gemcode 0.4.24__py3-none-any.whl → 0.4.26__py3-none-any.whl

gemcode/web/hitl_bridge.py

@@ -1,4 +1,10 @@
-"""File-based HITL approval bridge for web chat (subprocess-safe)."""
+"""File-based HITL approval bridge for web chat (subprocess-safe).
+
+Chat SSE runs in a ``gemcode.web.sse_adapter`` subprocess while
+``POST /api/chat/approve`` is handled by the parent ``gemcode serve`` process.
+In-memory waiter sets therefore cannot detect “live” approvals across that
+boundary — use ``*.waiting`` marker files on the shared approval dir instead.
+"""
 
 from __future__ import annotations
 
@@ -17,22 +23,64 @@ def _approval_dir() -> Path:
   return Path.home() / ".gemcode" / "web_approvals"
 _DEFAULT_TIMEOUT_S = float(os.environ.get("GEMCODE_WEB_HITL_TIMEOUT_S", "3600"))
 _POLL_INTERVAL_S = 0.25
-# approval_ids currently blocked in wait_for_web_approval (same process)
+# Same-process hints only (parent server never shares these with sse_adapter).
 _active_waiters: set[str] = set()
-# emitted to the UI but wait_for_web_approval not started yet (preflight)
 _pending_approval_ids: set[str] = set()
 
 
+def _safe_id(approval_id: str) -> str:
+  return "".join(c if c.isalnum() or c in "-_:" else "_" for c in approval_id)
+
+
+def _approval_path(approval_id: str) -> Path:
+  return _approval_dir() / f"{_safe_id(approval_id)}.json"
+
+
+def _waiting_path(approval_id: str) -> Path:
+  """Marker written by the SSE subprocess while an approval is expected/active."""
+  return _approval_dir() / f"{_safe_id(approval_id)}.waiting"
+
+
+def _is_live_approval(approval_id: str) -> bool:
+  """True if a chat turn is still waiting for this approval (cross-process safe)."""
+  aid = (approval_id or "").strip()
+  if not aid:
+    return False
+  if aid in _active_waiters or aid in _pending_approval_ids:
+    return True
+  try:
+    path = _waiting_path(aid)
+    if not path.is_file():
+      return False
+    # Heartbeats refresh mtime; stale markers mean the SSE subprocess died.
+    age_s = time.time() - path.stat().st_mtime
+    return age_s < 90.0
+  except OSError:
+    return False
+
+
 def register_pending_approval(approval_id: str) -> None:
   """Mark an approval as expected so early UI clicks are not reported as late."""
   aid = (approval_id or "").strip()
-  if aid:
-    _pending_approval_ids.add(aid)
+  if not aid:
+    return
+  _pending_approval_ids.add(aid)
+  _touch_waiting(aid)
 
 
-def _approval_path(approval_id: str) -> Path:
-  safe = "".join(c if c.isalnum() or c in "-_:" else "_" for c in approval_id)
-  return _approval_dir() / f"{safe}.json"
+def _touch_waiting(approval_id: str) -> None:
+  try:
+    _approval_dir().mkdir(parents=True, exist_ok=True)
+    _waiting_path(approval_id).write_text(f"{time.time():.3f}\n", encoding="utf-8")
+  except OSError:
+    pass
+
+
+def _clear_waiting_marker(approval_id: str) -> None:
+  try:
+    _waiting_path(approval_id).unlink(missing_ok=True)
+  except OSError:
+    pass
 
 
 def _read_approval_file(path: Path) -> bool | None:
@@ -60,14 +108,16 @@ def resolve_web_approval(approval_id: str, *, confirmed: bool) -> dict[str, Any]
     return {"ok": False, "error": "approval_id is required"}
   _approval_dir().mkdir(parents=True, exist_ok=True)
   path = _approval_path(approval_id)
+  # Detect live wait BEFORE writing; marker is owned by the SSE subprocess.
+  live = _is_live_approval(approval_id)
   payload = {"confirmed": bool(confirmed), "resolved_ms": int(time.time() * 1000)}
   path.write_text(json.dumps(payload), encoding="utf-8")
-  late = approval_id not in _active_waiters and approval_id not in _pending_approval_ids
   return {
     "ok": True,
     "approval_id": approval_id,
     "confirmed": bool(confirmed),
-    "late": late,
+    # late = no waiter — UI may start a recovery turn. Never true while SSE waits.
+    "late": not live,
   }
 
 
@@ -81,14 +131,18 @@ async def wait_for_web_approval(
   """Block until the user approves/denies or timeout (deny on timeout)."""
   _approval_dir().mkdir(parents=True, exist_ok=True)
   path = _approval_path(approval_id)
+  register_pending_approval(approval_id)
 
   # User may have approved before we started waiting (preflight UI is immediate).
   existing = _read_approval_file(path)
   if existing is not None:
+    _pending_approval_ids.discard(approval_id)
+    _clear_waiting_marker(approval_id)
     return existing
 
   _pending_approval_ids.discard(approval_id)
   _active_waiters.add(approval_id)
+  _touch_waiting(approval_id)
   try:
     deadline = time.monotonic() + max(1.0, timeout_s)
     next_hb = time.monotonic()
@@ -98,17 +152,20 @@ async def wait_for_web_approval(
         if result is not None:
           return result
       now = time.monotonic()
-      if heartbeat is not None and now >= next_hb:
-        try:
-          heartbeat()
-        except Exception:
-          pass
+      if now >= next_hb:
+        _touch_waiting(approval_id)
+        if heartbeat is not None:
+          try:
+            heartbeat()
+          except Exception:
+            pass
         next_hb = now + max(5.0, heartbeat_s)
       await asyncio.sleep(_POLL_INTERVAL_S)
     return False
   finally:
     _active_waiters.discard(approval_id)
     _pending_approval_ids.discard(approval_id)
+    _clear_waiting_marker(approval_id)
 
 
 def new_approval_id(session_id: str, fc_id: str | None) -> str:

gemcode/web/sse_adapter.py

@@ -489,17 +489,33 @@ def _inject_web_code_context(cfg: GemCodeConfig, prompt: str, req: dict[str, Any
         "or type @path — unless they mean the whole project (see below)."
       )
 
-  lines.extend(
-    [
-      'When the user says "this file", "the current one", or similar, use the active / @-referenced file above.',
-      'When they ask to analyze the whole codebase, project, repo, or "all files", start with `repo_map` and '
-      '`list_directory` on `.` — do not ask which file first.',
-      "**Web UI permissions** — shell and mutating tools pause for an **inline Yes/No card in the chat** "
-      "(above the composer). Do **not** tell the user to open a dialog, popup, terminal, or separate Approve button — "
-      "just wait; the UI card is the approval UI. After they tap Yes or No, continue automatically.",
-      "When Auto-approve / Super mode is on, tools run without asking — do not mention approvals.",
-    ]
+  # Permission mode for THIS turn (must match actual HITL / auto-approve behavior).
+  lines.append(
+    'When the user says "this file", "the current one", or similar, use the active / @-referenced file above.'
   )
+  lines.append(
+    'When they ask to analyze the whole codebase, project, repo, or "all files", start with `repo_map` and '
+    '`list_directory` on `.` — do not ask which file first.'
+  )
+  auto_on = bool(
+    getattr(cfg, "yes_to_all", False)
+    or getattr(cfg, "super_mode", False)
+    or not getattr(cfg, "_web_interactive_hitl", True)
+  )
+  if auto_on:
+    lines.append(
+      "**Web UI permissions — AUTO-APPROVE is ON for this turn.** "
+      "Shell and mutating tools run immediately with **no** Yes/No card. "
+      "Never mention Approve, Deny, approval prompts, dialogs, or waiting for the user — "
+      "just run tools and report what you did."
+    )
+  else:
+    lines.append(
+      "**Web UI permissions — interactive.** Shell and mutating tools pause for an "
+      "**inline Yes/No card in the chat** (also pinned above the composer). "
+      "Do **not** invent Approve/Deny dialog text or tell the user to open a popup — "
+      "wait silently; after they tap Yes or No the turn continues."
+    )
 
   if mode == "agents":
     lines.extend(
@@ -922,6 +938,7 @@ def _apply_web_permissions(cfg: GemCodeConfig, req: dict[str, Any]) -> None:
   }
   object.__setattr__(cfg, "_web_auto_approve", normalized)
 
+  # UI is source of truth for web chat — do not leave env GEMCODE_SUPER_MODE stuck on.
   super_mode = bool(perms.get("super_mode"))
   if super_mode:
     cfg.super_mode = True
@@ -931,6 +948,7 @@ def _apply_web_permissions(cfg: GemCodeConfig, req: dict[str, Any]) -> None:
     object.__setattr__(cfg, "_web_interactive_hitl", False)
     return
 
+  cfg.super_mode = False
   if all(normalized.values()):
     cfg.yes_to_all = True
     cfg.interactive_permission_ask = False
@@ -948,13 +966,33 @@ def _apply_web_permissions(cfg: GemCodeConfig, req: dict[str, Any]) -> None:
 
 
 def _configure_web_permissions(cfg: GemCodeConfig, req: dict[str, Any]) -> None:
-  """Web chat defaults to interactive Approve/Deny unless everything is auto-approved."""
+  """Web chat HITL follows the UI request, not process-level GEMCODE_SUPER_MODE.
+
+  Hosted tenant images historically set ``GEMCODE_SUPER_MODE=1`` so mesh/jobs are
+  unattended. That must not silently skip Yes/No cards when the user has
+  Auto-approve off in the web UI. Mesh workers still use
+  ``GEMCODE_MESH_WORKER_UNATTENDED`` independently.
+  """
   object.__setattr__(cfg, "_gemcode_web_sse", True)
-  _apply_web_permissions(cfg, req)
-  if not isinstance(req.get("permissions"), dict):
+
+  perms = req.get("permissions")
+  has_perms = isinstance(perms, dict)
+
+  # Clear env-applied super mode before applying the UI payload.
+  if not (has_perms and bool(perms.get("super_mode"))):
+    cfg.super_mode = False
     cfg.yes_to_all = False
     cfg.interactive_permission_ask = True
     object.__setattr__(cfg, "_web_interactive_hitl", True)
+
+  if has_perms:
+    _apply_web_permissions(cfg, req)
+  else:
+    cfg.super_mode = False
+    cfg.yes_to_all = False
+    cfg.interactive_permission_ask = True
+    object.__setattr__(cfg, "_web_interactive_hitl", True)
+
   _ensure_web_hitl(cfg)
   if os.environ.get("GEMCODE_WEB_YES_TO_ALL", "").lower() in ("1", "true", "yes", "on"):
     cfg.yes_to_all = True
@@ -963,8 +1001,9 @@ def _configure_web_permissions(cfg: GemCodeConfig, req: dict[str, Any]) -> None:
 
 
 def _ensure_web_hitl(cfg: GemCodeConfig) -> None:
-  """Web chat always uses the UI approval bridge when tools are not fully auto-approved."""
+  """Web chat uses the UI approval bridge when tools are not fully auto-approved."""
   if getattr(cfg, "yes_to_all", False) or getattr(cfg, "super_mode", False):
+    object.__setattr__(cfg, "_web_interactive_hitl", False)
     return
   cfg.interactive_permission_ask = True
   object.__setattr__(cfg, "_web_interactive_hitl", True)
@@ -1248,6 +1287,10 @@ async def run_adapter(req: dict[str, Any]) -> None:
           "model": model,
           "project_root": str(cfg.project_root),
           "workspace_mode": workspace_mode,
+          "hitl_interactive": bool(getattr(cfg, "_web_interactive_hitl", False)),
+          "auto_approve": bool(
+            getattr(cfg, "yes_to_all", False) or getattr(cfg, "super_mode", False)
+          ),
           **({"skill": resolved.skill_name} if resolved.skill_name else {}),
         }
       )

{gemcode-0.4.24.dist-info → gemcode-0.4.26.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gemcode
-Version: 0.4.24
+Version: 0.4.26
 Summary: Local-first coding agent on Google Gemini + ADK
 Author: GemCode Contributors
 License:                                  Apache License

{gemcode-0.4.24.dist-info → gemcode-0.4.26.dist-info}/RECORD

@@ -129,7 +129,7 @@ gemcode/web/chat_skills.py,sha256=VMnzKzhPZ96T-Opopbe7zJ2EUBvxrRaRMjYw4WfctuQ,40
 gemcode/web/customize_api.py,sha256=Et1HY49lleZlCBywsBg9n61KFReqTB0wGQrDmhrNEf4,24559
 gemcode/web/files_api.py,sha256=sdlSd3gj3TF_qrH2xYy70CTWMXAIzqouWe6uDkMrroo,7724
 gemcode/web/fleet_api.py,sha256=4lR7lWqpMojaAL7_c6rjjA5hMFnnUgpI1T561RvM-3w,19276
-gemcode/web/hitl_bridge.py,sha256=13ZyBNmAOjwHN1oHkJOC_JhJF60kgkrg6_02DMm4FpM,3670
+gemcode/web/hitl_bridge.py,sha256=08rzUmVDiY6eAsMXZ-oE-XLPK5gk-wAGIFxDY2QlobA,5465
 gemcode/web/preview_api.py,sha256=vz5ddD6JYAQ5h6DEa4w95FUKalw-ujvT-jusbVa-8Ak,5828
 gemcode/web/project_root.py,sha256=rMKsp2va2z1p9CI-NKzbdJq2hyKXtNzDSLyTk-tV8Ws,1936
 gemcode/web/runtime_api.py,sha256=BezPpbNnj85aXiL5r7aXGcA3FFubadY7lHtskaNPgMc,12935
@@ -137,16 +137,16 @@ gemcode/web/serve_bind.py,sha256=Q6odfJuoTw8hIn3Hq8jcLe6EvRB1_wj4klrOBjKdTiE,309
 gemcode/web/serve_state.py,sha256=wTHaZ4CGjZYOxRMlKmFUEMpFoBPnci20GLbMjxGdGG0,6265
 gemcode/web/server.py,sha256=MovOlagSzWt63AbU55lE-x28D-fQX6DsBxhzKFFU54A,27698
 gemcode/web/sessions_api.py,sha256=4qudnYLiqIbUixon1PsV8yfBf6tu6llWLc_ESTFK61g,2008
-gemcode/web/sse_adapter.py,sha256=AXxpdHJzU_C8JjYEO43jbsFj2npp73yt0uoibsPo_tI,42544
+gemcode/web/sse_adapter.py,sha256=WI0ganr1Dqp7nLjdvN-WNtmMpYhjQIKTohBuIekLv-M,44019
 gemcode/web/terminal_api.py,sha256=2FWU0XQ6CVUFW_JJiVukFPdj_sgsYa_y7IQb9brxCZw,3329
 gemcode/web/terminal_repl.py,sha256=fQt895g0qcr6VBhXfv_5b_bsC5zHT5-MO0ysBdgi2Fg,3886
 gemcode/web/ui_chat_store.py,sha256=sThUOcWC-svx-e2pt88ZazPrWelN2JbqeDicU7s5iUg,2377
 gemcode/web/web_config_api.py,sha256=1kmk1vSu5z63loddTNBHVsisiYy4CfyVIF93TYCgEqs,2264
 gemcode/web/web_sse_compat.py,sha256=9A2s-GI7El7AotJqhO263FrLwppCXXkdydZ5EiOQbao,504
 gemcode/web/workspace_panel_api.py,sha256=uZS11ovlZtc1IJDnOA776Z6IndC0WovcBbmPMnZyIHs,14122
-gemcode-0.4.24.dist-info/licenses/LICENSE,sha256=TD4524qn-W8Z07GTDnag-9jJPFutFZNB0a1WbMHPC54,8388
-gemcode-0.4.24.dist-info/METADATA,sha256=l2X_Lh-MFGwLSXS0TU7ENdkVzTExZqTntyFjUf_Bo8I,27378
-gemcode-0.4.24.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-gemcode-0.4.24.dist-info/entry_points.txt,sha256=cZdLTLDiHbks7OSUCuxCh66dCWeQdpLR8BozoqfEjV4,45
-gemcode-0.4.24.dist-info/top_level.txt,sha256=UYrjULLBY2bcgK6KI6flomJWmsbDXu7n0rvW2SWFrbo,8
-gemcode-0.4.24.dist-info/RECORD,,
+gemcode-0.4.26.dist-info/licenses/LICENSE,sha256=TD4524qn-W8Z07GTDnag-9jJPFutFZNB0a1WbMHPC54,8388
+gemcode-0.4.26.dist-info/METADATA,sha256=K16ysRvmdkDwT4s6ykdDg_gfQ5C3F1h7UVA9IqNGBqg,27378
+gemcode-0.4.26.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+gemcode-0.4.26.dist-info/entry_points.txt,sha256=cZdLTLDiHbks7OSUCuxCh66dCWeQdpLR8BozoqfEjV4,45
+gemcode-0.4.26.dist-info/top_level.txt,sha256=UYrjULLBY2bcgK6KI6flomJWmsbDXu7n0rvW2SWFrbo,8
+gemcode-0.4.26.dist-info/RECORD,,