langchain-agentx-python 2.2.9__py3-none-any.whl → 2.3.1__py3-none-any.whl

langchain_agentx/__init__.py

@@ -11,7 +11,7 @@ from langchain_agentx import create_loop_agent
 ```
 """
 
-__version__ = "2.2.9"
+__version__ = "2.3.1"
 
 from .loop import (  # noqa: F401
     create_loop_agent,

langchain_agentx/loop/graph/factory.py

@@ -756,8 +756,17 @@ class LoopGraphBuilder:
                 include_agent=not user_has_agent_tool,
             )
             for tool in self._services.loader.registry.list():
-                if tool.name not in self._loop_loader.registry._tools:
-                    self._loop_loader.register(tool)
+                if tool.name in self._loop_loader.registry._tools:
+                    existing = self._loop_loader.registry.get(tool.name)
+                    if existing is not tool:
+                        logger.warning(
+                            "Host loader tool %r not merged into loop; "
+                            "register_default_tools already registered %r (S-4)",
+                            tool.name,
+                            tool.name,
+                        )
+                    continue
+                self._loop_loader.register(tool)
             self._runtime_tools = self._loop_loader.registry.list()
             from ...loop.prompt.tool_aware_sections import collect_enabled_tool_names
 

langchain_agentx/tool_runtime/inner_permission_chain.py

@@ -209,12 +209,13 @@ class InnerPermissionChain:
             command = data.get("command")
             if not isinstance(command, str) or not command.strip():
                 return None
-            deny_result = matcher.match_deny(tool_name, command)
-            if deny_result is not None:
-                return deny_result
-            ask_result = matcher.match_ask(tool_name, command)
-            if ask_result is not None:
-                return ask_result
+            from langchain_agentx.tools.bash.bash_registry_content import (
+                evaluate_bash_inner_content_rules,
+            )
+
+            content_decision = evaluate_bash_inner_content_rules(command, registry)
+            if content_decision is not None:
+                return content_decision
             return None
 
         path = self._engine._extract_path(data)

langchain_agentx/tool_runtime/loader.py

@@ -155,6 +155,7 @@ class ToolRuntimeLoader:
         目的：为 subagent 组装“过滤后的工具池”而不丢失权限/管控语义。
         """
         child = ToolRuntimeLoader(
+            policy_config=self._process.policy_config,
             policy_engine=self._process.policy,
             headless=self._process.headless if headless is None else headless,
             prompt_handler=self._process.prompt_handler,

langchain_agentx/tool_runtime/loop_loader.py

@@ -107,6 +107,7 @@ class LoopLoader:
             agent_home_segment=self._agent_home,
             session_cwd=effective_cwd,
         )
+        self._merge_skill_read_roots_policy(cfg)
         self._inject_project_memory_policy(cfg)
         plugin_ex = PluginCacheGlobExclusions(
             cache_root=str(cfg.plugin_cache_dir.resolve()),
@@ -210,11 +211,21 @@ class LoopLoader:
                 setter(patterns)
         return patterns
 
+    def _merge_skill_read_roots_policy(self, workspace_cfg: Any) -> None:
+        """G-2：skill 发现目录并入 read_roots（在 project_memory 注入之前）。"""
+        from langchain_agentx.tools.skill.source_paths import resolve_skill_read_roots
+
+        roots = resolve_skill_read_roots(workspace_cfg)
+        if not roots:
+            return
+        base = self._process.effective_policy_config()
+        self._process.apply_policy_config(base.with_merged_read_roots(roots))
+
     def _inject_project_memory_policy(self, workspace_cfg: Any) -> None:
         """Per-loop 注入 CC projects 树读写根与 path_safety layout。"""
         layout = workspace_cfg.project_memory_layout
         workspace_root = str(Path(self._workspace_root).resolve())
-        base = self._process.policy_config or ToolPolicyConfig()
+        base = self._process.effective_policy_config()
         if not base.read_roots:
             base = replace(base, read_roots=[workspace_root])
         if not base.write_roots:

langchain_agentx/tool_runtime/permission_rules.py

@@ -127,6 +127,15 @@ def _content_rule_matches_target(
             target=target,
             rule_content=rule_content,
         )
+    if tool_name == "Skill":
+        from langchain_agentx.tools.skill.registry_permission import (
+            skill_rule_content_matches,
+        )
+
+        return skill_rule_content_matches(
+            skill_name=target,
+            rule_content=rule_content,
+        )
     return fnmatch.fnmatch(target, rule_content)
 
 

langchain_agentx/tool_runtime/policy.py

@@ -45,9 +45,11 @@ from __future__ import annotations
 import fnmatch
 import os
 import sys
+from pathlib import Path
 import warnings
 from abc import ABC, abstractmethod
 from dataclasses import dataclass, field, replace
+from collections.abc import Iterable
 from typing import TYPE_CHECKING, Any
 
 from .models import AuthorizationDecision, ToolExecutionContext
@@ -123,6 +125,20 @@ class ToolPolicyConfig:
             normalize_tool_name_set(self.cli_allow_tools),
         )
 
+    def with_merged_read_roots(
+        self,
+        extra: Iterable[str | os.PathLike[str]],
+    ) -> "ToolPolicyConfig":
+        """Union ``read_roots``；保留 cliArg / rules 等字段（Phase 2 skill 发现根）。"""
+        merged: list[str] = []
+        seen: set[str] = set()
+        for raw in (*self.read_roots, *(str(Path(p).expanduser().resolve()) for p in extra)):
+            if not raw or raw in seen:
+                continue
+            seen.add(raw)
+            merged.append(raw)
+        return replace(self, read_roots=merged)
+
     def with_project_memory_layout(
         self,
         layout: "ProjectMemoryLayout",
@@ -313,11 +329,16 @@ class DefaultPolicyEngine(PolicyEngine):
             config: 策略配置
             auto_mode_hook: Auto Mode 授权 Hook（可选，Phase 1 集成）
         """
+        self._auto_mode_hook = auto_mode_hook
+        self._internal_paths = InternalPathEvaluator()
+        self._agent_home_bypass = AgentHomeSessionBypassEvaluator()
+        self.replace_policy_config(config)
+
+    def replace_policy_config(self, config: ToolPolicyConfig) -> None:
+        """原地更新 config 与派生 roots/authorizer（loop project memory 注入）。"""
         self._config = config
         self._read_roots = [os.path.realpath(r) for r in config.read_roots]
         self._write_roots = [os.path.realpath(r) for r in config.write_roots]
-        self._auto_mode_hook = auto_mode_hook
-        self._internal_paths = InternalPathEvaluator()
         self._path_safety: PathSafetyEvaluator | None = None
         if config.enable_path_safety and config.path_safety is not None:
             self._path_safety = PathSafetyEvaluator(
@@ -341,7 +362,6 @@ class DefaultPolicyEngine(PolicyEngine):
                 self._within_root(real_path, r) for r in self._read_roots
             ),
         )
-        self._agent_home_bypass = AgentHomeSessionBypassEvaluator()
 
     def authorize(
         self,

langchain_agentx/tool_runtime/process_loader.py

@@ -50,14 +50,21 @@ class ProcessLoader:
             permission_resolver=permission_resolver,
         )
         self._adapter = LangChainAdapter()
-        self._policy_config = policy_config
         if policy_engine is not None:
             self._policy: PolicyEngine | None = policy_engine
+            if policy_config is not None:
+                self._policy_config = policy_config
+            elif isinstance(policy_engine, DefaultPolicyEngine):
+                self._policy_config = policy_engine._config
+            else:
+                self._policy_config = None
         elif policy_config is not None:
+            self._policy_config = policy_config
             self._policy = DefaultPolicyEngine(policy_config)
         else:
-            self._policy = DefaultPolicyEngine(ToolPolicyConfig())
-            self._policy_config = ToolPolicyConfig()
+            empty = ToolPolicyConfig()
+            self._policy_config = empty
+            self._policy = DefaultPolicyEngine(empty)
 
     def set_permission_resolver(
         self,
@@ -141,12 +148,22 @@ class ProcessLoader:
     def permission_resolver(self) -> PermissionResolver | None:
         return self._permission_resolver
 
+    def effective_policy_config(self) -> ToolPolicyConfig:
+        """policy_config → DefaultPolicyEngine._config → 空配置（loop 注入 SSOT）。"""
+        if self._policy_config is not None:
+            return self._policy_config
+        policy = self._policy
+        if isinstance(policy, DefaultPolicyEngine):
+            return policy._config
+        return ToolPolicyConfig()
+
     def apply_policy_config(self, policy_config: ToolPolicyConfig) -> None:
-        """替换策略配置并重建 DefaultPolicyEngine（保留 auto_mode hook）。"""
-        auto_hook = None
-        if isinstance(self._policy, DefaultPolicyEngine):
-            auto_hook = self._policy._auto_mode_hook
+        """替换策略配置；DefaultPolicyEngine 原地 rebind，保留 engine 实例 id。"""
         self._policy_config = policy_config
+        if isinstance(self._policy, DefaultPolicyEngine):
+            self._policy.replace_policy_config(policy_config)
+            return
+        auto_hook = None
         self._policy = DefaultPolicyEngine(policy_config, auto_mode_hook=auto_hook)
 
     def sync_permission_rules_from_disk(

langchain_agentx/tools/bash/bash_registry_content.py

@@ -0,0 +1,106 @@
+"""
+tools/bash/bash_registry_content.py — Bash cliArg 内容 deny/ask（compound 段级 · Phase D）
+
+职责：
+    Inner 段 1 对 Bash 按 AST permission_segments 评估内容级 deny/ask（对齐 CC compound 子命令优先 deny）。
+
+链路位置：
+    InnerPermissionChain._segment_1_2_global（Bash 分支）。
+"""
+
+from __future__ import annotations
+
+from langchain_agentx.tool_runtime.models import AuthorizationDecision
+from langchain_agentx.tool_runtime.permission_rule_matcher import (
+    RegistryPermissionMatcher,
+    _decision_from_legacy_glob,
+    _decision_from_rule,
+)
+from langchain_agentx.tool_runtime.permission_rules import (
+    PermissionRuleBehavior,
+    PermissionRuleRegistry,
+)
+from langchain_agentx.tools.bash.shell_rule_matching import match_shell_permission_rule
+
+
+def bash_permission_segments(command: str) -> list[str]:
+    from langchain_agentx.tools.bash.ast_security import BashAstAnalyzer
+
+    analysis = BashAstAnalyzer().analyze(command)
+    segments = [s.strip() for s in analysis.permission_segments if s and s.strip()]
+    return segments or [command.strip()]
+
+
+def _segment_content_decision(
+    segment: str,
+    registry: PermissionRuleRegistry,
+    behavior: PermissionRuleBehavior,
+) -> AuthorizationDecision | None:
+    matcher = RegistryPermissionMatcher(registry)
+    if behavior is PermissionRuleBehavior.DENY:
+        direct = matcher.match_deny("Bash", segment)
+    else:
+        direct = matcher.match_ask("Bash", segment)
+    if direct is not None:
+        return direct
+
+    legacy = registry.find_legacy_glob_match(segment, behavior)
+    if legacy is not None:
+        return _decision_from_legacy_glob(legacy, behavior=behavior.value)
+
+    for rule in registry.iter_rules(behavior):
+        if rule.tool_name != "Bash" or not rule.rule_content:
+            continue
+        if match_shell_permission_rule(rule.rule_content, segment, match_mode="prefix"):
+            return _decision_from_rule(rule, behavior=behavior.value)
+    return None
+
+
+def evaluate_bash_inner_content_rules(
+    command: str,
+    registry: PermissionRuleRegistry,
+) -> AuthorizationDecision | None:
+    """CC compound：段级 deny 优先 → full deny/ask → 段级 ask。"""
+    cmd = command.strip()
+    if not cmd:
+        return None
+
+    matcher = RegistryPermissionMatcher(registry)
+    full_deny = matcher.match_deny("Bash", cmd)
+    if full_deny is not None:
+        return full_deny
+
+    segments = bash_permission_segments(cmd)
+    if len(segments) > 1:
+        for segment in segments:
+            seg_deny = _segment_content_decision(
+                segment, registry, PermissionRuleBehavior.DENY
+            )
+            if seg_deny is not None:
+                return seg_deny
+
+    full_ask = matcher.match_ask("Bash", cmd)
+    if full_ask is not None:
+        return full_ask
+
+    if len(segments) > 1:
+        first_ask: AuthorizationDecision | None = None
+        for segment in segments:
+            seg_ask = _segment_content_decision(
+                segment, registry, PermissionRuleBehavior.ASK
+            )
+            if seg_ask is not None and first_ask is None:
+                first_ask = seg_ask
+        if first_ask is not None:
+            return first_ask
+
+    if len(segments) == 1:
+        return _segment_content_decision(
+            segments[0], registry, PermissionRuleBehavior.DENY
+        ) or _segment_content_decision(
+            segments[0], registry, PermissionRuleBehavior.ASK
+        )
+    return None
+
+
+__all__ = ["bash_permission_segments", "evaluate_bash_inner_content_rules"]

langchain_agentx/tools/bash/command_allow_rules.py

@@ -10,9 +10,10 @@ tools/bash/command_allow_rules.py — Bash 内容级 allow 匹配（slash comman
 
 from __future__ import annotations
 
-import fnmatch
 from typing import TYPE_CHECKING
 
+from langchain_agentx.tools.bash.shell_rule_matching import match_shell_permission_rule
+
 from langchain_agentx.tool_runtime.models import AuthorizationDecision, ToolExecutionContext
 from langchain_agentx.tool_runtime.permission_context import get_command_bash_allow_rules
 from langchain_agentx.tool_runtime.permission_rule_matcher import RegistryPermissionMatcher
@@ -23,27 +24,24 @@ from langchain_agentx.tool_runtime.permission_rules import (
 )
 from langchain_agentx.tools.bash.read_only_validation import BashReadOnlyClassifier
 
+from langchain_agentx.tool_runtime.policy import PolicyEngine, resolve_default_policy_engine
+
 if TYPE_CHECKING:
     from langchain_agentx.tool_runtime.policy import DefaultPolicyEngine
 
 
 def bash_command_matches_allow_rule(command: str, rule_content: str) -> bool:
-    """CC prefix:* 与简单 fnmatch 子集。"""
+    """CC shellRuleMatching（prefix / wildcard / exact）。"""
     cmd = command.strip()
     pattern = rule_content.strip()
     if not cmd or not pattern:
         return False
-
-    if pattern.endswith(":*"):
-        prefix = pattern[:-2].rstrip()
-        if not prefix:
-            return False
-        return cmd == prefix or cmd.startswith(f"{prefix} ")
-
-    if "*" in pattern or "?" in pattern or "[" in pattern:
-        return fnmatch.fnmatch(cmd, pattern)
-
-    return cmd == pattern or cmd.startswith(f"{pattern} ")
+    return match_shell_permission_rule(
+        pattern,
+        cmd,
+        match_mode="prefix",
+        is_compound=False,
+    )
 
 
 def try_command_allow_decision(
@@ -84,13 +82,14 @@ def cliarg_bash_has_content_allow_without_bare_tool(
 def try_registry_bash_content_allow_decision(
     command: str,
     ctx: ToolExecutionContext,
-    policy_engine: DefaultPolicyEngine | None,
+    policy_engine: PolicyEngine | None,
 ) -> AuthorizationDecision | None:
     """cliArg/settings 等内容级 Bash allow（CC bashPermissions prefix allow，path 通过后）。"""
-    if policy_engine is None:
+    engine = resolve_default_policy_engine(policy_engine)
+    if engine is None:
         return None
     registry = build_permission_rule_registry(
-        policy_config=policy_engine._config,
+        policy_config=engine._config,
         session_store=ctx.session_store,
         workspace_root=ctx.workspace_root,
         agent_home_segment=ctx.agent_home_segment,
@@ -99,18 +98,65 @@ def try_registry_bash_content_allow_decision(
     return matcher.match_allow("Bash", command.strip())
 
 
+def registry_has_cliarg_bash_allow(registry: PermissionRuleRegistry) -> bool:
+    for rule in registry.iter_rules(PermissionRuleBehavior.ALLOW):
+        if rule.source_name == "cliArg" and rule.tool_name == "Bash":
+            return True
+    return False
+
+
+def promote_unscoped_bash_passthrough_to_ask(
+    decision: AuthorizationDecision,
+    *,
+    command: str,
+    ctx: ToolExecutionContext,
+    policy_engine: PolicyEngine | None,
+) -> AuthorizationDecision:
+    """无 cliArg Bash allow 时，write_roots 静默 allow → ask（对齐 CC passthrough）。"""
+    engine = resolve_default_policy_engine(policy_engine)
+    if engine is None or decision.behavior != "allow":
+        return decision
+    if _READ_ONLY_CLASSIFIER.classify(
+        command.strip(),
+        shell_ops_already_resolved=True,
+    ).is_read_only:
+        return decision
+    if decision.policy_id != "write_roots":
+        return decision
+    registry = build_permission_rule_registry(
+        policy_config=engine._config,
+        session_store=ctx.session_store,
+        workspace_root=ctx.workspace_root,
+        agent_home_segment=ctx.agent_home_segment,
+    )
+    if registry_has_cliarg_bash_allow(registry):
+        return decision
+    if cliarg_bash_has_content_allow_without_bare_tool(registry):
+        return decision
+    return AuthorizationDecision(
+        behavior="ask",
+        message=decision.message,
+        policy_id="bash_passthrough",
+        ask_prompt=(
+            decision.ask_prompt
+            or f"Allow Bash command?\n{command.strip()}"
+        ),
+    )
+
+
 def promote_unmatched_cliarg_content_only_allow_to_ask(
     decision: AuthorizationDecision,
     *,
     command: str,
     ctx: ToolExecutionContext,
-    policy_engine: DefaultPolicyEngine | None,
+    policy_engine: PolicyEngine | None,
 ) -> AuthorizationDecision:
     """roots 内 silent allow → ask（仅 cliArg 有 Bash(pattern) 且无裸 Bash 时）。"""
-    if policy_engine is None or decision.behavior != "allow" or decision.policy_id:
+    engine = resolve_default_policy_engine(policy_engine)
+    if engine is None or decision.behavior != "allow" or decision.policy_id:
         return decision
     registry = build_permission_rule_registry(
-        policy_config=policy_engine._config,
+        policy_config=engine._config,
         session_store=ctx.session_store,
         workspace_root=ctx.workspace_root,
         agent_home_segment=ctx.agent_home_segment,

langchain_agentx/tools/bash/shell_rule_matching.py

@@ -0,0 +1,143 @@
+"""
+tools/bash/shell_rule_matching.py — CC shellRuleMatching.ts 对齐（Phase D）
+
+职责：
+    prefix :*、wildcard（含 \\* / \\\\ 转义）、``git *`` 尾 wildcard 可选参数语义。
+
+链路位置：
+    command_allow_rules.bash_command_matches_permission_rule。
+"""
+
+from __future__ import annotations
+
+import re
+from dataclasses import dataclass
+from typing import Literal
+
+_ESCAPED_STAR = "\x00ESCAPED_STAR\x00"
+_ESCAPED_BACKSLASH = "\x00ESCAPED_BACKSLASH\x00"
+
+
+def permission_rule_extract_prefix(permission_rule: str) -> str | None:
+    m = re.match(r"^(.+):\*$", permission_rule.strip())
+    return m.group(1) if m else None
+
+
+def has_wildcards(pattern: str) -> bool:
+    text = pattern.strip()
+    if text.endswith(":*"):
+        return False
+    i = 0
+    while i < len(text):
+        if text[i] == "*":
+            backslashes = 0
+            j = i - 1
+            while j >= 0 and text[j] == "\\":
+                backslashes += 1
+                j -= 1
+            if backslashes % 2 == 0:
+                return True
+        i += 1
+    return False
+
+
+def match_wildcard_pattern(
+    pattern: str,
+    command: str,
+    *,
+    case_insensitive: bool = False,
+) -> bool:
+    """对齐 CC ``matchWildcardPattern``（含 trailing `` *`` → optional args）。"""
+    trimmed = pattern.strip()
+    processed = ""
+    i = 0
+    while i < len(trimmed):
+        ch = trimmed[i]
+        if ch == "\\" and i + 1 < len(trimmed):
+            nxt = trimmed[i + 1]
+            if nxt == "*":
+                processed += _ESCAPED_STAR
+                i += 2
+                continue
+            if nxt == "\\":
+                processed += _ESCAPED_BACKSLASH
+                i += 2
+                continue
+        processed += ch
+        i += 1
+
+    escaped = re.sub(r"[.+?^${}()|\[\]\\'\"]", r"\\\g<0>", processed)
+    with_wildcards = escaped.replace("*", ".*")
+    regex_body = with_wildcards.replace(_ESCAPED_STAR, r"\*").replace(
+        _ESCAPED_BACKSLASH, r"\\"
+    )
+
+    unescaped_stars = processed.count("*")
+    if regex_body.endswith(" .*") and unescaped_stars == 1:
+        regex_body = regex_body[:-3] + "( .*)?"
+
+    flags = re.DOTALL
+    if case_insensitive:
+        flags |= re.IGNORECASE
+    return re.fullmatch(f"^{regex_body}$", command, flags=flags) is not None
+
+
+@dataclass(frozen=True)
+class ShellPermissionRule:
+    kind: Literal["exact", "prefix", "wildcard"]
+    value: str
+
+
+def parse_permission_rule(rule_content: str) -> ShellPermissionRule:
+    text = rule_content.strip()
+    prefix = permission_rule_extract_prefix(text)
+    if prefix is not None:
+        return ShellPermissionRule(kind="prefix", value=prefix)
+    if has_wildcards(text):
+        return ShellPermissionRule(kind="wildcard", value=text)
+    return ShellPermissionRule(kind="exact", value=text)
+
+
+def match_shell_permission_rule(
+    rule_content: str,
+    command: str,
+    *,
+    match_mode: Literal["exact", "prefix"] = "prefix",
+    is_compound: bool = False,
+) -> bool:
+    """单条 Bash 内容规则对单段 command 的匹配（CC ``bashPermissionRule`` 分支）。"""
+    cmd = command.strip()
+    if not cmd:
+        return False
+    parsed = parse_permission_rule(rule_content)
+
+    if parsed.kind == "exact":
+        return parsed.value == cmd
+
+    if parsed.kind == "prefix":
+        if match_mode == "exact":
+            return parsed.value == cmd
+        if is_compound:
+            return False
+        prefix = parsed.value
+        if cmd == prefix:
+            return True
+        if cmd.startswith(prefix + " "):
+            return True
+        xargs_prefix = "xargs " + prefix
+        if cmd == xargs_prefix or cmd.startswith(xargs_prefix + " "):
+            return True
+        return False
+
+    if match_mode == "exact":
+        return False
+    if is_compound:
+        return False
+    return match_wildcard_pattern(parsed.value, cmd)
+
+
+__all__ = [
+    "match_shell_permission_rule",
+    "match_wildcard_pattern",
+    "parse_permission_rule",
+]

langchain_agentx/tools/bash/tool.py

@@ -1034,7 +1034,17 @@ class BashRuntimeTool(RuntimeTool):
             return decision
 
         final = self._authorize_sed_segment(command=command, ctx=ctx, cwd=cwd) or decision
-        return promote_unmatched_cliarg_content_only_allow_to_ask(
+        final = promote_unmatched_cliarg_content_only_allow_to_ask(
+            final,
+            command=command,
+            ctx=ctx,
+            policy_engine=self._policy,
+        )
+        from langchain_agentx.tools.bash.command_allow_rules import (
+            promote_unscoped_bash_passthrough_to_ask,
+        )
+
+        return promote_unscoped_bash_passthrough_to_ask(
             final,
             command=command,
             ctx=ctx,

langchain_agentx/tools/skill/registry_permission.py

@@ -0,0 +1,99 @@
+"""
+tools/skill/registry_permission.py — Skill 内容级 deny/allow（CC SkillTool.checkPermissions · Phase D）
+
+职责：
+    Skill(name) / Skill(prefix:*) 与 registry 规则匹配。
+
+链路位置：
+    SkillRuntimeTool.run_l1_permission_check（frontmatter 约束之前）。
+"""
+
+from __future__ import annotations
+
+from typing import TYPE_CHECKING, Any
+
+from langchain_agentx.tool_runtime.models import AuthorizationDecision
+from langchain_agentx.tool_runtime.permission_decision import (
+    attach_decision_reason,
+    make_other_decision_reason,
+)
+from langchain_agentx.tool_runtime.permission_rule_matcher import RegistryPermissionMatcher
+from langchain_agentx.tool_runtime.permission_rules import build_permission_rule_registry
+from langchain_agentx.tools.bash.shell_rule_matching import match_shell_permission_rule
+
+if TYPE_CHECKING:
+    from langchain_agentx.tool_runtime.models import ToolExecutionContext
+
+
+def skill_permission_rule_content(skill_name: str) -> str:
+    text = skill_name.strip()
+    if text.startswith("/"):
+        text = text[1:]
+    return text
+
+
+def skill_rule_content_matches(*, skill_name: str, rule_content: str) -> bool:
+    """对齐 CC ``ruleMatches``：精确或 ``prefix:*``。"""
+    command_name = skill_permission_rule_content(skill_name)
+    normalized_rule = rule_content.strip()
+    if normalized_rule.startswith("/"):
+        normalized_rule = normalized_rule[1:]
+    if normalized_rule == command_name:
+        return True
+    if normalized_rule.endswith(":*"):
+        prefix = normalized_rule[:-2]
+        return command_name.startswith(prefix)
+    return match_shell_permission_rule(
+        normalized_rule, command_name, match_mode="prefix"
+    )
+
+
+def evaluate_skill_registry_permission(
+    skill_name: str,
+    ctx: ToolExecutionContext,
+    policy_engine: Any,
+) -> AuthorizationDecision | None:
+    if policy_engine is None:
+        return None
+    registry = build_permission_rule_registry(
+        policy_config=policy_engine._config,
+        session_store=ctx.session_store,
+        workspace_root=ctx.workspace_root,
+        agent_home_segment=ctx.agent_home_segment,
+    )
+    target = skill_permission_rule_content(skill_name)
+    matcher = RegistryPermissionMatcher(registry)
+    for match_fn in (matcher.match_deny, matcher.match_ask, matcher.match_allow):
+        matched = match_fn("Skill", target)
+        if matched is not None:
+            return matched
+    return None
+
+
+def skill_default_ask_decision(skill_name: str) -> AuthorizationDecision:
+    target = skill_permission_rule_content(skill_name)
+    suggestions = (
+        {
+            "type": "addRules",
+            "destination": "localSettings",
+            "behavior": "allow",
+            "rules": [{"toolName": "Skill", "ruleContent": target}],
+        },
+    )
+    decision = AuthorizationDecision(
+        behavior="ask",
+        ask_prompt=f"Allow skill {target}?",
+        policy_id="skill_default",
+        metadata={"suggestions": suggestions},
+    )
+    return attach_decision_reason(
+        decision,
+        make_other_decision_reason("Skill default permission prompt"),
+    )
+
+
+__all__ = [
+    "evaluate_skill_registry_permission",
+    "skill_default_ask_decision",
+    "skill_rule_content_matches",
+]

langchain_agentx/tools/skill/source_paths.py

@@ -61,6 +61,26 @@ def resolve_managed_skills_dir(agent_home_segment: str) -> Path:
     return resolve_managed_settings_root() / segment / "skills"
 
 
+def resolve_skill_read_roots(
+    workspace_cfg: ResolvedAgentStateConfig,
+    *,
+    project_skills_dir: Path | None = None,
+) -> tuple[Path, ...]:
+    """Skill 发现目录绝对路径（与 ``resolve_skill_source_specs`` 同源，去重保序）。"""
+    seen: set[Path] = set()
+    roots: list[Path] = []
+    for spec in resolve_skill_source_specs(
+        workspace_cfg,
+        project_skills_dir=project_skills_dir,
+    ):
+        resolved = spec.skills_dir.expanduser().resolve()
+        if resolved in seen:
+            continue
+        seen.add(resolved)
+        roots.append(resolved)
+    return tuple(roots)
+
+
 def resolve_skill_source_specs(
     workspace_cfg: ResolvedAgentStateConfig,
     *,
@@ -83,6 +103,7 @@ __all__ = [
     "SourcedSkillEntry",
     "policy_skills_disabled",
     "resolve_managed_skills_dir",
+    "resolve_skill_read_roots",
     "resolve_skill_source_specs",
     "resolve_user_skills_dir",
 ]

langchain_agentx/tools/skill/tool.py

@@ -187,6 +187,24 @@ class SkillRuntimeTool(RuntimeTool):
                 ),
             )
 
+        from langchain_agentx.tools.skill.registry_permission import (
+            evaluate_skill_registry_permission,
+        )
+
+        registry_decision = evaluate_skill_registry_permission(
+            inp.skill_name,
+            ctx,
+            self._policy,
+        )
+        if registry_decision is not None:
+            if registry_decision.behavior == "allow":
+                pass
+            else:
+                return L1PermissionResult(
+                    outcome=registry_decision.behavior,
+                    decision=registry_decision,
+                )
+
         local = self._constraint_evaluator.evaluate(cmd.frontmatter)
         if local.behavior != "allow":
             return L1PermissionResult(outcome=local.behavior, decision=local)

langchain_agentx/tools/webfetch/registry_permission.py

@@ -40,8 +40,32 @@ def webfetch_permission_rule_content(url: str) -> str:
 
 
 def webfetch_rule_content_matches(*, target: str, rule_content: str) -> bool:
-    """WebFetch 内容规则：target 与 rule 均为 ``domain:host`` 或 ``input:…``。"""
-    return target.strip().lower() == rule_content.strip().lower()
+    """WebFetch 内容规则：``domain:host`` 精确或 ``domain:*.example.com`` wildcard（Phase D）。"""
+    t = target.strip().lower()
+    r = rule_content.strip().lower()
+    if t == r:
+        return True
+    if not r.startswith("domain:") or not t.startswith("domain:"):
+        return False
+    host_pattern = r[len("domain:") :]
+    host_target = t[len("domain:") :]
+    if "*" not in host_pattern and "?" not in host_pattern:
+        return False
+    from langchain_agentx.tools.bash.shell_rule_matching import match_wildcard_pattern
+
+    return match_wildcard_pattern(host_pattern, host_target)
+
+
+def webfetch_allow_suggestions(rule_content: str) -> tuple[dict[str, object], ...]:
+    """对齐 CC WebFetchTool ``buildSuggestions``（L3 ``metadata.suggestions``）。"""
+    return (
+        {
+            "type": "addRules",
+            "destination": "localSettings",
+            "behavior": "allow",
+            "rules": [{"toolName": "WebFetch", "ruleContent": rule_content}],
+        },
+    )
 
 
 def evaluate_webfetch_registry_permission(
@@ -60,6 +84,16 @@ def evaluate_webfetch_registry_permission(
     for match_fn in (matcher.match_deny, matcher.match_ask, matcher.match_allow):
         matched = match_fn("WebFetch", target)
         if matched is not None:
+            if matched.behavior == "ask":
+                meta = dict(matched.metadata or {})
+                meta.setdefault("suggestions", webfetch_allow_suggestions(target))
+                return AuthorizationDecision(
+                    behavior=matched.behavior,
+                    message=matched.message,
+                    policy_id=matched.policy_id,
+                    ask_prompt=matched.ask_prompt,
+                    metadata=meta,
+                )
             return matched
     decision = AuthorizationDecision(
         behavior="ask",
@@ -67,6 +101,7 @@ def evaluate_webfetch_registry_permission(
             "Claude requested permissions to use WebFetch, but you haven't granted it yet."
         ),
         policy_id="webfetch_default",
+        metadata={"suggestions": webfetch_allow_suggestions(target)},
     )
     return attach_decision_reason(
         decision,

{langchain_agentx_python-2.2.9.dist-info → langchain_agentx_python-2.3.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: langchain-agentx-python
-Version: 2.2.9
+Version: 2.3.1
 Summary: LangChain/LangGraph-based agent utilities for CodeBaseX.
 Author-email: GoodMood2008 <GoodMood2008@users.noreply.github.com>
 License: Apache License

{langchain_agentx_python-2.2.9.dist-info → langchain_agentx_python-2.3.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-langchain_agentx/__init__.py,sha256=sLs2vKbNQCEmhW-uC3NdfDAK1zHUjcNzPxy1y2UPlqg,1614
+langchain_agentx/__init__.py,sha256=89oyf7kdDyMvgQvOwz2Ud0jqlfoa9LoiieytUKz2w0w,1614
 langchain_agentx/command/__init__.py,sha256=Ej260S5uFQcmEtGZQG_NH7BYjHoStrpBLtGUsBTxyZk,631
 langchain_agentx/command/allowed_tools.py,sha256=TVA0VM8rm98H-QbLK_GRiX5RhEAZFxKawliMi4kk96A,3359
 langchain_agentx/command/context.py,sha256=DIGOGPBw5UGDBm0WNNJlKx1h_9rCRmcdROv4DT61Qug,731
@@ -68,7 +68,7 @@ langchain_agentx/loop/exit/terminal.py,sha256=_DAZk-kS4Xd0nxMlayLo60-uj1Y5ozgBjL
 langchain_agentx/loop/exit/withheld_error.py,sha256=LfX3j7Rgd9VoMzlz7GOs9TPuRe7RXr_Gxweyotx3tqQ,1846
 langchain_agentx/loop/graph/__init__.py,sha256=9pUUqn7G87n3lV45iYIU24j0wcTHyCD--SSdtv3urh4,136
 langchain_agentx/loop/graph/builtin_loop_control.py,sha256=31o4H6SDGC_vECSliXecuVEnzlD1ahlVZ5JzEpxYY04,9248
-langchain_agentx/loop/graph/factory.py,sha256=TthwQtNiOeT5K-bgBhuW89yrkdP6iyYXCcL4tn-puJk,103958
+langchain_agentx/loop/graph/factory.py,sha256=mw2nJUddW5uV2oEi0-tt59eJ65JNQVZLM4pCwINyAY4,104396
 langchain_agentx/loop/graph/graph_edges.py,sha256=kW6Npx-nMIPzcaisCxVPkTwf5Y9GOKy1NWCNkJWeJBQ,47370
 langchain_agentx/loop/graph/reactive_compact_node.py,sha256=633b5hTnR3BK8GBEKWhzOwGB0BQrVRKozNxDomWFjLo,8762
 langchain_agentx/loop/graph/runtime_tools_node.py,sha256=wQkbc0ophyefpPZEc0q1vKoJOIdS4S6d6hSsrkdRLDk,7387
@@ -404,10 +404,10 @@ langchain_agentx/tool_runtime/denial_tracking_bridge.py,sha256=qssnZ_tzCIrDeJvtx
 langchain_agentx/tool_runtime/errors.py,sha256=Ed1FMjBdPfr0WG-YwLIm_7jokl9k_DjHFNiewZTeQfg,8883
 langchain_agentx/tool_runtime/failure_event_emitter.py,sha256=C7c4Gc7Vo_R6_ah2Xxa2eso7l9Iuz_KTgRV0j0B08rA,10467
 langchain_agentx/tool_runtime/identical_call_cache.py,sha256=v8WWuTHWR5ThujcMO4Ty28mZS_w-JN24267fZ4PHWK8,3865
-langchain_agentx/tool_runtime/inner_permission_chain.py,sha256=SSr45DuwiuKxoyb3r7DdrRu7YUFzKIWBCmTYhBKFO68,17594
+langchain_agentx/tool_runtime/inner_permission_chain.py,sha256=50wYXRu7Hi-rvDiI2QxSLC4uBAsJwG3Vp-v3AutLY4E,17629
 langchain_agentx/tool_runtime/limits.py,sha256=imE1IetmyKQM82INR0VkP3qZNM4bjUJuf1CG5BkY0uw,356
-langchain_agentx/tool_runtime/loader.py,sha256=ZeT-xIB6TDkehqyYWx1gkvI0aKx9_xKDKJhqyIvlAvw,9397
-langchain_agentx/tool_runtime/loop_loader.py,sha256=C_4T9XxlDmKaTzGv4MO6mJuR-rd6uueb1ZWwEKvvFaE,9087
+langchain_agentx/tool_runtime/loader.py,sha256=vT1_1QoBCpDGhe9sWRqgDZBcuErF35rAcOAENDrUcCI,9452
+langchain_agentx/tool_runtime/loop_loader.py,sha256=H8QKRmoi3ni-8vkyx90W2zfC4quDOfnNTc3d4ote4hM,9615
 langchain_agentx/tool_runtime/loop_runtime_context.py,sha256=HBZMdtKD7MpU8o7JmURFZGPTfxr2aFFlFF2nBZR_n8s,3613
 langchain_agentx/tool_runtime/messages.py,sha256=Fp-ZiLAbOQAQa8uIv-owE8PXtWyhpYSXxtzy3PVbKSw,3631
 langchain_agentx/tool_runtime/models.py,sha256=cO9EgLKPXiktHl_xXtBwLQrCo6mj4tbT4WoPmuFLE0w,20345
@@ -419,14 +419,14 @@ langchain_agentx/tool_runtime/permission_context.py,sha256=ReVV2kjVWAPTsPaYXxRB-
 langchain_agentx/tool_runtime/permission_decision.py,sha256=-dWuC60MV6PYgHHOsSxr6Qad8Mm3qgMuh6nkzM87LO4,10280
 langchain_agentx/tool_runtime/permission_orchestrator.py,sha256=nwx76k74aAFgo63tfkoi6zUJTj9-10tnQzj03VYqFuw,4637
 langchain_agentx/tool_runtime/permission_rule_matcher.py,sha256=z4VesjyvvEry-L2U1VsrJB3SR6wtaG8OOuhvftsvj9U,4725
-langchain_agentx/tool_runtime/permission_rules.py,sha256=Aw4qTckMCpQDZpGeAHkRS4fON3ixWU9B5B9W6D2OlMg,19435
+langchain_agentx/tool_runtime/permission_rules.py,sha256=2N66xdR9khrzRY_1OCKsv05oAwWyf45e546NUwC_7hg,19709
 langchain_agentx/tool_runtime/permission_settings_loader.py,sha256=Xu6dso0ghh4pb7Puf8nj20nXxjGeQvL4kIGycavwG_o,5624
 langchain_agentx/tool_runtime/permission_settings_sync.py,sha256=g6TvjWwa7D0kw5rDznPsoMv7xylESPOyWA2vZW4HDm0,4590
 langchain_agentx/tool_runtime/permission_snapshot.py,sha256=xFoi9fIcZjSw_zrIoyglneM-vJsDOLCEjiVoazr5Ack,1947
 langchain_agentx/tool_runtime/pipeline.py,sha256=cNC8FzeBtfNo8I02wXsaBbbpwxbVXu67eRnr_OfEU3Y,53104
-langchain_agentx/tool_runtime/policy.py,sha256=PLk_-5wu69_Gjqig0pj71brcu6VfLvGSIHsAUHOiYIQ,30068
+langchain_agentx/tool_runtime/policy.py,sha256=CZvkFS9m28q1txTz5MTltKGouMQZJnRVyz8DEfRewYA,30892
 langchain_agentx/tool_runtime/policy_decorator.py,sha256=XWbgh_TRlPJ-J-RFo1FKjIN_n_Z9rtLTfSwBQoyLTTg,2264
-langchain_agentx/tool_runtime/process_loader.py,sha256=1YMn6ntnpdbIHJbO7wF1xuz7gNKYxK0UJAOxq96dZX4,6166
+langchain_agentx/tool_runtime/process_loader.py,sha256=qpgfRIla7Tyvbf9FcwGo5Z8x_ymNdMBxrx7OrZAQpzA,6889
 langchain_agentx/tool_runtime/prompt_context.py,sha256=Dw3Qs8yWwT7dv-ZVHKnQxtPPKQXGySOQpwH4sstfsjE,3233
 langchain_agentx/tool_runtime/read_ignore_patterns.py,sha256=l4kNulVDaOdQxcs4FeC2DT6k3172D4hgeafEbqGGvTw,3034
 langchain_agentx/tool_runtime/read_permission.py,sha256=rwH7NEtL57aUKXVjSf6hMOOvEWOayNFyvI_SNoNCHPA,9284
@@ -532,9 +532,10 @@ langchain_agentx/tools/bash/ast_security.py,sha256=6DFd_TwT986dbGkKT3UnDIZioBdmi
 langchain_agentx/tools/bash/auto_mode_adapter.py,sha256=7-yb_kGmpytBYkD2Hn5YWPIceo_YN4PatEKj8O7HKsM,4243
 langchain_agentx/tools/bash/backend.py,sha256=E0DMBAENZLUSLvuEh6RubNJ6iCVnx1d2VGsQzVuLA5k,65361
 langchain_agentx/tools/bash/bash_hardening.py,sha256=KEYKRC7kS_to4mzXuChvCmOIIb4dSUkOb9K1MBDtWDc,29296
+langchain_agentx/tools/bash/bash_registry_content.py,sha256=YHE3PwuLBeFrEux4xNaDZjJpYtUSMFPLYr6A7g-fFxk,3569
 langchain_agentx/tools/bash/bash_runtime_contract.py,sha256=s8vrvMl7405KLGw2hPFbzlzWohm5JX3c9cImMBgqh8I,1511
 langchain_agentx/tools/bash/boundary_check.py,sha256=k9Bv-baIAUDE3-c_Brw3VSXXYMv_g3lTM0mabIadnwc,8822
-langchain_agentx/tools/bash/command_allow_rules.py,sha256=-1m-yzTCEBHnomeliejUs-CR9yBr9SqtczKoLZIZKsc,5950
+langchain_agentx/tools/bash/command_allow_rules.py,sha256=aIXxnb4tD3fDWqADTKAgNaN5DP8TqbMeFw0NxfFtFQQ,7562
 langchain_agentx/tools/bash/cwd_reporter.py,sha256=mASbKWLb4MiX4zLKY3w1ocIdfhmwj5KRgX4OW_PcAns,2642
 langchain_agentx/tools/bash/events.py,sha256=xDpPA3zhne2cnlYTmiiPTsV423-h-Nw-VKDR_rlnbGE,6065
 langchain_agentx/tools/bash/l1_decision_reason.py,sha256=MOL9HBBpJEgypuTiYdNojQBl8eIsTwRge5CtGeYRJKI,5365
@@ -557,8 +558,9 @@ langchain_agentx/tools/bash/semantic_matrix.py,sha256=stvsudu8mGjS1JJCawMAUKabt-
 langchain_agentx/tools/bash/semantics.py,sha256=pkf4URTulAOVL7m04Rq9JJF7z0J2mTEsGWrjyoY9r6o,5769
 langchain_agentx/tools/bash/shell_locator.py,sha256=AUnCZS8gmZurCs8rL4y0MMOS9UZimfg5rQ5At38mZKU,6296
 langchain_agentx/tools/bash/shell_quoting.py,sha256=K4JLVGwU8VpdQzfQB1o3xsq4HoCKHew1pry8hHChcoA,4498
+langchain_agentx/tools/bash/shell_rule_matching.py,sha256=uYEKg2C5M1r0eh3L4b5NCML1Gj2UBdIXeL_u2A6_RyM,3981
 langchain_agentx/tools/bash/task_runtime.py,sha256=hikVC9YugtvpLf4nDaPlX_GFem1YQvDRwN0ShRflUYU,3568
-langchain_agentx/tools/bash/tool.py,sha256=xhuFynhBg4Vcar3WjLoJptlYPoqRnkFiV_lQRi0l6T0,46387
+langchain_agentx/tools/bash/tool.py,sha256=O8wDLMsPM9ryx_BfKo_SaGtlyRb7UyUxDAmOEgUgIek,46699
 langchain_agentx/tools/bash/windows_shell_quoting.py,sha256=0RzLnTKyFrJ536QzqPZvSyUcQWN794XRlAq2RdHeKHo,1615
 langchain_agentx/tools/edit/__init__.py,sha256=PiiOHUODUzTRQxxPdE7ZMTjd3vfdzm9LEcn1lpVtg8o,203
 langchain_agentx/tools/edit/backend.py,sha256=JrikYafZDGMQ2JjXRxbnv1VSHVGRUdLmZN__nnqkM9o,3159
@@ -618,9 +620,10 @@ langchain_agentx/tools/skill/paths_matcher.py,sha256=J4SOBThray_72mrYiQUfJ5Icu6T
 langchain_agentx/tools/skill/plugin_loader.py,sha256=qT0VcIWkKFmRGGH8-e_f4y1XIpjY71TVbnZwnu2M9_M,1191
 langchain_agentx/tools/skill/policy.py,sha256=SFlW627gyo_-wyIppAqoytBmrLPlSGw-mbR00gjOJQY,1541
 langchain_agentx/tools/skill/prompt.py,sha256=tvSqvCGroVdloveiWIYxIPQmpESqzPAs5ZJztvHBdOI,1782
+langchain_agentx/tools/skill/registry_permission.py,sha256=ns_S6IBOdacrZcgHzCOj9rjlPOIecavF5hW-pHmalcY,3258
 langchain_agentx/tools/skill/repository_factory.py,sha256=7zDoPDZgxoR03CkmKdx9b0aUXwaH8E5LtBYQPGF26rA,1222
-langchain_agentx/tools/skill/source_paths.py,sha256=7qhErxCyDTBiGZc41i_EqMZi6aueCdY4kvMJ03g6z4s,2996
-langchain_agentx/tools/skill/tool.py,sha256=LJvXAjnEONIF0-Z2hBksEuj6qV5coId8AP99ov01pWM,19135
+langchain_agentx/tools/skill/source_paths.py,sha256=2CeVYF37JONiXrKQcogdBs0Y31p9AAMIOgGXZKnBQfE,3651
+langchain_agentx/tools/skill/tool.py,sha256=vhiwjeyST9BhsMZmKk8-Vej3JId0AxTPrQ5ebFvguG4,19711
 langchain_agentx/tools/skill/bundled/__init__.py,sha256=gaCH_mROpv0lIgLjin1VIFu-8hbP2nY1PHoF7vZt2Ns,4516
 langchain_agentx/tools/skill/bundled/prompts.py,sha256=gcaTnNRlWfHNPgO3EfZxU9vMYbOapMrAduvgaVc-_Fc,4838
 langchain_agentx/tools/skill/bundled/registry.py,sha256=oxvvFeeUzM-qVPtayVaQp5tfRiMazyln2-rCM86AYa8,6274
@@ -650,7 +653,7 @@ langchain_agentx/tools/webfetch/loader.py,sha256=QCATTqBvQHXiMVuAbGQGQeymVevDfWw
 langchain_agentx/tools/webfetch/models.py,sha256=e_k3FS_9JLekKsq1auRioLDhUFz4YNUlX3MrvnW5BE0,2561
 langchain_agentx/tools/webfetch/preapproved.py,sha256=8SjbOZdZla208oml8pzixkA-vvZ9c0kofCQ-3XQCoeQ,4312
 langchain_agentx/tools/webfetch/prompt.py,sha256=lpiAV9ftjs-M1BS6R5_L_uNAcOPJ5bJ9H-ZE2eq_5OY,3771
-langchain_agentx/tools/webfetch/registry_permission.py,sha256=5jSg_c2TuAqNGMA1_C_pSNRufN2fuOaqTOEcitjaQf8,2535
+langchain_agentx/tools/webfetch/registry_permission.py,sha256=lkJx0XhY6XOeYgM3uAsFiFEtWawE5mZMl8IyuQchYSo,3924
 langchain_agentx/tools/webfetch/summary.py,sha256=wk-5C39VoEIj9OyZtw6DOs6GYtdvPVECb80uGgVwI7w,1038
 langchain_agentx/tools/webfetch/tool.py,sha256=4qT0nH2DwC8iPEWzmnZjns8lnynXS7muc-2xCgVlbZY,9199
 langchain_agentx/tools/websearch/__init__.py,sha256=gOVwLv3X9iLUpnN5lhyLeEiovw-JDmzdqxGg7ufkIMY,950
@@ -763,8 +766,8 @@ langchain_agentx/workspace/root_grant_manager.py,sha256=W3gy8HTevbERbXqIgRcjzOXO
 langchain_agentx/workspace/tool_boundary.py,sha256=UDwX6swpSLsx9HNkYuuRRiV5o7ZZG_Bru2Yn0c5kNX8,5724
 langchain_agentx/workspace/validators.py,sha256=tQt-6TOcL8Fw7Ig5ebA9S7vGWh1rby920eFW6x8Tk9E,1439
 langchain_agentx/workspace/view.py,sha256=PGasqTaqhlD03SXXazHuw4RHfV681AIdlsYqL70pEjc,4774
-langchain_agentx_python-2.2.9.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-langchain_agentx_python-2.2.9.dist-info/METADATA,sha256=MWx8nrJ8lXDQorwBf7tximEwOMScMgBTbNOqshUd2v0,24250
-langchain_agentx_python-2.2.9.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
-langchain_agentx_python-2.2.9.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
-langchain_agentx_python-2.2.9.dist-info/RECORD,,
+langchain_agentx_python-2.3.1.dist-info/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+langchain_agentx_python-2.3.1.dist-info/METADATA,sha256=Ww83WPubbcBJqsMh8jSNRJhu7Wcx9XxRyz0AvqS1c-E,24250
+langchain_agentx_python-2.3.1.dist-info/WHEEL,sha256=51RkbunBAw4BWsgaQWTpPhg4Diwp3c9P5iaLk67Hdtg,92
+langchain_agentx_python-2.3.1.dist-info/top_level.txt,sha256=Ge284pniNt8xea0OLk2o9o32GqVpDhOYk20fwE-0xxA,17
+langchain_agentx_python-2.3.1.dist-info/RECORD,,