langchain-agentx-python 2.0.0__py3-none-any.whl → 2.0.1__py3-none-any.whl

langchain_agentx/__init__.py

@@ -11,7 +11,7 @@ from langchain_agentx import create_loop_agent
 ```
 """
 
-__version__ = "2.0.0"
+__version__ = "2.0.1"
 
 from .loop import (  # noqa: F401
     create_loop_agent,

langchain_agentx/tools/bash/path_security.py

@@ -30,6 +30,26 @@ from .ast_security import BashAstAnalysis, BashWrapperStripper
 
 OperationType = Literal["read", "write", "create"]
 
+# CC pathValidation.ts GLOB_PATTERN_REGEX — read glob base-dir 校验 SSOT（非 glob.ts extractGlobBaseDirectory）
+_GLOB_PATTERN_RE = re.compile(r"[*?\[\]{}]")
+
+
+def get_glob_base_directory(path: str) -> str:
+    """从 glob pattern 提取 base 目录（对齐 CC pathValidation.ts getGlobBaseDirectory）。"""
+    match = _GLOB_PATTERN_RE.search(path)
+    if not match:
+        return path
+
+    before_glob = path[: match.start()]
+    if os.name == "nt":
+        last_sep = max(before_glob.rfind("/"), before_glob.rfind("\\"))
+    else:
+        last_sep = before_glob.rfind("/")
+    if last_sep == -1:
+        return "."
+    base = before_glob[:last_sep]
+    return base if base else "/"
+
 
 @dataclass(frozen=True)
 class BashPathTarget:
@@ -2164,6 +2184,23 @@ class BashPathSyntaxGuard:
             return True
         return False
 
+    def has_non_glob_shell_expansion(self, raw_path: str) -> bool:
+        """除 read 允许的未引号 glob 外，是否仍含需人工确认的 shell 展开语法。"""
+        stripped = raw_path.strip()
+        if not stripped:
+            return False
+
+        scanner = BashPathLexicalScanner(stripped)
+        if self._contains_parameter_like_expansion(scanner):
+            return True
+        if self._contains_unquoted_dynamic_tilde(scanner):
+            return True
+        if self._contains_unquoted_extglob(scanner):
+            return True
+        if self._contains_unquoted_brace_expansion(scanner):
+            return True
+        return False
+
     def _contains_parameter_like_expansion(self, scanner: "BashPathLexicalScanner") -> bool:
         for index, char in enumerate(scanner.text):
             if scanner.is_single(index) or scanner.is_escaped(index):
@@ -2408,34 +2445,65 @@ class BashPathSecurityAnalyzer:
                 ask_prompt=reason,
             )
 
-        syntax_reason = self._path_syntax_guard.get_manual_approval_reason(path_info)
-        if syntax_reason is not None:
-            semantic_kind = self._path_syntax_guard.get_syntax_semantic_kind(path_info)
-            metadata: dict[str, object] | None = None
-            if semantic_kind is not None:
-                metadata = {"path_syntax": {"semantic_kind": semantic_kind}}
-            return AuthorizationDecision(
-                behavior="ask",
-                message=syntax_reason,
-                policy_id="bash_path_validator",
-                ask_prompt=syntax_reason,
-                metadata=metadata,
-            )
-
         dangerous_decision = self._dangerous_path_checker.check(path_info, cwd)
         if dangerous_decision is not None:
             return dangerous_decision
 
         authorize_path = getattr(policy, "authorize_path", None)
-        if authorize_path is None:
-            return AuthorizationDecision(behavior="allow")
 
         for target in path_info.path_targets:
-            resolved_path = self._resolve_path(target.raw_path, cwd)
-            decision = authorize_path(
-                resolved_path,
-                is_write=target.operation_type in {"write", "create"},
-            )
+            raw_path = target.raw_path.strip()
+            operation_type = target.operation_type
+
+            if self._path_syntax_guard.has_non_glob_shell_expansion(raw_path):
+                if target.target_source == "redirection":
+                    reason = (
+                        "Shell expansion syntax in redirection targets requires explicit approval "
+                        "because the write path cannot be determined safely."
+                    )
+                else:
+                    reason = (
+                        "Shell expansion syntax in filesystem path arguments requires explicit approval "
+                        "because the target path cannot be determined safely."
+                    )
+                semantic_kind = self._path_syntax_guard._classify_target_semantic_kind(target)
+                metadata: dict[str, object] | None = None
+                if semantic_kind is not None:
+                    metadata = {"path_syntax": {"semantic_kind": semantic_kind}}
+                return AuthorizationDecision(
+                    behavior="ask",
+                    message=reason,
+                    policy_id="bash_path_validator",
+                    ask_prompt=reason,
+                    metadata=metadata,
+                )
+
+            if _GLOB_PATTERN_RE.search(raw_path) and operation_type in {"write", "create"}:
+                reason = (
+                    "Glob patterns are not allowed in write operations. "
+                    "Please specify an exact file path."
+                )
+                return AuthorizationDecision(
+                    behavior="ask",
+                    message=reason,
+                    policy_id="bash_path_validator",
+                    ask_prompt=reason,
+                    metadata={"path_syntax": {"semantic_kind": "wildcard"}},
+                )
+
+            if authorize_path is None:
+                continue
+
+            if _GLOB_PATTERN_RE.search(raw_path) and operation_type == "read":
+                base_path = get_glob_base_directory(raw_path)
+                resolved_path = self._resolve_path(base_path, cwd)
+                decision = authorize_path(resolved_path, is_write=False)
+            else:
+                resolved_path = self._resolve_path(raw_path, cwd)
+                decision = authorize_path(
+                    resolved_path,
+                    is_write=operation_type in {"write", "create"},
+                )
             if decision.behavior != "allow":
                 return decision
 

langchain_agentx/tools/bash/semantic_matrix.py

@@ -25,13 +25,15 @@ class BashSemanticMatrixRow:
     semantic_kind: str | None
 
 
-# CC pathValidation / bashSecurity / bashPermissions 对齐子集（L1 ask + decision_reason）
+# CC pathValidation / bashSecurity / bashPermissions 对齐子集（L1 behavior + decision_reason）
 BASH_WILDCARD_PREFIX_SEMANTIC_MATRIX: tuple[BashSemanticMatrixRow, ...] = (
-    # --- wildcard / brace / glob（path_security → bash_path_validator）---
-    BashSemanticMatrixRow("W01", "cat file*.txt", "ask", "bash_path_validator", "classifier", "wildcard"),
-    BashSemanticMatrixRow("W02", "cat file?.txt", "ask", "bash_path_validator", "classifier", "wildcard"),
-    BashSemanticMatrixRow("W03", "cat [ab].txt", "ask", "bash_path_validator", "classifier", "wildcard"),
+    # --- read glob（Phase 1：roots 内 validateGlobPattern → allow）---
+    BashSemanticMatrixRow("W01", "cat file*.txt", "allow", None, None, None),
+    BashSemanticMatrixRow("W02", "cat file?.txt", "allow", None, None, None),
+    BashSemanticMatrixRow("W03", "cat [ab].txt", "allow", None, None, None),
+    # --- brace / write glob（仍 ask；非 read glob base-dir 放行）---
     BashSemanticMatrixRow("W04", "cat src/{a,b}.txt", "ask", "bash_path_validator", "classifier", "wildcard"),
+    BashSemanticMatrixRow("W05", "touch foo*.txt", "ask", "bash_path_validator", "classifier", "wildcard"),
     # --- path expansion（$ / ~+ / ${}）---
     BashSemanticMatrixRow("E01", "cat $HOME/x", "ask", "bash_path_validator", "classifier", "path_expansion"),
     BashSemanticMatrixRow("E02", "cat ~+/file.txt", "ask", "bash_path_validator", "classifier", "path_expansion"),

langchain_agentx/tools/glob/tool.py

@@ -64,6 +64,17 @@ def _is_descendant(child: str, parent: str) -> bool:
         return False
 
 
+def _directory_listing_glob_hint(pattern: str) -> str | None:
+    """层 B：Glob 底层 rg --files 列文件不列目录名；pattern 含 ``*/`` 时提示 Agent。"""
+    if "*/" not in pattern:
+        return None
+    return (
+        "Glob lists files via ripgrep --files, not directory names. "
+        "Use pattern '**/*' with an explicit path to find files, "
+        "or Bash 'ls -d */' to list immediate subdirectory names."
+    )
+
+
 class GlobRuntimeTool(RuntimeTool):
     name: str = TOOL_NAME
     description: str = DESCRIPTION
@@ -308,11 +319,17 @@ class GlobRuntimeTool(RuntimeTool):
                     f"No files in this page (offset {result.offset}, "
                     f"{result.total_matches} total match(es))"
                 )
+            hints: list[ToolHint] | None = None
+            dir_hint = _directory_listing_glob_hint(result.pattern)
+            if dir_hint is not None and result.total_matches == 0:
+                hints = [ToolHint(message=dir_hint)]
+                meta["semantic_note"] = "glob_lists_files_not_directories"
             return ToolResultEnvelope(
                 status="ok",
                 tool_name=self.name,
                 summary=summary,
                 payload=summary,
+                hints=hints,
                 meta=meta,
             )
 

langchain_agentx/tools/grep/backend.py

@@ -60,10 +60,14 @@ def run_ripgrep_lines(
     对齐 CC ripgrep.ts：returncode 1 -> []；EAGAIN 时以 -j 1 重试一次。
     供 RipgrepBackend 与 Glob 的 rg --files 列文件共用。
 
+    SDK 补充：``subprocess cwd=search_path``。CC 隐式依赖进程 cwd≈searchDir；
+    编排布局 ``state_root≠repo`` 时须显式设 cwd，否则 Windows 上目录前缀 glob（如 ``alpha/*``）误空。
+
     若 ``cancel_event`` 非空，使用可中断子进程路径（``RgSubprocessController``），
     不再走 ``text_runner.run``（便于测试 mock 时仅覆盖无取消路径）。
     """
-    cmd = [rg_path, *args, search_path]
+    search_cwd = os.path.realpath(search_path)
+    cmd = [rg_path, *args, search_cwd]
     if cancel_event is not None:
         if cancel_event.is_set():
             raise GrepCancelledError("ripgrep cancelled before start")
@@ -72,7 +76,10 @@ def run_ripgrep_lines(
         ctrl = RgSubprocessController()
         try:
             result = ctrl.run_argv_wait_completed(
-                cmd, timeout=float(timeout), cancel_event=cancel_event
+                cmd,
+                timeout=float(timeout),
+                cancel_event=cancel_event,
+                cwd=search_cwd,
             )
         except GrepTimeoutError:
             raise
@@ -84,6 +91,7 @@ def run_ripgrep_lines(
                 cmd,
                 capture_output=True,
                 timeout=timeout,
+                cwd=search_cwd,
             )
         except subprocess.TimeoutExpired:
             raise GrepTimeoutError(f"ripgrep search timed out after {timeout}s")
@@ -312,7 +320,8 @@ class RipgrepBackend:
             multiline=multiline,
             plugin_glob_exclusions=plugin_glob_exclusions,
         )
-        cmd = [self._rg_path, *args, search_path]
+        cmd = [self._rg_path, *args, os.path.realpath(search_path)]
+        search_cwd = os.path.realpath(search_path)
         if cancel_event is not None and cancel_event.is_set():
             raise GrepCancelledError("ripgrep cancelled before start")
         try:
@@ -321,6 +330,7 @@ class RipgrepBackend:
                 stdout=subprocess.PIPE,
                 stderr=subprocess.PIPE,
                 text=True,
+                cwd=search_cwd,
             )
         except FileNotFoundError as e:
             raise GrepExecutionError(

langchain_agentx/tools/grep/rg_subprocess_controller.py

@@ -37,6 +37,7 @@ class RgSubprocessController:
         *,
         timeout: float,
         cancel_event: threading.Event | None,
+        cwd: str | None = None,
     ) -> subprocess.CompletedProcess[str]:
         """
         启动 ``argv``，在 ``timeout`` 秒内等待结束；若 ``cancel_event`` 被 set 则 terminate/kill。
@@ -55,6 +56,7 @@ class RgSubprocessController:
                 text=True,
                 encoding="utf-8",
                 errors="replace",
+                cwd=cwd,
             )
         except FileNotFoundError as e:
             raise GrepExecutionError(

{langchain_agentx_python-2.0.0.dist-info → langchain_agentx_python-2.0.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: langchain-agentx-python
-Version: 2.0.0
+Version: 2.0.1
 Summary: LangChain/LangGraph-based agent utilities for CodeBaseX.
 Author-email: GoodMood2008 <GoodMood2008@users.noreply.github.com>
 License: Apache License

{langchain_agentx_python-2.0.0.dist-info → langchain_agentx_python-2.0.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-langchain_agentx/__init__.py,sha256=NbsbOU5jFUfBXQDL1bLLkmKXGdLM9-eOdk0p7cNSPIY,1678
+langchain_agentx/__init__.py,sha256=mIitE_209ZGQxVtUqOUCj_SxLxyx1fxbhZz6VZhlo_c,1678
 langchain_agentx/command/__init__.py,sha256=Ej260S5uFQcmEtGZQG_NH7BYjHoStrpBLtGUsBTxyZk,631
 langchain_agentx/command/allowed_tools.py,sha256=TVA0VM8rm98H-QbLK_GRiX5RhEAZFxKawliMi4kk96A,3359
 langchain_agentx/command/context.py,sha256=DIGOGPBw5UGDBm0WNNJlKx1h_9rCRmcdROv4DT61Qug,731
@@ -535,7 +535,7 @@ langchain_agentx/tools/bash/models.py,sha256=Zq0O5_uXITa-iDeG-8-KtQwDq0dWxkpQq4q
 langchain_agentx/tools/bash/observability.py,sha256=tam0WCLxQ7A-dxS9VBHjBfh2t6njRekUFEV5wwN4Eo0,4267
 langchain_agentx/tools/bash/output_tracker.py,sha256=JJv_PVKEoFJljUrjlIjzlRx6GVoT19fYIOsgQnlwBgs,3373
 langchain_agentx/tools/bash/output_utils.py,sha256=WYU2vVOjo9HQKSeQ_z88KxJsrvlFm0wf7USCMvuifZ8,6638
-langchain_agentx/tools/bash/path_security.py,sha256=L7zFXoyBDYLtd2bVLIeMg-xuCkSD7-Tt2EKlvKR_ssI,94984
+langchain_agentx/tools/bash/path_security.py,sha256=6mKjXkCyQhPzsMoTITr5KhTxYE7me5bM7hhz2wTikxs,97828
 langchain_agentx/tools/bash/prompt.py,sha256=28WBRLt5G6e-OUildOFbeEyw7eL3iI8T40pEwmWVYxo,12527
 langchain_agentx/tools/bash/read_only_validation.py,sha256=rtNW6nK7sQMzR6LGc420kUd5wE30DnYX8jjuW7hUFWA,24822
 langchain_agentx/tools/bash/result_presenter.py,sha256=OkJid40AmrAsRxhY7jSaw_PgRMoIfMcj6BNXaqcryTo,14946
@@ -543,7 +543,7 @@ langchain_agentx/tools/bash/sandbox_decision.py,sha256=T_JaTfPADDcH2mRtrpKTBbIVo
 langchain_agentx/tools/bash/security.py,sha256=YM34IUvNMDskoEA-WTG7hiuziY90DAFqQngpntGOtEc,7807
 langchain_agentx/tools/bash/sed_edit_parser.py,sha256=tTDLMj5f5C4nkcf1Ykn9uMKJtEQNm3ejrKQOal2sI9s,7855
 langchain_agentx/tools/bash/sed_validation.py,sha256=HA-zWe8Wo4LbgC9x8ZMQLzkd73i4IFeay0GhNb2qM20,5704
-langchain_agentx/tools/bash/semantic_matrix.py,sha256=rWO31jB2TxOSmCAMYKe3bkQ6YOHU7pCMX0--OABP5kM,3184
+langchain_agentx/tools/bash/semantic_matrix.py,sha256=stvsudu8mGjS1JJCawMAUKabt-7co90Q8qZgi063QSw,3285
 langchain_agentx/tools/bash/semantics.py,sha256=pkf4URTulAOVL7m04Rq9JJF7z0J2mTEsGWrjyoY9r6o,5769
 langchain_agentx/tools/bash/shell_locator.py,sha256=AUnCZS8gmZurCs8rL4y0MMOS9UZimfg5rQ5At38mZKU,6296
 langchain_agentx/tools/bash/shell_quoting.py,sha256=K4JLVGwU8VpdQzfQB1o3xsq4HoCKHew1pry8hHChcoA,4498
@@ -570,12 +570,12 @@ langchain_agentx/tools/glob/pagination.py,sha256=qn3HjCpvcARgXXRqhsQQ5huibPIu9Kc
 langchain_agentx/tools/glob/prompt.py,sha256=oPEXucn9P2z01ghXEtDpGGKR3KpOp6wH8PDDYaoiN6U,686
 langchain_agentx/tools/glob/rg_list_backend.py,sha256=gTyFQE0eYHl-7LkSdah76S8bQnLCgi-6ka6jixeSI4s,5006
 langchain_agentx/tools/glob/rg_pattern.py,sha256=YOV-1gdxC52vzdAwgz27l7mzPJvVuHqpqeWhiEnWQJs,1377
-langchain_agentx/tools/glob/tool.py,sha256=WZ3GjKEYtsI9l2U60b38Hnisu9pSwnZjN9xReH-fzUM,13664
+langchain_agentx/tools/glob/tool.py,sha256=fNOUrt-YUnXXOODiHVAtS0xz9qxidFPuJ9DGRh-R1cY,14445
 langchain_agentx/tools/grep/__init__.py,sha256=AA9qa42Ap9tw6lPQkNgKzYmr4hu44eP93qVdyP-eFNU,162
-langchain_agentx/tools/grep/backend.py,sha256=2PcavYBJdI1fD1sEE93geWhycD7C-PZL-HI6oVyGPb4,13422
+langchain_agentx/tools/grep/backend.py,sha256=DSKetuS6Wcta5wrDBVFYSVDLsou0VDXXZyvdFvN1nls,13885
 langchain_agentx/tools/grep/models.py,sha256=6fTSux0COK06weQ7PWYqCGBQx60OaNtqC5q7xKtf5i0,3860
 langchain_agentx/tools/grep/prompt.py,sha256=Euo1NErphk5WHxaKXwJH-1v7joblfwEFWHIYNthKkzo,1336
-langchain_agentx/tools/grep/rg_subprocess_controller.py,sha256=EsDu13sCUu18x7H38rpJiQ6qNWrSXauqA55vCttSVEE,3999
+langchain_agentx/tools/grep/rg_subprocess_controller.py,sha256=ijMJnKPo7iEDFBz-_YipTiPusrL6OO2XbWxHUuwpMfA,4056
 langchain_agentx/tools/grep/tool.py,sha256=ngfLGdCrku_XfV_YfpoI3TyXiEqHcJ8wxcLz81mDMok,19795
 langchain_agentx/tools/plan_mode/__init__.py,sha256=wO5FX24xEB0Dx9h6bysBt1ql3wn0rjPYsg70mbl4S_0,402
 langchain_agentx/tools/plan_mode/constants.py,sha256=vBjcx9JTSOhU9jfCJ4RKnCxVQPn0HzHapouKxRf2Zns,293
@@ -751,8 +751,8 @@ langchain_agentx/workspace/root_grant_manager.py,sha256=W3gy8HTevbERbXqIgRcjzOXO
 langchain_agentx/workspace/tool_boundary.py,sha256=UDwX6swpSLsx9HNkYuuRRiV5o7ZZG_Bru2Yn0c5kNX8,5724
 langchain_agentx/workspace/validators.py,sha256=tQt-6TOcL8Fw7Ig5ebA9S7vGWh1rby920eFW6x8Tk9E,1439
 langchain_agentx/workspace/view.py,sha256=PGasqTaqhlD03SXXazHuw4RHfV681AIdlsYqL70pEjc,4774
-langchain_agentx_python-2.0.0.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-langchain_agentx_python-2.0.0.dist-info/METADATA,sha256=_pvjskTD_-jwlxU8f4XlXCarN8PP3usISTTOa9C8iec,24844
-langchain_agentx_python-2.0.0.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
-langchain_agentx_python-2.0.0.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
-langchain_agentx_python-2.0.0.dist-info/RECORD,,
+langchain_agentx_python-2.0.1.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+langchain_agentx_python-2.0.1.dist-info/METADATA,sha256=Md4WdCIDe34uD_fT4C8MrwhHW_yXKLNfIsgKvFU9Bv0,24844
+langchain_agentx_python-2.0.1.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
+langchain_agentx_python-2.0.1.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
+langchain_agentx_python-2.0.1.dist-info/RECORD,,