+ lHj5Rt^RIt^RIt^RIt^RIt^RIHtHt^RIH t ^RI H t H t ]P!R4t!RR4tRR ltR R ltR R ltRRltRRltRR/RRlltR#)u_Blocking gateway approval wait for :mod:`tools.approval`. Mirrors the CLI's synchronous ``input()`` flow: the agent thread enqueues a pending approval, the gateway notifies the user, and the thread blocks until ``/approve`` / ``/deny`` resolves it or the approval timeout elapses. Multiple threads (parallel subagents, execute_code RPC handlers) can block concurrently — each gets its own ``threading.Event``; ``/approve`` resolves the oldest, ``/approve all`` every pending entry. Queue state (``_gateway_queues``, ``_lock``) is owned by ``tools.approval`` and reached through that module at call time. N)get_interrupt_reasonis_interrupted)approval_context)activity_heartbeathuman_wait_windowztools.approvalc:a]tRt^toRtRtV3RlRltRtVtR#)_ApprovalEntryz@One pending dangerous-command approval inside a gateway session.c <V^8dQhRS[/#)data)dict)format __classdict__s"@/home/ubuntu/.hermes/hermes-agent/tools/approval_gateway_wait.py __annotate___ApprovalEntry.__annotate__sTc \P!4Vn\V4VnVPP R\ P!4P4RVn RVn RVn RVn RVn RVnR#) request_idFN) threadingEventeventr r setdefaultuuiduuid4hex acknowledgedsettleresultreason cancelledexpired)selfr s&&r__init___ApprovalEntry.__init__sj__& J  \4::<+;+;<! "& "& &* r)rr r rr!rrrN) __name__ __module__ __qualname____firstlineno____doc__ __slots__r#__static_attributes____classdictcell__)rs@rrrsJgIrrc\V^8dQhR\PR\R\R\/#)r r session_key interrupt_logreturn)rrstr)r s"rrr/s-ySCTWrc\P!4\\P!4^4,p\ R4p\ V4;_uu_4\4'd!\PW!4RRR4R#V\P!4, pV^8:d RRR4R#VP\RV4R7'd RRR4R#V!4K +'giR#;i)uWait on *event* until it fires, the turn is interrupted, or approvals.timeout elapses; returns ``"set"`` | ``"interrupted"`` | ``"timeout"``. Polls in ~1s slices so activity heartbeats reach the agent's inactivity tracker every ~10s — otherwise the gateway watchdog kills the agent while the user is still responding (mirrors ``_wait_for_process()`` cadence). The loop is recorded as human-wait time so the concurrent batch deadline excludes it. Any interrupt (/stop, inactivity timeout, delegation teardown) ends the wait fail-closed: the command does not run. Who caused it is read from the per-thread interrupt-cause channel (``get_interrupt_reason()``, a trusted fixed category), never inferred from message text, so the caller can report a withdrawn prompt without inventing a user refusal.zwaiting for user approvalN interruptedtimeoutg?)r4set) time monotonicmax_ctx_get_approval_timeoutrrrloggerinfowaitmin)rr.r/deadline heartbeat remainings&&$ r _poll_eventrB/s~~#d&@&@&BA"FFH"#>?I ; ' ' M7$ ( '!4>>#33IA~  ( 'zz#c9"5z66 ( ' K ( ' 's(C. $C.8#C.% C.. C? c>V^8dQhR\R\R,/#r stater0Nr1)r s"rrrNs   d rcVR8Xd\4;'gR#VR8Xd%VPfVP;'gR#R#)umWhy the wait ended with nobody answering: the turn was interrupted (cause from the per-thread channel — a user /stop or a parent's delegation teardown), the entry was withdrawn with a stamped cause (leader interrupted, session torn down), or the turn ended under the prompt (notifier unregistered, result never set). ``None`` for a real answer or a plain timeout.r3zturn interruptedr5Nz-the turn ended before the prompt was answered)rrr )rEentrys&&r _cancel_causerINsD  #%;;);; ~%,,.QQ"QQ rcVV^8dQhR\R\R\R,R\/#)r payloadresolvedchoiceNr0)r boolr1)r s"rrr[s3OOTOTO3:OSWOrc b\P!R/VBR\WV4/BVBRVRVRV/VC#)zFire the post hook and build the decision dict. Unresolved (timeout) and a None choice both mean the user never answered; ``cancelled`` carries the cause when the prompt was withdrawn rather than answered.rMrLrpost_approval_response)r9_fire_approval_hook _hook_choice)rKrLrMrextras&&&&,r_finishrU[sA xxV^hmInxrwx (FHf N NNrcVV^8dQhR\R\R,R\R\/#)r rLrMNrTr0)rNr1r )r s"rrrcs,<<4<t3/TBuuRRR4# +'giEL<;i \(d\p\*P-RT4T !R4\P"!R!/TBRR/BRT nRRRRRR /uRp?uuRRR4#Rp?ii;i +'giR#;i)"aEnqueue *approval_data*, notify the user, and block until resolved or timed out. Shared by the terminal command guard, the execute_code guard, the plugin escalation gate, and MCP elicitation. Returns ``{"resolved", "choice", "reason"}`` or ``{"resolved": False, "choice": None, "notify_failed": True}`` when the notify callback raised. Persisting the choice and building the tool-facing result stay with the caller. Identical concurrent approvals (same command text + pattern-key set) are coalesced: parallel tool calls would otherwise fire N identical prompts the user must /approve N times while the agent sits wedged. Followers adopt the leader's ``session``/``always``/``deny``/timeout; a ``once`` covers only the leader, so the followers fall through to ONE fresh prompt they coalesce on.)approval)approval_publishedpreparing_terminal_approvalregister_prepared_approval pattern_keyrfcommand description pattern_keysr.recV^8dQhRR/#)r r0N)r s"rr-_await_gateway_decision..__annotate__sLLdLrcp<S!SS4SPPS.4PS4R#)N)_gateway_queuesrappend) _approvalrHrmr.sr_enqueue)_await_gateway_decision.._enqueues.";6!!,,["=DDUKrTNc3<"TFmpVPPR4SPR48XgK4\VPPR4;'g.4S8XgKiVxKo R#5i)rprrN)r rXlist).0erhkeyss& r *_await_gateway_decision..sbS*XQ"#&&**Y"7=;L;LY;W"W !#' >(B(H(Hb#IT#Q !q*Xs1A8&A8 A8. A8c>V^8dQhR\R\R,/#rDrF)r s"rrrus!!3!3:!rcf<SP;_uu_4SPpSPPS.4pSV9dVP S4V'gSPP SR4SP RupSnVf:VR 9d3VR8HSnVR8XdRSnSPP4RRR4XeVR8Xd XeRMRpMTpV!V4X#X# +'giL3;i \d\PRR R 7X#i;i) aLeave the queue and return the choice committed so far. Reading ``entry.result`` and removing the entry are one critical section under the approval lock: ``resolve_gateway_approval`` commits under the same lock, so a choice that landed after the deadline check but before this removal is still ours to honour, and one arriving later finds no entry (the client is told nothing was pending instead of being acked "ok" while the agent denies).Nr4 notify_failedz*the approval prompt could not be deliveredr5rLsession_closedzapproval settle hook failedT)exc_info)r4r)_lockrrwrXremovepoprr!r rr5 Exceptionr;debug)rErMqueuerrryrHr.s& r _drop_entry,_await_gateway_decision.._drop_entrys ___\\F--11+rBE~ U#))--k4@#(<< FEL~%+G"G!& 2 O+&REO !  ~'-'9?O Kv v 7_2 K :T J  Ks%AC7A-C7+D 7 D "D0/D0)human_input_requestrj)promptr.z"Gateway approval notify failed: %srrMrLFu;Approval wait interrupted — returning deny for session %sr]r3r^r4r r`rP) toolsrjagent.terminal_approval_batchrkrlrmrXr9gateway_approval_surfacer}rrnextrwrdtools.human_input_hooksrrRr r rr;warningoutcomerBrrIr r5rSrUr)r. notify_cbrhrerkrl primary_keyrKrzrcadoptedrrhumanexcrEr rMrLrTryrHrrmsf&f$ @@@@r_await_gateway_decisionrs,yy##M26K)//1=$$Y3}((;{]..~ }MN{Iw G  !!.177R 8D = )ELL  ___F.00S)*C*C*G*G UW*XSTXZ~ _  *+vwG  N!!F< Z 0BP[ \ \`e   C7C N d5::& '  EKK*gi!%/ M !'EO KKOO U# M !FI%;;t);,5i(2$Xvu= w&%,,H%H= ] \c__p N NN? E  (  $ $ a aQ` a+EMxM M ] \ N ] \ \sWA I'<K$"I;6A(K$ K$,0K$' I8 ; K!AK K! K$K!!K$$ K5 )r)loggingrr6rtools.interruptrrrrr9tools.approval_human_waitrr getLoggerr;rrBrIrUrSrdrrtrrrso  @*K   + ,,> O<h>uI`iuIuIr