+ lHjRt^RIt^RIHtHtHt^RIHt]P!] 4t ]]] .]3,,t RRlt RRRRR/R R llltR R ltR RltRR/RRlltRRltRRltR#)aSession ``/yolo``: the one toggle / restore / carry contract every surface calls. The bypass itself is ``tools.approval``'s in-memory per-key set, so every process starts with it empty. Each surface persists it where its session identity lives: CLI, TUI and Desktop on the session row (``model_config.yolo_mode``), the messaging gateway on the routing entry, whose key outlives compression rotations; sessions the gateway owns for CLI/TUI/Desktop clients (``config.set key=yolo``) and their managed workers use that same routing entry. The surface hands its writer in as ``persist(enabled)``; everything else is decided here, so the CLI ``/yolo``, the TUI Shift+Tab, the Desktop zap and a Telegram ``/yolo`` behave the same. N)AnyCallableOptional)approvalc@V^8dQhR\R\R\RR/#)persistenabled session_keyreturnN)Persistboolstr)formats"8/home/ubuntu/.hermes/hermes-agent/tools/approval_yolo.py __annotate__rs.hhghh3h4hcxVfR#V!V4R# \d\PRYRR7R#i;i)Nz(failed to persist session yolo=%s for %sT)exc_info) Exceptionloggerwarning)rr r s&&&r_persistrs=h hA7bfghs #99 persistedFrc jV^8dQhR\R\\,R\R\R\/#)rr r rrr )rrr r )rs"rrrs6  S 8D> X\ !( 48 rcVf&T;'g\P!V4'*p\W1V4V'd\PM\P!V4V#)aAFlip (``enabled=None``) or set the bypass for *session_key*; returns the new state. *persisted* is the stored flag: after a restart only it is set and the user still sees ON, so a toggle turns it OFF. The write runs BEFORE the live flip, so a turn restoring in between never revives a bypass that is being switched off. )ris_session_yolo_enabledrenable_session_yolodisable_session_yolo)r r rrs&&$$rtoggle_session_yolorsO QQH$D$D[$QR W{+%,X!!(2O2OOQ\] Nrc<V^8dQhR\R\R\/#)rr rr )rr )rs"rrr.s!  c d t rcV'd;V'd3\P'g\P!V4'dR#\P!V4R#)aRe-arm a persisted bypass in a fresh process; True when this call turned it on. Key it on the id approvals are checked under (the stored session id / routing key), never a transport-local id. Skipped under the frozen process ``--yolo``, which already bypasses everything. FT)r_YOLO_MODE_FROZENrr)r rs&&rrestore_session_yolor#.s9 yH,F,F,F// <<   - rc(V^8dQhR\RR/#)rr r Nr)rs"rrr;s . .3 .4 .rcXV'd\P'dR#\P;_uu_4V\P9d RRR4R#\PP V4RRR4\P !V4R# +'giL(;i)a%Seed a gateway-owned session's launch ``--yolo`` policy once per session boundary. Called every turn of such a route; only the first call (or the first after ``clear_session``) arms it, so a later ``/yolo`` off sticks instead of lasting one turn. Skipped under the frozen process ``--yolo``. N)rr"_lock_launch_yolo_appliedaddr)r s&rapply_launch_yolor*;si (444  (77 7   %%))+6    - sBB B) launchcVV^8dQhR\R\\,R\RR/#)rr rr+r N)rrr )rs"rrrJs4cccchtncQUcbfcrcV'gR#VfV'd \V4R#\P;_uu_4V\P9d RRR4R#\PP V4V'd\P PM\P P !V4RRR4R# +'giR#;i)a Restore the authoritative routing value, including OFF, before frozen launch seeding. ``persisted`` None means nobody toggled this route: the ``--yolo`` launch policy (*launch*) is seeded once per boundary instead, so an untouched entry never reads as a revocation. N)r*rr'r(r) _session_yolodiscard)r rr+s&&$rrestore_gateway_yolor0Js   k *  (77 7   %%))+6'0   # #h6L6L6T6T TVab sC&C:C C c4V^8dQhR\R\RR/#)rold_keynew_keyr Nr%)rs"rrr]s! + +3 + + +rc^RIHpV!W4V'd+V'd#W8Xg\P!V4'gR#\P!V4\P !V4R#)aRMove the live bypass when the conversation continues under a new id (compression rotation, /branch). The new row records it at creation (``with_session_yolo``), so nothing is written here. Every continuation site calls this, so it also moves the chat's MCP spend total: a rotation must not hand a chat that spent its limit a fresh budget.)transfer_sessionN)tools.mcp_tool_costsr5rrrr)r2r3r5s&& rtransfer_session_yolor7]sI 6W& 'W%7x?_?_`g?h?h   ) !!'*rchV^8dQhR\\,R\R\\,/#)r model_configr r )rdictr)rs"rrrjs*77HTN77RV7rcb\P!V4'gV#/T;'g/CRR/C#)z``model_config`` for a session row being created, carrying a live bypass. Rows are created lazily on the first turn, so this is where a toggle made before the row existed gets recorded. yolo_modeT)rr)r9r s&&rwith_session_yolor=js5  + +K 8 8 6|!!r 6K 66r)N)__doc__loggingtypingrrrtoolsr getLogger__name__rr r rrr#r*r0r7r=rrrEs**   8 $ 8TFCK( )h _d +/    .cX]c& +7r