langchain-agentx-python 2.2.7__py3-none-any.whl → 2.2.9__py3-none-any.whl

langchain_agentx/__init__.py

@@ -11,7 +11,7 @@ from langchain_agentx import create_loop_agent
 ```
 """
 
-__version__ = "2.2.7"
+__version__ = "2.2.9"
 
 from .loop import (  # noqa: F401
     create_loop_agent,

langchain_agentx/tool_runtime/__init__.py

@@ -43,6 +43,7 @@ from .permission_snapshot import (
     collect_denied_agent_types_from_policy as collect_denied_agent_types,
 )
 from .path_safety import PathSafetyConfig, PathSafetyEvaluator
+from .permission_cli_rules import apply_cli_permission_rules, parse_tool_list_from_cli
 from .policy import DefaultPolicyEngine, PolicyEngine, ToolPolicyConfig
 from .read_ignore_patterns import (
     ReadDenyPatternCollector,
@@ -122,6 +123,8 @@ __all__ = [
     "validation_error_envelope",
     # policy
     "ToolPolicyConfig",
+    "apply_cli_permission_rules",
+    "parse_tool_list_from_cli",
     "PolicyEngine",
     "DefaultPolicyEngine",
     "PolicyEngineDecorator",

langchain_agentx/tool_runtime/inner_permission_chain.py

@@ -24,6 +24,7 @@ from .models import AuthorizationDecision
 from .permission_decision import (
     POLICY_ID_PREFIX_ALWAYS_ASK_TOOL,
     attach_decision_reason,
+    get_decision_reason,
     make_other_decision_reason,
     make_rule_decision_reason,
 )
@@ -40,6 +41,14 @@ if TYPE_CHECKING:
     from .policy import DefaultPolicyEngine
 
 
+def _l1_ask_blocks_tool_level_allow(decision: AuthorizationDecision) -> bool:
+    """CC step 1g：safetyCheck 产生的 ask 不得被段 4 tool-level allow 覆盖。"""
+    reason = get_decision_reason(decision)
+    if reason is None:
+        return False
+    return reason.get("type") == "safetyCheck"
+
+
 @dataclass
 class PathPolicyResult:
     decision: AuthorizationDecision | None = None
@@ -80,6 +89,9 @@ class InnerPermissionChain:
                     raise ValueError(f"L1 outcome={l1.outcome!r} requires decision")
                 if tool.requires_user_interaction_for(data, ctx):
                     return l1.decision
+                # CC step 1g：safetyCheck ask 不被 tool-level allow（2b）覆盖
+                if _l1_ask_blocks_tool_level_allow(l1.decision):
+                    return l1.decision
                 seg4 = self._segment_4_mode_shortcircuit(tool, data, ctx, tool_flags)
                 if seg4 is not None:
                     return seg4

langchain_agentx/tool_runtime/permission_cli_rules.py

@@ -0,0 +1,143 @@
+"""
+permission_cli_rules.py — CC 对齐 CLI allow/disallow 解析与 ToolPolicyConfig 注入
+
+职责：
+    parse_tool_list_from_cli（对齐 CC parseToolListFromCLI）；
+    apply_cli_permission_rules 写入 allow_rules_by_source / deny_rules_by_source["cliArg"]。
+
+链路位置：
+    CLI / new_agent / stream_ui → ToolRuntimeLoader(policy_config=...) → build_permission_rule_registry。
+"""
+
+from __future__ import annotations
+
+from collections.abc import Sequence
+
+from .permission_rules import (
+    PermissionRule,
+    PermissionRuleBehavior,
+    PermissionRuleSource,
+    PermissionRuleValue,
+    permission_rule_to_string,
+    permission_rule_value_from_string,
+)
+from .policy import ToolPolicyConfig
+
+_LEGACY_TASK_TOOL = "Task"
+_CANONICAL_AGENT_TOOL = "Agent"
+
+
+def parse_tool_list_from_cli(tools: Sequence[str]) -> list[str]:
+    """对齐 CC permissionSetup.ts parseToolListFromCLI（括号内不切分）。"""
+    if not tools:
+        return []
+    result: list[str] = []
+    for tool_string in tools:
+        if not tool_string:
+            continue
+        current = ""
+        is_in_parens = False
+        for char in tool_string:
+            if char == "(":
+                is_in_parens = True
+                current += char
+            elif char == ")":
+                is_in_parens = False
+                current += char
+            elif char == ",":
+                if is_in_parens:
+                    current += char
+                else:
+                    if current.strip():
+                        result.append(current.strip())
+                    current = ""
+            elif char == " ":
+                if is_in_parens:
+                    current += char
+                elif current.strip():
+                    result.append(current.strip())
+                    current = ""
+            else:
+                current += char
+        if current.strip():
+            result.append(current.strip())
+    return result
+
+
+def canonical_cli_rule_string(rule: str) -> str:
+    """对齐 CC allow 列表规范化（permissionRuleValueFromString + ToString；Task→Agent）。"""
+    value = permission_rule_value_from_string(rule.strip())
+    tool_name = value.tool_name
+    if tool_name == _LEGACY_TASK_TOOL:
+        tool_name = _CANONICAL_AGENT_TOOL
+    normalized = PermissionRule(
+        source=PermissionRuleSource.CLI_ARG,
+        rule_behavior=PermissionRuleBehavior.ALLOW,
+        rule_value=PermissionRuleValue(
+            tool_name=tool_name,
+            rule_content=value.rule_content,
+        ),
+    )
+    return permission_rule_to_string(normalized)
+
+
+def apply_cli_permission_rules(
+    config: ToolPolicyConfig,
+    *,
+    allowed: Sequence[str] | None = None,
+    disallowed: Sequence[str] | None = None,
+) -> ToolPolicyConfig:
+    """
+    合并 cliArg 规则；不修改 userSettings / projectSettings 等其它 source。
+
+    ``allowed is None`` / ``disallowed is None`` 表示不触碰对应 cliArg 键；
+    传空序列表示清除该 cliArg 键。
+    """
+    allow_map = dict(config.allow_rules_by_source)
+    deny_map = dict(config.deny_rules_by_source)
+
+    if allowed is not None:
+        if allowed:
+            parsed = parse_tool_list_from_cli(allowed)
+            allow_map[PermissionRuleSource.CLI_ARG.value] = tuple(
+                canonical_cli_rule_string(r) for r in parsed
+            )
+        else:
+            allow_map.pop(PermissionRuleSource.CLI_ARG.value, None)
+
+    if disallowed is not None:
+        if disallowed:
+            parsed = parse_tool_list_from_cli(disallowed)
+            deny_map[PermissionRuleSource.CLI_ARG.value] = tuple(
+                canonical_cli_rule_string(r) for r in parsed
+            )
+        else:
+            deny_map.pop(PermissionRuleSource.CLI_ARG.value, None)
+
+    return ToolPolicyConfig(
+        read_roots=list(config.read_roots),
+        write_roots=list(config.write_roots),
+        deny_globs=list(config.deny_globs),
+        read_deny_globs=list(config.read_deny_globs),
+        ask_globs=list(config.ask_globs),
+        always_ask_tools=config.always_ask_tools,
+        allow_rules_by_source=allow_map,
+        deny_rules_by_source=deny_map,
+        ask_rules_by_source=dict(config.ask_rules_by_source),
+        cli_allow_tools=config.cli_allow_tools,
+        flag_settings_path=config.flag_settings_path,
+        read_only_mode=config.read_only_mode,
+        enable_builtin_deny=config.enable_builtin_deny,
+        enable_path_safety=config.enable_path_safety,
+        path_safety=config.path_safety,
+        auto_mode=config.auto_mode,
+        project_memory_layout=config.project_memory_layout,
+        denial_tracking=config.denial_tracking,
+    )
+
+
+__all__ = [
+    "apply_cli_permission_rules",
+    "canonical_cli_rule_string",
+    "parse_tool_list_from_cli",
+]

langchain_agentx/tool_runtime/permission_rule_matcher.py

@@ -54,6 +54,13 @@ class RegistryPermissionMatcher:
     ) -> AuthorizationDecision | None:
         return self._match(tool_name, target, PermissionRuleBehavior.ASK)
 
+    def match_allow(
+        self,
+        tool_name: str,
+        target: str,
+    ) -> AuthorizationDecision | None:
+        return self._match(tool_name, target, PermissionRuleBehavior.ALLOW)
+
     def _match(
         self,
         tool_name: str,
@@ -91,7 +98,12 @@ def collect_denied_agent_types(registry: PermissionRuleRegistry) -> frozenset[st
 def _decision_from_rule(rule: PermissionRule, *, behavior: str) -> AuthorizationDecision:
     rule_str = permission_rule_to_string(rule)
     policy_id = f"permission_rule:{rule.source_name}:{rule_str}"
-    if behavior == "ask":
+    if behavior == "allow":
+        decision = AuthorizationDecision(
+            behavior="allow",
+            policy_id=policy_id,
+        )
+    elif behavior == "ask":
         decision = AuthorizationDecision(
             behavior="ask",
             ask_prompt=(

langchain_agentx/tool_runtime/permission_rules.py

@@ -106,6 +106,30 @@ class PermissionRule:
         return s.value if isinstance(s, PermissionRuleSource) else str(s)
 
 
+def _content_rule_matches_target(
+    *,
+    tool_name: str,
+    target: str,
+    rule_content: str,
+) -> bool:
+    if tool_name == "Bash":
+        from langchain_agentx.tools.bash.command_allow_rules import (
+            bash_command_matches_allow_rule,
+        )
+
+        return bash_command_matches_allow_rule(target, rule_content)
+    if tool_name == "WebFetch":
+        from langchain_agentx.tools.webfetch.registry_permission import (
+            webfetch_rule_content_matches,
+        )
+
+        return webfetch_rule_content_matches(
+            target=target,
+            rule_content=rule_content,
+        )
+    return fnmatch.fnmatch(target, rule_content)
+
+
 def permission_rule_value_from_string(rule_string: str) -> PermissionRuleValue:
     """解析 CC 规则串，如 ``Bash(python:*)`` 或工具级 ``Read``。"""
     text = rule_string.strip()
@@ -254,7 +278,7 @@ class PermissionRuleRegistry:
         target: str,
         behavior: PermissionRuleBehavior,
     ) -> PermissionRule | None:
-        """CC Tool(content) 规则：工具名精确匹配 + fnmatch(content, target)。"""
+        """CC Tool(content) 规则：工具名精确匹配 + fnmatch / Bash prefix:*。"""
         tool_key = tool_name.strip()
         if not tool_key:
             return None
@@ -264,7 +288,11 @@ class PermissionRuleRegistry:
                 continue
             if rule.tool_name != tool_key:
                 continue
-            if fnmatch.fnmatch(target, content):
+            if _content_rule_matches_target(
+                tool_name=tool_key,
+                target=target,
+                rule_content=content,
+            ):
                 return rule
         return None
 
@@ -274,6 +302,8 @@ class PermissionRuleRegistry:
         behavior: PermissionRuleBehavior,
     ) -> str | None:
         """v1 deny_globs/ask_globs 减法：裸 glob / 命令模式 fnmatch。"""
+        if behavior is PermissionRuleBehavior.ALLOW:
+            return None
         patterns = (
             self.legacy_deny_globs
             if behavior is PermissionRuleBehavior.DENY

langchain_agentx/tools/ask_user_question/constants.py

@@ -25,12 +25,12 @@ MAX_PREVIEW_SNAPSHOT_CHARS: int = 8192
 # present()：每段 preview / snapshot 写入模型可见文本时的默认截断
 PRESENT_PREVIEW_SNIPPET_MAX: int = 500
 
-# 全角问号（中文输入法常见）；校验要求 ASCII '?'
+# 全角问号（中文输入法常见）；仅作 normalize 软转换，不作为 validate 硬拒条件
 FULLWIDTH_QUESTION_MARK: str = "\uff1f"
 
 
 def normalize_question_text(text: str) -> str:
-    """将题干末尾全角 ``？`` 规范为 ASCII ``?``（CC / QuestionValidator 一致）。"""
+    """将题干末尾全角 ``？`` 规范为 ASCII ``?``（展示一致性；校验不强制末尾问号）。"""
     if text.endswith(FULLWIDTH_QUESTION_MARK):
         return text[:-1] + "?"
     return text

langchain_agentx/tools/ask_user_question/validators.py

@@ -2,13 +2,14 @@
 tools/ask_user_question/validators.py — QuestionValidator
 
 职责：
-    封装单题与整卷语义校验（问号、选项数、label 唯一、multiSelect v2 约束等）。
+    封装单题与整卷语义校验（非空题干、选项数、label 唯一等）。
 
 链路位置：
     AskUserQuestionTool.validate_input 委托本类。
 
 当前裁剪范围：
-    含 preview 长度（dict 路径，与 Pydantic max_length 双保险）；HTML 规则在 HtmlPreviewValidator（v3）。
+    题干末尾问号仅为 schema/prompt 软提示（对齐 CC validateInput，无硬拒）；
+    preview 长度与 Pydantic 双保险；HTML 规则在 HtmlPreviewValidator。
 
 """
 
@@ -32,11 +33,12 @@ class QuestionValidator:
                 code="MISSING_QUESTION_FIELD",
             )
         question_text = question["question"]
-        if not isinstance(question_text, str) or not question_text.endswith("?"):
+        # CC: Zod describe 建议 end with '?'；validateInput 不硬拒末尾字符。
+        if not isinstance(question_text, str) or not question_text.strip():
             return ValidationResult(
                 ok=False,
-                message=f"Question at index {index}: '{question_text}' must end with '?'",
-                code="QUESTION_NO_QUESTION_MARK",
+                message=f"Question at index {index}: 'question' must be a non-empty string",
+                code="EMPTY_QUESTION_TEXT",
             )
 
         header = question.get("header", "")

langchain_agentx/tools/bash/command_allow_rules.py

@@ -1,21 +1,31 @@
 """
-tools/bash/command_allow_rules.py — /commit 等 command 级 Bash 白名单匹配。
+tools/bash/command_allow_rules.py — Bash 内容级 allow 匹配（slash command + cliArg registry）。
 
 职责：
-    将 CC 风格 Bash(git add:*) 规则用于 check_permissions 早放行。
+    CC 风格 Bash(git:*) / Bash(python:*) 前缀规则；slash 白名单与 registry cliArg 内容 allow。
 
 链路位置：
-    BashRuntimeTool.check_permissions → try_command_allow_decision。
+    BashRuntimeTool._evaluate_bash_l1_chain / _authorize_command_segment。
 """
 
 from __future__ import annotations
 
 import fnmatch
+from typing import TYPE_CHECKING
 
 from langchain_agentx.tool_runtime.models import AuthorizationDecision, ToolExecutionContext
 from langchain_agentx.tool_runtime.permission_context import get_command_bash_allow_rules
+from langchain_agentx.tool_runtime.permission_rule_matcher import RegistryPermissionMatcher
+from langchain_agentx.tool_runtime.permission_rules import (
+    PermissionRuleBehavior,
+    PermissionRuleRegistry,
+    build_permission_rule_registry,
+)
 from langchain_agentx.tools.bash.read_only_validation import BashReadOnlyClassifier
 
+if TYPE_CHECKING:
+    from langchain_agentx.tool_runtime.policy import DefaultPolicyEngine
+
 
 def bash_command_matches_allow_rule(command: str, rule_content: str) -> bool:
     """CC prefix:* 与简单 fnmatch 子集。"""
@@ -55,6 +65,69 @@ def try_command_allow_decision(
     return None
 
 
+def cliarg_bash_has_content_allow_without_bare_tool(
+    registry: PermissionRuleRegistry,
+) -> bool:
+    """cliArg 仅配置了 Bash(pattern) 而无裸 Bash（CC-CLI-B-05 / B-08 边界）。"""
+    has_content = False
+    has_bare = False
+    for rule in registry.iter_rules(PermissionRuleBehavior.ALLOW):
+        if rule.source_name != "cliArg" or rule.tool_name != "Bash":
+            continue
+        if rule.rule_content is None:
+            has_bare = True
+        else:
+            has_content = True
+    return has_content and not has_bare
+
+
+def try_registry_bash_content_allow_decision(
+    command: str,
+    ctx: ToolExecutionContext,
+    policy_engine: DefaultPolicyEngine | None,
+) -> AuthorizationDecision | None:
+    """cliArg/settings 等内容级 Bash allow（CC bashPermissions prefix allow，path 通过后）。"""
+    if policy_engine is None:
+        return None
+    registry = build_permission_rule_registry(
+        policy_config=policy_engine._config,
+        session_store=ctx.session_store,
+        workspace_root=ctx.workspace_root,
+        agent_home_segment=ctx.agent_home_segment,
+    )
+    matcher = RegistryPermissionMatcher(registry)
+    return matcher.match_allow("Bash", command.strip())
+
+
+def promote_unmatched_cliarg_content_only_allow_to_ask(
+    decision: AuthorizationDecision,
+    *,
+    command: str,
+    ctx: ToolExecutionContext,
+    policy_engine: DefaultPolicyEngine | None,
+) -> AuthorizationDecision:
+    """roots 内 silent allow → ask（仅 cliArg 有 Bash(pattern) 且无裸 Bash 时）。"""
+    if policy_engine is None or decision.behavior != "allow" or decision.policy_id:
+        return decision
+    registry = build_permission_rule_registry(
+        policy_config=policy_engine._config,
+        session_store=ctx.session_store,
+        workspace_root=ctx.workspace_root,
+        agent_home_segment=ctx.agent_home_segment,
+    )
+    if not cliarg_bash_has_content_allow_without_bare_tool(registry):
+        return decision
+    return AuthorizationDecision(
+        behavior="ask",
+        message=decision.message,
+        policy_id="write_roots",
+        ask_prompt=(
+            decision.ask_prompt
+            or f"Allow Bash command in workspace?\n{command.strip()}"
+        ),
+    )
+
+
 _READ_ONLY_CLASSIFIER = BashReadOnlyClassifier()
 
 

langchain_agentx/tools/bash/tool.py

@@ -42,7 +42,12 @@ from .limits import get_bash_limits
 from .mode_validation import BashPermissionModeValidator
 from .models import BashToolInput, BashToolOutput
 from .boundary_check import authorize_bash_boundary
-from .command_allow_rules import try_command_allow_decision, try_command_restrict_decision
+from .command_allow_rules import (
+    promote_unmatched_cliarg_content_only_allow_to_ask,
+    try_command_allow_decision,
+    try_command_restrict_decision,
+    try_registry_bash_content_allow_decision,
+)
 from .events import (
     BashProgressAccumulator,
     bash_progress_emit_data,
@@ -552,8 +557,15 @@ class BashRuntimeTool(RuntimeTool):
             (item[1].updated_input for item in decisions if item[1].updated_input),
             None,
         )
+        _, primary_allow = decisions[0]
         return self._with_observability(
-            AuthorizationDecision(behavior="allow", updated_input=updated_input),
+            AuthorizationDecision(
+                behavior="allow",
+                message=primary_allow.message,
+                policy_id=primary_allow.policy_id,
+                updated_input=updated_input or primary_allow.updated_input,
+                metadata=dict(primary_allow.metadata or {}),
+            ),
             trace=trace,
             trace_context=TraceContext.from_ctx(ctx),
         )
@@ -977,6 +989,12 @@ class BashRuntimeTool(RuntimeTool):
         if path_decision.behavior != "allow":
             return path_decision
 
+        registry_allow = try_registry_bash_content_allow_decision(
+            command, ctx, self._policy
+        )
+        if registry_allow is not None:
+            return registry_allow
+
         hardening_decision = self._security_hardener.check_segment(
             command=command,
             analysis=analysis,
@@ -1015,7 +1033,13 @@ class BashRuntimeTool(RuntimeTool):
         if decision.behavior != "allow":
             return decision
 
-        return self._authorize_sed_segment(command=command, ctx=ctx, cwd=cwd) or decision
+        final = self._authorize_sed_segment(command=command, ctx=ctx, cwd=cwd) or decision
+        return promote_unmatched_cliarg_content_only_allow_to_ask(
+            final,
+            command=command,
+            ctx=ctx,
+            policy_engine=self._policy,
+        )
 
     def _authorize_sed_segment(
         self,

langchain_agentx/tools/webfetch/registry_permission.py

@@ -0,0 +1,74 @@
+"""
+tools/webfetch/registry_permission.py — WebFetch registry 内容规则（CC domain:hostname）
+
+职责：
+    将 URL 转为 CC ``webFetchToolInputToPermissionRuleContent`` 键；在 L1 按 deny→ask→allow 评估。
+
+链路位置：
+    WebFetchRuntimeTool.run_l1_permission_check（预批准 host 之后）。
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING, Any
+from urllib.parse import urlparse
+
+from langchain_agentx.tool_runtime.models import AuthorizationDecision
+from langchain_agentx.tool_runtime.permission_decision import (
+    attach_decision_reason,
+    make_other_decision_reason,
+)
+from langchain_agentx.tool_runtime.permission_rule_matcher import RegistryPermissionMatcher
+from langchain_agentx.tool_runtime.permission_rules import build_permission_rule_registry
+
+if TYPE_CHECKING:
+    from langchain_agentx.tool_runtime.models import ToolExecutionContext
+
+
+def webfetch_permission_rule_content(url: str) -> str:
+    """对齐 CC WebFetchTool.ts ``domain:${hostname}``。"""
+    text = url.strip()
+    if not text:
+        return "input:"
+    try:
+        host = (urlparse(text).hostname or "").lower()
+        if host:
+            return f"domain:{host}"
+    except Exception:
+        pass
+    return f"input:{text}"
+
+
+def webfetch_rule_content_matches(*, target: str, rule_content: str) -> bool:
+    """WebFetch 内容规则：target 与 rule 均为 ``domain:host`` 或 ``input:…``。"""
+    return target.strip().lower() == rule_content.strip().lower()
+
+
+def evaluate_webfetch_registry_permission(
+    url: str,
+    ctx: ToolExecutionContext,
+    policy_engine: Any,
+) -> AuthorizationDecision:
+    registry = build_permission_rule_registry(
+        policy_config=policy_engine._config,
+        session_store=ctx.session_store,
+        workspace_root=ctx.workspace_root,
+        agent_home_segment=ctx.agent_home_segment,
+    )
+    target = webfetch_permission_rule_content(url)
+    matcher = RegistryPermissionMatcher(registry)
+    for match_fn in (matcher.match_deny, matcher.match_ask, matcher.match_allow):
+        matched = match_fn("WebFetch", target)
+        if matched is not None:
+            return matched
+    decision = AuthorizationDecision(
+        behavior="ask",
+        ask_prompt=(
+            "Claude requested permissions to use WebFetch, but you haven't granted it yet."
+        ),
+        policy_id="webfetch_default",
+    )
+    return attach_decision_reason(
+        decision,
+        make_other_decision_reason("WebFetch default permission prompt"),
+    )

langchain_agentx/tools/webfetch/tool.py

@@ -123,7 +123,18 @@ class WebFetchRuntimeTool(RuntimeTool):
                 outcome="allow",
                 decision=AuthorizationDecision(behavior="allow"),
             )
-        return L1PermissionResult(outcome="continue")
+        if self._policy is None:
+            from langchain_agentx.tool_runtime.policy import DefaultPolicyEngine, ToolPolicyConfig
+
+            engine = DefaultPolicyEngine(ToolPolicyConfig())
+        else:
+            engine = self._policy
+        from langchain_agentx.tools.webfetch.registry_permission import (
+            evaluate_webfetch_registry_permission,
+        )
+
+        decision = evaluate_webfetch_registry_permission(url, ctx, engine)
+        return L1PermissionResult(outcome=decision.behavior, decision=decision)
 
     def invoke(self, data: dict[str, Any], ctx: ToolExecutionContext) -> WebFetchToolOutput:
         parsed = _as_input(data)

langchain_agentx/tools/websearch/tool.py

@@ -155,7 +155,23 @@ class WebSearchRuntimeTool(RuntimeTool):
                 outcome="deny",
                 decision=AuthorizationDecision(behavior="deny", message=deny_reason),
             )
-        return L1PermissionResult(outcome="continue")
+        from langchain_agentx.tool_runtime.permission_decision import (
+            attach_decision_reason,
+            make_other_decision_reason,
+        )
+
+        decision = AuthorizationDecision(
+            behavior="ask",
+            ask_prompt="WebSearch requires permission.",
+            policy_id="websearch_default",
+        )
+        return L1PermissionResult(
+            outcome="ask",
+            decision=attach_decision_reason(
+                decision,
+                make_other_decision_reason("WebSearch passthrough promoted to ask"),
+            ),
+        )
 
     def invoke(self, data: dict[str, Any], ctx: ToolExecutionContext) -> WebSearchToolOutput:
         parsed = WebSearchToolInput.model_validate(data)

{langchain_agentx_python-2.2.7.dist-info → langchain_agentx_python-2.2.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: langchain-agentx-python
-Version: 2.2.7
+Version: 2.2.9
 Summary: LangChain/LangGraph-based agent utilities for CodeBaseX.
 Author-email: GoodMood2008 <GoodMood2008@users.noreply.github.com>
 License: Apache License

{langchain_agentx_python-2.2.7.dist-info → langchain_agentx_python-2.2.9.dist-info}/RECORD

@@ -1,4 +1,4 @@
-langchain_agentx/__init__.py,sha256=u163iBLScsjUuLfV2YYL3tProAOl3aRQEK1lyYmWoJA,1614
+langchain_agentx/__init__.py,sha256=sLs2vKbNQCEmhW-uC3NdfDAK1zHUjcNzPxy1y2UPlqg,1614
 langchain_agentx/command/__init__.py,sha256=Ej260S5uFQcmEtGZQG_NH7BYjHoStrpBLtGUsBTxyZk,631
 langchain_agentx/command/allowed_tools.py,sha256=TVA0VM8rm98H-QbLK_GRiX5RhEAZFxKawliMi4kk96A,3359
 langchain_agentx/command/context.py,sha256=DIGOGPBw5UGDBm0WNNJlKx1h_9rCRmcdROv4DT61Qug,731
@@ -389,7 +389,7 @@ langchain_agentx/task_runtime/tasks/trace_cleanup/__init__.py,sha256=riWlkXNpJb3
 langchain_agentx/task_runtime/tasks/trace_cleanup/bootstrap.py,sha256=xYVabnY0Qe4AnKKXhLIL10h22ZOwtaxRGdQ9ew0T9zo,3399
 langchain_agentx/task_runtime/tasks/trace_cleanup/executor.py,sha256=qez3WnzBTagYZMc0qA1mk-jvM2dMy7uCrwZ7aWhEJzw,2094
 langchain_agentx/task_runtime/tasks/trace_cleanup/scheduler.py,sha256=lqWlCqucs26fhr4M9LfgY8I0xuNDxwSLkre6XjAJDhA,6877
-langchain_agentx/tool_runtime/__init__.py,sha256=C4ZrS6UWSL65ErfNWMvBuZBnht6ZuGb0PBXwA0Xke74,5144
+langchain_agentx/tool_runtime/__init__.py,sha256=bl_PIAbVXuaPgM-qH4z0mh7vgKBSttoxb-XMxsshles,5297
 langchain_agentx/tool_runtime/accept_edits_fast_path.py,sha256=UMCOF9Ws7hx3pcYvL-Kq7vzIAGvOGdEfx69ccUDXT-k,2281
 langchain_agentx/tool_runtime/adapter.py,sha256=rM-Y2zSZ--N-TIvx1HtI1J7ralPU0w4jJuX3bBvIVxM,33847
 langchain_agentx/tool_runtime/agent_home_bypass.py,sha256=na9xQPgJ02qA3YiJ1F8jN0Uv4uBDPzqRk3lfPPE089g,8010
@@ -404,7 +404,7 @@ langchain_agentx/tool_runtime/denial_tracking_bridge.py,sha256=qssnZ_tzCIrDeJvtx
 langchain_agentx/tool_runtime/errors.py,sha256=Ed1FMjBdPfr0WG-YwLIm_7jokl9k_DjHFNiewZTeQfg,8883
 langchain_agentx/tool_runtime/failure_event_emitter.py,sha256=C7c4Gc7Vo_R6_ah2Xxa2eso7l9Iuz_KTgRV0j0B08rA,10467
 langchain_agentx/tool_runtime/identical_call_cache.py,sha256=v8WWuTHWR5ThujcMO4Ty28mZS_w-JN24267fZ4PHWK8,3865
-langchain_agentx/tool_runtime/inner_permission_chain.py,sha256=k0uf-Tvr4NitX9xsSvGki2iuwBn0IZZ0t_rQf49CbnE,17075
+langchain_agentx/tool_runtime/inner_permission_chain.py,sha256=SSr45DuwiuKxoyb3r7DdrRu7YUFzKIWBCmTYhBKFO68,17594
 langchain_agentx/tool_runtime/limits.py,sha256=imE1IetmyKQM82INR0VkP3qZNM4bjUJuf1CG5BkY0uw,356
 langchain_agentx/tool_runtime/loader.py,sha256=ZeT-xIB6TDkehqyYWx1gkvI0aKx9_xKDKJhqyIvlAvw,9397
 langchain_agentx/tool_runtime/loop_loader.py,sha256=C_4T9XxlDmKaTzGv4MO6mJuR-rd6uueb1ZWwEKvvFaE,9087
@@ -414,11 +414,12 @@ langchain_agentx/tool_runtime/models.py,sha256=cO9EgLKPXiktHl_xXtBwLQrCo6mj4tbT4
 langchain_agentx/tool_runtime/outer_permission_resolver.py,sha256=8uKS148DXxt5SfDIHmbRwee4FchKdlquUZbfWeyNRXw,4184
 langchain_agentx/tool_runtime/override.py,sha256=D8TRftoeWzqlTuWCGUxNkFY7XzWx_d5oxI_ltNibqPA,10258
 langchain_agentx/tool_runtime/path_safety.py,sha256=dUrl2SObKmRDwdm9k8veO_Eh0iXw0LPLAMZJGxeKnTE,8548
+langchain_agentx/tool_runtime/permission_cli_rules.py,sha256=fz8cW-jXH3f92EYfO0ShIaBSC0k2Lb6GtLJwCpLiaPk,4799
 langchain_agentx/tool_runtime/permission_context.py,sha256=ReVV2kjVWAPTsPaYXxRB-dICqualEvi2zzwF8NX_Wkk,6229
 langchain_agentx/tool_runtime/permission_decision.py,sha256=-dWuC60MV6PYgHHOsSxr6Qad8Mm3qgMuh6nkzM87LO4,10280
 langchain_agentx/tool_runtime/permission_orchestrator.py,sha256=nwx76k74aAFgo63tfkoi6zUJTj9-10tnQzj03VYqFuw,4637
-langchain_agentx/tool_runtime/permission_rule_matcher.py,sha256=n3k3EKC4cd_2RMxprKP4NR0DR5iAig4YtsdRwt7wHws,4384
-langchain_agentx/tool_runtime/permission_rules.py,sha256=ev6-Hm3N8YtbJO3SLGpoGMUlKGNE6ocvz6lQBhP0waY,18575
+langchain_agentx/tool_runtime/permission_rule_matcher.py,sha256=z4VesjyvvEry-L2U1VsrJB3SR6wtaG8OOuhvftsvj9U,4725
+langchain_agentx/tool_runtime/permission_rules.py,sha256=Aw4qTckMCpQDZpGeAHkRS4fON3ixWU9B5B9W6D2OlMg,19435
 langchain_agentx/tool_runtime/permission_settings_loader.py,sha256=Xu6dso0ghh4pb7Puf8nj20nXxjGeQvL4kIGycavwG_o,5624
 langchain_agentx/tool_runtime/permission_settings_sync.py,sha256=g6TvjWwa7D0kw5rDznPsoMv7xylESPOyWA2vZW4HDm0,4590
 langchain_agentx/tool_runtime/permission_snapshot.py,sha256=xFoi9fIcZjSw_zrIoyglneM-vJsDOLCEjiVoazr5Ack,1947
@@ -520,12 +521,12 @@ langchain_agentx/tools/agent/registry/__init__.py,sha256=Ts5_OJzTnbiqZDxXqMI1UnF
 langchain_agentx/tools/agent/registry/config.py,sha256=4bcI0Gq1Kqclc3y6YsDhVSkc8tNTkslQAPqy5ZSgF-Y,1628
 langchain_agentx/tools/agent/registry/registry.py,sha256=knii6XWFZvPkcqzTK3Y4PX5evGcDmto4SsZ7VzUsPSI,1544
 langchain_agentx/tools/ask_user_question/__init__.py,sha256=bDHVPc4dHBw___7rbaTxClsbDpQ-jLt5Obj8R2VBLAc,444
-langchain_agentx/tools/ask_user_question/constants.py,sha256=vK5QraZBBVj7woW1TF08G-MecrooCa-gl9RPH9CvHKE,1229
+langchain_agentx/tools/ask_user_question/constants.py,sha256=rqlL31BTSNY2spn8f2i-MtKjy3y3QoLFAeqenFmYe6Q,1283
 langchain_agentx/tools/ask_user_question/html_preview.py,sha256=OwNpsH9qm8iJ-TTbzkMFvG49T4-oNJXJXH4OZ8r55wc,3913
 langchain_agentx/tools/ask_user_question/models.py,sha256=uLc2UK_v8iMFEL1Zk0mUOBYdcg2HfbaLdH68o8kr7GE,3376
 langchain_agentx/tools/ask_user_question/prompt.py,sha256=0RdVuUeNzQBzPeVrLcbiBqh1uizFgUANvaKOZpVy_qg,2803
 langchain_agentx/tools/ask_user_question/tool.py,sha256=DgU7OBAqrJBb77ewQ76okoUFJxTThAiN6PRMPa8_FvU,13467
-langchain_agentx/tools/ask_user_question/validators.py,sha256=gUYuuKJNrExWGvhFlmhqqSU8ax7s4EhXMvTEjapHeiY,5974
+langchain_agentx/tools/ask_user_question/validators.py,sha256=Uc88cBzqUp0PNG_Jf2yX2WtKP8hzBsnkMb_KUXh9C4M,6088
 langchain_agentx/tools/bash/__init__.py,sha256=molPHFDylE2wWG_aQx7fb0ciAx3wWpdXzIixTZV5ne4,214
 langchain_agentx/tools/bash/ast_security.py,sha256=6DFd_TwT986dbGkKT3UnDIZioBdmi8mbJcYSI-XEtdM,22444
 langchain_agentx/tools/bash/auto_mode_adapter.py,sha256=7-yb_kGmpytBYkD2Hn5YWPIceo_YN4PatEKj8O7HKsM,4243
@@ -533,7 +534,7 @@ langchain_agentx/tools/bash/backend.py,sha256=E0DMBAENZLUSLvuEh6RubNJ6iCVnx1d2VG
 langchain_agentx/tools/bash/bash_hardening.py,sha256=KEYKRC7kS_to4mzXuChvCmOIIb4dSUkOb9K1MBDtWDc,29296
 langchain_agentx/tools/bash/bash_runtime_contract.py,sha256=s8vrvMl7405KLGw2hPFbzlzWohm5JX3c9cImMBgqh8I,1511
 langchain_agentx/tools/bash/boundary_check.py,sha256=k9Bv-baIAUDE3-c_Brw3VSXXYMv_g3lTM0mabIadnwc,8822
-langchain_agentx/tools/bash/command_allow_rules.py,sha256=T8TZeGjb6f7C1KAdkzRG01gjyNpNiRlm65bx0y0Asag,3275
+langchain_agentx/tools/bash/command_allow_rules.py,sha256=-1m-yzTCEBHnomeliejUs-CR9yBr9SqtczKoLZIZKsc,5950
 langchain_agentx/tools/bash/cwd_reporter.py,sha256=mASbKWLb4MiX4zLKY3w1ocIdfhmwj5KRgX4OW_PcAns,2642
 langchain_agentx/tools/bash/events.py,sha256=xDpPA3zhne2cnlYTmiiPTsV423-h-Nw-VKDR_rlnbGE,6065
 langchain_agentx/tools/bash/l1_decision_reason.py,sha256=MOL9HBBpJEgypuTiYdNojQBl8eIsTwRge5CtGeYRJKI,5365
@@ -557,7 +558,7 @@ langchain_agentx/tools/bash/semantics.py,sha256=pkf4URTulAOVL7m04Rq9JJF7z0J2mTEs
 langchain_agentx/tools/bash/shell_locator.py,sha256=AUnCZS8gmZurCs8rL4y0MMOS9UZimfg5rQ5At38mZKU,6296
 langchain_agentx/tools/bash/shell_quoting.py,sha256=K4JLVGwU8VpdQzfQB1o3xsq4HoCKHew1pry8hHChcoA,4498
 langchain_agentx/tools/bash/task_runtime.py,sha256=hikVC9YugtvpLf4nDaPlX_GFem1YQvDRwN0ShRflUYU,3568
-langchain_agentx/tools/bash/tool.py,sha256=SsLLQdWNUAvXAQD6p_QwtVbwpAx3eGrzG6d6hUcCHZU,45618
+langchain_agentx/tools/bash/tool.py,sha256=xhuFynhBg4Vcar3WjLoJptlYPoqRnkFiV_lQRi0l6T0,46387
 langchain_agentx/tools/bash/windows_shell_quoting.py,sha256=0RzLnTKyFrJ536QzqPZvSyUcQWN794XRlAq2RdHeKHo,1615
 langchain_agentx/tools/edit/__init__.py,sha256=PiiOHUODUzTRQxxPdE7ZMTjd3vfdzm9LEcn1lpVtg8o,203
 langchain_agentx/tools/edit/backend.py,sha256=JrikYafZDGMQ2JjXRxbnv1VSHVGRUdLmZN__nnqkM9o,3159
@@ -649,8 +650,9 @@ langchain_agentx/tools/webfetch/loader.py,sha256=QCATTqBvQHXiMVuAbGQGQeymVevDfWw
 langchain_agentx/tools/webfetch/models.py,sha256=e_k3FS_9JLekKsq1auRioLDhUFz4YNUlX3MrvnW5BE0,2561
 langchain_agentx/tools/webfetch/preapproved.py,sha256=8SjbOZdZla208oml8pzixkA-vvZ9c0kofCQ-3XQCoeQ,4312
 langchain_agentx/tools/webfetch/prompt.py,sha256=lpiAV9ftjs-M1BS6R5_L_uNAcOPJ5bJ9H-ZE2eq_5OY,3771
+langchain_agentx/tools/webfetch/registry_permission.py,sha256=5jSg_c2TuAqNGMA1_C_pSNRufN2fuOaqTOEcitjaQf8,2535
 langchain_agentx/tools/webfetch/summary.py,sha256=wk-5C39VoEIj9OyZtw6DOs6GYtdvPVECb80uGgVwI7w,1038
-langchain_agentx/tools/webfetch/tool.py,sha256=DYHuXuf1ebpEjh6Vd-8mAbWeBLjpGDXgM3lGk1ES78U,8720
+langchain_agentx/tools/webfetch/tool.py,sha256=4qT0nH2DwC8iPEWzmnZjns8lnynXS7muc-2xCgVlbZY,9199
 langchain_agentx/tools/websearch/__init__.py,sha256=gOVwLv3X9iLUpnN5lhyLeEiovw-JDmzdqxGg7ufkIMY,950
 langchain_agentx/tools/websearch/backend.py,sha256=AIv9vh1rwFLlYmSEl-NRTM_LiMHRu5sMiMpE5CksWrg,8871
 langchain_agentx/tools/websearch/events.py,sha256=iQY_vEdCS1mCYfiB7jFMrGNUbpnVI9gJoA6jaXvNxeA,810
@@ -658,7 +660,7 @@ langchain_agentx/tools/websearch/limits.py,sha256=trZxxFAXHUv2JstYxMIJb7_hIWYkXm
 langchain_agentx/tools/websearch/loader.py,sha256=Y9FX3BPGe_oBSpqfzDke7XN4QqRjjVSVprnsSd0K_SI,1489
 langchain_agentx/tools/websearch/models.py,sha256=YkVhxM2CXj2RAn4KtOO_dgxZuvo4viJ0AUdAy06-4hM,4167
 langchain_agentx/tools/websearch/prompt.py,sha256=Sy2zlAO233WvmpOkJuCrkTCpS6oZIkCS_i2CmhBb_js,3188
-langchain_agentx/tools/websearch/tool.py,sha256=ZrVdsAvkle8OuqSEeY1QkIac1yDBolZ6wuVEL1WWFhQ,8878
+langchain_agentx/tools/websearch/tool.py,sha256=KQW_awFJqcSVV-oltjb4QTQGjLqC8RnTCZtgbVXCIZ0,9406
 langchain_agentx/tools/write/__init__.py,sha256=lsmRlcXRgiN3boyfp3QjqRdhHarl2xJkC_XjN5AvEFk,171
 langchain_agentx/tools/write/backend.py,sha256=qZ86LKIunfIYLsfVZrwvBiJsjmvJCbNA_PB4ZLUuHFM,2298
 langchain_agentx/tools/write/display_builder.py,sha256=3pRUuLyOoHzY9iqHMeg8yTVCby5AAFz2Zk3NMOttEbM,3932
@@ -761,8 +763,8 @@ langchain_agentx/workspace/root_grant_manager.py,sha256=W3gy8HTevbERbXqIgRcjzOXO
 langchain_agentx/workspace/tool_boundary.py,sha256=UDwX6swpSLsx9HNkYuuRRiV5o7ZZG_Bru2Yn0c5kNX8,5724
 langchain_agentx/workspace/validators.py,sha256=tQt-6TOcL8Fw7Ig5ebA9S7vGWh1rby920eFW6x8Tk9E,1439
 langchain_agentx/workspace/view.py,sha256=PGasqTaqhlD03SXXazHuw4RHfV681AIdlsYqL70pEjc,4774
-langchain_agentx_python-2.2.7.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-langchain_agentx_python-2.2.7.dist-info/METADATA,sha256=hqm9pkU7FcAv244Gd1gPQyI1-A81Xf3uWQmi9YZq-Wg,24250
-langchain_agentx_python-2.2.7.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
-langchain_agentx_python-2.2.7.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
-langchain_agentx_python-2.2.7.dist-info/RECORD,,
+langchain_agentx_python-2.2.9.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+langchain_agentx_python-2.2.9.dist-info/METADATA,sha256=MWx8nrJ8lXDQorwBf7tximEwOMScMgBTbNOqshUd2v0,24250
+langchain_agentx_python-2.2.9.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
+langchain_agentx_python-2.2.9.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
+langchain_agentx_python-2.2.9.dist-info/RECORD,,