4R8H;'d\VRR4R8H# \d\ PRRR7Li;i))PermissionOption)await_permissionresolve_permission_timeoutNz*Auto-approved ACP edit under policy %s: %sTz*ACP edit auto-approval policy check failed)exc_info allow_oncez Allow edit) option_idrrdeny reject_onceDenyzEdit approval request) tool_calloptionsrwhatroutcomeselectedr) acp.schemaracp_adapter.permissionsrrrrinforrdebugrgetattr)rrrrrrresponse _timed_outrrrrrrrs& r _requester4make_acp_edit_approval_requester.._requesters/X  * Z13 +HcBBKK LfVcVcdC 0 !4?WX`?a% Ucn   (It4w 40J>vv77T_aeCfjvCvv Z ITX Y Zs;B=="C"!C"r)rrrrrrrsffffff r make_acp_edit_approval_requesterrsww, r>id_rsa id_ed25519.env .env.local.env.production)rMN)rVr7)rVrVrb)NNN)6__conditional_annotations__r __future__rasynciorloggingrer contextvarsrr dataclassesr itertoolsrpathlibrtypingrr getLoggerrrr rXrr"rrrrrrcompile MULTILINErjrlr.r4r@rHrOr\rorwr{r}rrrrrr)rs@rrsA#  )!   8 $ $     !,!56EOPmw{E|B|(`, zzLbll[ zzH",,W 3 * -gL$#&24HJe/ 3g 0>g. r