+ lHjK ZRt^RIt^RIt^RIt^RIt^RIHtHt ^RI H t H t ^RI Ht]P!R4tR/RRRR R R/R R lllt!R R]4tRRRRRRRRRRRR/tRRRRRRRR/tRRltRRltR0RRlltR tR!R"ltR#R$ltR%R&ltR'R(ltR)RR*R+R R,/R-R.lltR#)1aSHuman prompt surfaces for :mod:`tools.approval`. The interactive CLI prompt (callback panel or ``input()`` fallback) and the operator-selected plugin approval transport. Detection, allowed scopes, persistence, timeout policy and the final authorization stay host-owned in ``tools.approval``; this module only asks and reports the answer. N)approval_contextapproval_gateway_wait)activity_heartbeathuman_wait_window)is_interruptedztools.approvalT allow_session smart_deniedFtitlecV^8dQhR\R\R\R,R\R\R\R\R,R \/#) command descriptiontimeout_secondsNallow_permanentrrr returnstrintbool)formats":/home/ubuntu/.hermes/hermes-agent/tools/approval_prompt.py __annotate__rsV""s""sUYz"/3"04"KO"&)4Z" is asking"); the default header stays the dangerous-command one. approval_callback: CLI prompt_toolkit callback ``(command, description, *, allow_permanent=True, allow_session=True, smart_denied=False) -> str``; legacy signatures keep working while both keywords hold their defaults. Returns 'once', 'session', 'always', 'deny', 'timeout', or 'cancelled'. 'timeout' means no user response — still blocked (fail-closed), but callers report "no response" rather than an explicit denial. 'cancelled' is an :class:`Unanswered` sentinel: the prompt never reached a human (callback raised, no callback under prompt_toolkit, interrupted read) and ``.cause`` says why (#22992). See #81887. Nhuman_input_requestapproval)prompt)r )_ctx_get_approval_timeouttools.human_input_hooksrr _ask_humanoutcome) r r rrapproval_callbackrrr rhumanchoices &&&&&$$$ rprompt_dangerous_approvalr&sz2446; Z 8 8ECTCVCV!+G/,=l"i i DWCV 8 8CVCV 8 8 8 8s#BA2  B2 B =B B cFaa]tRt^9toRtRtV3RlV3RlltRtVtV;t #) UnansweredzChoice ``"cancelled"`` carrying the reason nobody answered. Compares equal to the gateway's withdrawn-prompt choice so every consumer already handling ``cancelled`` fails closed without attributing a denial to the user.c <V^8dQhRS[/#)r causer)r __classdict__s"rrUnanswered.__annotate__?sCrc4<\SV`VR4pWnV#) cancelled)super__new__r*)clsr*self __class__s&& rr1Unanswered.__new__?swsK0  r)r*) __name__ __module__ __qualname____firstlineno____doc__ __slots__r1__static_attributes____classdictcell__ __classcell__)r4r,s@@rr(r(9s )Irr(ooncessessionaalwayszapproval.allowed_oncezapproval.allowed_sessionzapproval.allowed_alwaysdenyzapproval.deniedcJV^8dQhR\R\R\R,/#)r rrrNrr)rs"rrrSs% ; ; ;s ;sTz ;rcaaRR/oVV3Rlp\P!VRR7pVP4VPVR7VP 4'dR#SR,#)zFRead one answer on a daemon thread; None when the user never answered.r%c<\S4P4P4SR&R# \\3d RSR&R#i;i)r%rIN)inputstriplowerEOFErrorOSError)rresultsr get_input_read_choice..get_inputWsF "$V}224::#callback_accepts..ks'#eUdPQFFg.?.?.K.K$KUds.1T)rg signature parameters TypeError ValueErroranyvalues)callbackr^paramsrgs&& @rcallback_acceptsrrcs""8,77   e e#eU[UbUbUd#eee#eU[UbUbUd#e ee z "sBBBcV^8dQhR\R\R\R\R\R\R\R,R \/#) r r r rrrrr Nrr)rs"rrrnsYHHH#HHVZH15HEIHRUX\R\HhkHrc ^RIHpV!V4p V!V4p T;'gV'*p VeKRV/V'gRR/M/CV'dRR/M/CV'd\VR4'dRV/M/Cp V!W3/V B#^R I H pV!4e"\PR W4\ R4#R\PR&^RIHpV 'dRM V'dRMRpRV 2RV 2ppT;'g V!RV R7p\!RV RV RV!V4 R24\"P$P'4\)V!V4V4pVfw\!RV!R'/\*P,!4B,4\PP/RR4\!4\"P$P'4R#V 'dj/\0P3V!R4P5R4R 4C\0P3V!R!4P5R4R"4CP7VR"4pM'\8P7VR"4pVR#8Xd V'gR$p\!V!\:V,44V\PP/RR4\!4\"P$P'4# \dDp \P R T RR 7\ R \T 4P 24uRp ? #Rp ? ii;i \dELpi;i \<\>3do\!RX!R%4,4\ R&4u\PP/RR4\!4\"P$P'4#i;i \PP/RR4\!4\"P$P'4i;i)(redact_sensitive_textNrrFrTr zApproval callback failed: %sexc_infozthe approval callback failed: )get_app_or_nonezDangerous-command approval requested on a thread with no approval callback while prompt_toolkit is active; failing closed to avoid stdin deadlock. command=%r description=%rzzno approval callback is registered on this thread while prompt_toolkit owns the terminal, so the prompt could not be shown1HERMES_SPINNER_PAUSE)t smart_denylongshortzapproval.prompt_zapproval.choose_zapproval.dangerous_header)r z z z  rUzapproval.smart_deny_once_inputs,r@zapproval.smart_deny_deny_inputsrErDrBzapproval.cancelledz5the prompt was interrupted before an answer was given)zapproval.timeout) agent.redactrwrr Exceptionloggererrorr(typer6"prompt_toolkit.application.currentrzwarningosenviron agent.i18nr}printsysstdoutflushr\rapproval_timeout_notice_kwargspopdictfromkeyssplitget_CLI_CHOICE_ALIASES_CLI_CHOICE_I18NrNKeyboardInterrupt)r r rrr#rrr rwdisplay_commanddisplay_description once_onlycallback_kwargserzr}shape prompt_keymenu_keyheaderr%decisions&&&&&&&& rr!r!ns}3+G4O/ <11M 1I$ S0/wBO?E":UWw4"8bw7<@PQbdk@l@l7E"2rtwO%_]_] ] G   ( NNPQX gOP P )*-BJJ%& ) vg!1%9=MeW;UH YY!7EXY VH)ak]"> ? a m_= > $W1T1T1VWW X -t4  ! $--*K(L(R(RSV(WY_`--*K(L(R(RSV(WY_`#ff- +..vv>H8#O$ a *+, -t4  m S LL7TL J >tAw?O?O>PQR R S*    6 ' (S dQ+,,-QRR -t4   S -t4  s J9 J9 J9!J97/L <LL+BL;LB LL9 L8L<LL LL4NNNNA O(c.^RIHpHpV!4V!4#)zCLazy plugin-manager seam used by tests and early tool-only imports.)discover_pluginsget_plugin_manager)hermes_cli.pluginsrr)r _get_managers rrrsW >rc0V^8dQhR\R\/#)r namer)rr)rs"rrrshh3hdhrc RRRVRVRVRV/#)zVResult shape of :func:`_present_with_selected_transport` once a transport is selected.selectedTr%failurefallbackr)rr%rrs&&&&r_attemptrs h 7JPXZ`bf ggrcV^8dQhR\R\R\R\\,R\R\R\R\R \/ #) r r r pattern_key pattern_keys session_keysurfacerrr)rlistrr)rs"rrrsa6C6C6C36CUX6C3796CKN6CY\6C486CKO6CTX6Crc \P!4wrVR8XdRR/#\4PV4p V f%\ P RV4\VRRV 4#^R IH p ^R I H p H p \P!4pV PV !VR R 7V !VR R 7V\V4WEVW~R 7 p\!TP"TP$T\'T4TRT 2TP(TP*R7p\P,!R/TB^RIHpT!RTP"TR7;_uu_4p\3T4;_uu_4T !T P4Y\7R4\8R7pTP:f TP<MRTP: 2TnRRR4RRR4\P,!R/TBRXP>/B\TXP<TP:T 4# \d\ P RT4Rp ELi;i \d'\ P R4\TRRR4u#i;i +'giL;i +'giL;i)aEPresent through an explicitly selected plugin transport, if any. A selected transport replaces every built-in prompt surface; detection, allowed scopes, persistence, timeout, and final authorization stay host-owned. A failed transport reaches a built-in surface only under the explicit ``transport_fallback: builtin`` opt-in.builtinrFz0Could not resolve selected approval transport %rNz-Selected approval transport %r is unavailablerE unavailablerv)ApprovalRequestinvoke_approval_transportT)force) r r rrrrrrrz0Could not build redacted plugin approval requestrz transport:)r r rrrr request_idrequest_digestrr)rrz%waiting for plugin approval transport)ron_pollr transport_r%pre_approval_requestpost_approval_response) r_get_approval_transport_configrget_approval_transportrrrrrrwhermes_cli.approval_transportrrrcreatetuplerr r rrdigest_fire_approval_hookr rrpresentrrrr%r")r r rrrrrrrr registeredrwrrrrequest hook_kwargsrr$rPs$$$$$$$$ r _present_with_selected_transportrs%88:ND yE""')@@F FMfmX>>56\446!(()'>-kFT_|,+fs+ ) W-@-@k,'[JW[V\J]%%gnnK  C{C; Z[ Y Y]b k * **   &'NO)  *0)? zRXR`R`QaEb + Z [[U]][ D&-- BBQ I4P & 5 IJfgt44 5 + * Z YsIG6&AH :I'AI I'6#HH .II I$ I'' I7 c<V^8dQhR\R\R\/#)r attemptrr )rr)rs"rrrs!tSsrcVPR4'gR#VPR4pV'gVPR4R3#VPR4R8Xd)\PRVPR4V4R#^R IHpVP \ P!44pRVPR V R V 2WR V 2R 73#)aInterpret a ``_present_with_selected_transport`` attempt into ``(choice, denied_result)``: both None when the built-in surfaces should run (no transport selected, or a failure with the explicit builtin fallback); a denied result for any other failure; else the user's choice.rNrr%rrzBApproval transport %r failed (%s); using explicit builtin fallbackrrz-BLOCKED: Selected approval transport failed (zz); the user has NOT consented to this action. Do NOT retry this command or attempt the same outcome through another route.r)rr r")NN) rrrtoolsr_denial_breaker_addendumrget_current_session_key_denied)rrr r_abreaker_addendums&$$ r_transport_choicers ;;z " "kk)$G {{8$d**{{:)+[{{6*G 5$2243O3O3QR  7yA::J9K M JwiBX  rc0V^8dQhR\R\/#)r unresolvedrr+)rs"rrrsKKKKrc*VR9dR#VR9dV#R#)zXMap an approval choice to an elicitation verdict; *unresolved* is the no-answer outcome.acceptdecline)r@rBrD)rUr/r)r%rs&&r_consentrs! ..#;;:JJrrrzmcp-elicitationzConfirm this action?c nV^8dQhR\R\R\R,R\R\R\/#)r messager rNrr rrG)rs"rrrsFJ&J&J&3J&14tJ&),J&ILJ&jmJ&rc ^RIHp\P!4p\P!4'dR#\P!4R8H;'d=\P!4'*;'d\P!4'*p\P!4'g T'dTPT4p T f\ P RT4R#\P!YiRTRTR R R R ./TR 7p T PR4'dR#T PR4'dT PR4'dR#\!T PR4R4#\P"!4'd\ P%RT4R#\'YR R .YcR7p \P(!R/T BRp ^RIHp \/YTRTT !4R7pTp \P(!R/T BRT /B\!TR4# \d"p\ P RT4Rp?R#Rp?ii;i \d$p\ PR TRR7Rp?R#Rp?ii;i \d>p\ PRTRR7Rp?\P(!R/T BRT /BR#Rp?ii;i \P(!R/T BRT /Bi;i)aRoute an MCP elicitation request to the surface owning the active session: gateway sessions through ``_await_gateway_decision``, CLI/TUI through ``prompt_dangerous_approval``. Always fails closed: a missing notify_cb in a gateway session, timeouts, and exceptions map to ``"decline"`` so a server treats them as "user did not approve" rather than retrying or hanging. Returns ``"accept" | "decline" | "cancel"``.rz.Elicitation consent: session lookup failed: %sNr api_serveru]Elicitation requested in gateway session %s but no notify_cb is registered — failing closedr r rmcp_elicitationr)rz'Elicitation gateway dispatch failed: %sTrx notify_failedresolvedr/cancelr%zEElicitation consent (%s) declined: no user can answer in this session)r r rrrr)_get_approval_callbackF)rrr r#z!Elicitation CLI prompt failed: %srr)rrrrrrr!_is_single_query_approval_context_get_session_platform_is_cron_approval_context_is_gateway_approval_context_gateway_notify_cb_gw_await_gateway_decisionrrr_no_user_can_answerinforrtools.terminal_toolrr&)rr rrr rrexcapi_run_context notify_cbrr hook_choicerr%s&&$$$ rrequest_elicitation_consentrs%224  --// ""$ 4 9 9..0 0 9 9668 8  ((**o))+6   NNHIT V 22G]K)68I)7:K9L)NW^`H << ( (||J''8<< +D+D X. :: !! []dewM^%6$7[cKC{CK ^>+7Q`;@=S=UW   ][]Q\] FH %%} GM8  LLBCRVL W :  8# M   ][]Q\]    ][]Q\]sYH '"H< I- H9H44H9< I*I%%I*- J58J0J80J55J88K)NTNra)r:loggingrrrVrrrrrtools.approval_human_waitrrtools.interruptr getLoggerrr&rr(rrr\rrr!rrrrrrrrrrs HK*   + ,"7;"RW"37""J  Iy8X # ) '   ; fHVh 6Cr0KJ&>BJ&/@J&OeJ&J&r