Jj;R.dZddlmZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z m Z ddlZddlmZmZddlmZmZmZmZdd lmZmZd gZej6d d d ZdZdZdZd'dZ d(dZ!d)dZ"d*dZ# d+ d,dZ$ddddd d-dZ%d.dZ&d/dZ'ejQd d0 d1dZ)ejQd d0 d2dZ* d3d Z+ejQd! d4 d5d"Z,ejQd# d4 d6d$Z-ejQd% d7 d8d&Z.y)9uApprovals CLI — human-in-the-loop review of pending approval requests. This module exposes the ``approvals`` Typer sub-application, which lets a local operator inspect, approve, deny and audit the approval requests produced by the security plane (``PermissionGateway`` returning ``REQUIRE_APPROVAL``). It only reads and writes approval state through :class:`ApprovalManager`; it never constructs a ``PolicyEngine``, never changes the policy mode (SAFE remains the default everywhere) and never relaxes the sandbox. Semantics this CLI deliberately surfaces instead of hiding --------------------------------------------------------- * ``approve`` / ``deny`` return ``None`` both when the request does not exist and when it is no longer ``PENDING`` (already decided, expired or cancelled). The commands therefore map that ``None`` to an explicit non-zero exit code plus a diagnostic; they never report a silent success. * ``check_expired()`` is lazy: nothing expires until it is called. The ``pending`` command calls it first so the printed listing is truthful. * A ``pending`` request is a blocking gate. ``AuthorizedExecutionService._wait_for_approval`` polls ``get_request`` in a loop, proceeds when the status resolves to ``APPROVED`` and raises ``SecurityError`` on any other terminal status (denied, expired, cancelled, missing). Approving is therefore the only way to unblock a waiting execution. * Approvals are bound to a ``request_id`` and to the recorded ``action``, ``resource`` and ``context``. There is **no cryptographic binding** between the approval and the code that will eventually run: nothing hashes or signs the execution payload, so this record alone cannot prove which concrete code an approval was spent on. That is a documented limitation of the current prototype, not a security guarantee, and the commands say so. Display of request payloads --------------------------- ``context`` and ``metadata`` are agent-supplied and may contain arbitrary data. They are rendered as JSON **unredacted** because this is a local operator's audit view; the CLI never interprets or executes them and never prints credentials it generated itself. Treat the terminal output as sensitive. ) annotationsN)UTCdatetime)Path) AnnotatedAny) open_databaseresolve_db_path)ApprovalManagerApprovalRecordApprovalRequestApprovalStatus)AuditEventTypeAuditLog approvals_app approvalszDReview, approve, deny and audit human-in-the-loop approval requests.T)namehelpno_args_is_helpz7Explicit path to the CyberBrain26 SQLite database file.z2Explicit data directory holding the database file.zCOperate on an in-process manager only (nothing is written to disk).c tjS#ttf$rGtj j dxs#tj j dxsdcYSwxYw)zDReturn the local OS user name used as the default reviewer identity.USERUSERNAMEz local-user)getpassgetuserOSErrorKeyErrorosenvirongetD/home/oem/CyberBrain26-unified/src/cyberbrain26/product/approvals.py_default_reviewerr#HsUT  X Tzz~~f%S )CS|STsAA,+A,c~|ytj|tjdj ddS)zEFormat a POSIX timestamp as ISO-8601 UTC, or ``-`` when it is absent.-)tzseconds)timespecz+00:00Z)r fromtimestampr isoformatreplace)values r" _fmt_timer.Ps: }  ! !%C 0 : :I : N V VW_ad eer!c<tj|ddtS)zRender a JSON-compatible mapping as pretty JSON. The mapping is local approval/audit data owned by the agent that raised the request. It is printed unredacted and is never interpreted or executed here. T)indent sort_keysdefault)jsondumpsstr)payloads r" _fmt_jsonr8Ws ::ga4 EEr!c (|Dcgc] }t|c}|D]0}t|D] \}}t|t||<"2djfdt|Dj g}|j djdDj |D]B}|j djfdt|Dj Ddj|Scc}w)zz _render_table..fs"Idaqwwvay)I!$c3&K|] }d|z yw)r%Nr )r>widths r"rBz _render_table..gs;53;;sc3LK|]\}}|j|ywr;r<)r>r?cellrAs r"rBz _render_table..is"SDtzz&)4SrC )len enumeratemaxjoinrstripappend)headersrowsheaderrowindexrGlinesrAs @r" _render_tablerU`s(/ 0fc&k 0F:$S> :KE4u s4y9F5M ::YYIi6HI I P P R SE LL;F;;BBDE^ TYYSIcNSSZZ\]^ 99U 1sDc |skt||}|jsd|d}tj|tjd|ddt t ||d  St t ||d  S) a~Open an :class:`ApprovalManager` on the local store. Args: db: Optional explicit database file path. data_dir: Optional data directory used to derive the default database path. persist: When ``False``, no database file is opened or written. Returns: A manager bound to the opened database, or an in-memory manager when ``persist`` is ``False``. Raises: typer.BadParameter: If ``persist`` is ``False`` and the resolved database file does not exist. Nothing could be read or decided in that case, and pretending otherwise would hide a real failure. )data_dirz,--no-persist was requested but the database a does not exist. Without persistence no approval can be read or written, and a decision taken with --no-persist cannot affect another process (such as the execution blocked on this request). Run without --no-persist, or point --db/--data-dir at the existing store.z>WARNING: --no-persist is active; decisions are not written to z; and cannot unblock a waiting execution in another process.TerrF)db_pathrWpersist)database)r existstyper BadParameterechor r )dbrWr[pathmessages r" _open_managerrdms* rH5{{}>tfE99 $$W- - LTFSE E  b8]b(cdd M"xY]$^ __r!)agent_idresourceerrormetadatac t|j} d|i} | r| j| | j|||||||| |  y)arWrite an audit event for a mutating approvals command. Read-only commands (``pending``, ``show``, ``history``) are deliberately not audited; only state changes are. Args: manager: Manager whose database receives the audit record. event_type: Audit event type for this command. actor: Identity of the operator running the command. action: Action recorded on the approval request. approval_id: The approval request id. result: Outcome label, e.g. ``approved``, ``denied`` or ``not_applied``. command: The CLI command name, stored in metadata. agent_id: Optional agent id that raised the request. resource: Optional resource the request targets. error: Optional error description when the command did not apply. metadata: Optional extra metadata; must never contain credentials. command)actorrfactionrg approval_idresultrhriN)rr\updaterecord) manager event_typerlrmrnrorkrfrgrhriauditr7s r" _record_auditrusZ@ W%% &E('2Gx  LL r!c id|jd|jjd|jjdt |jj d|jj d|j d|jd|jd |jd |jjd |jr|jjnd d |jdt|jd|jdt|jd|j d|j"d|j$dt't)d||jz diS)z8Build the JSON-serialisable view of an approval request. request_idrf agent_roleagent_trust_levelr-rmrgcontext risk_scorestatusdecisionN created_atcreated_at_iso reviewed_atreviewed_at_isoreviewerreasonri age_seconds)rwagentrfrolegetattr trust_levelrmrgrzr{r|r-r}r~r.rrrriroundrK)requestnows r"_request_payloadrs g(( GMM**  gmm((  WW]]%>%>IbIbc   '..   G$$   7??  g((  '..&&  g.>.>G$$**D  g((  )G$6$67  w**  9W%8%89  G$$  '..! " G$$# $ uScG,>,>&>?C% r!c |j|j|j|j|jj |j |jt|j|jd S)z7Build the JSON-serialisable view of an approval record.) rwrfrmrgr}r timestamp timestamp_isor) rwrfrmrgr}r-rrr.r)rqs r"_record_payloadrs^''OO--OOOO))OO%%"6#3#34--  r!pendingc Xt||| }|j}|j}tj}|rHt j t j|Dcgc]}t||c}dty|D]2} t j d| jd| jd4|st j dygd } |D cgc]t} | j| jj| j| jxsd | jd t!d || j"z d | j$xsd gv} } t j t'| | t j dt)|dycc}wcc} w)zList pending approval requests, oldest first. ``check_expired()`` runs before the listing because expiry is lazy: without it, timed-out requests would still be shown as actionable. rarWr[r0r1r3Nzexpired during this call: z (action=)zNo pending approvals.)rwrrmrgr{rrr%.2frz.1frHz= pending request(s). Decide with: approvals approve|deny )rd check_expired list_pendingtimer^r`r4r5rr6rwrmrrfrgr{rKr~rrUrI) rWra no_persistas_jsonrrexpiredrequestsrrrrOrPs r"rrsrH*nMG##%G##%H ))+C 4::JA/37JST^abc` /0B0B/C9W^^L\\]^_`  *+G&       MM " " NN    #!!#&3g0001#6 NN !c  D  JJ}Wd+, JJCM?"_`a;K s (F" %A9F'showct||| }|j|}|0tjd|ddtjd|j |}|r`t |tj}|r t|nd|d<tjtj|d t ytjd |jtjd |jjtjd |jr|jjndtjd|j j"d|j j$dtjdt'|j j(ddtjd|j*tjd|j,xsdtjd|j.dtjdt1|j2tjdt1|j4tjd|j6xsdtjd|j8xsdtjdtjt;|j<tjdtjt;|j>tjd|tjdntjd |jjtjd!|j6tjd"t1|j@tjd#|j8xsdtjd$|jtBjDk(rtjd%yy)&zEShow the full detail of one approval request and its decision record.rNApproval request zP was not found in the local store. Check the id and the --db/--data-dir options.TrXrqr0rzrequest_id : zstatus : zdecision : r%zagent : z (role=rztrust_level : r-zaction : zresource : zrisk_score : rzcreated_at : zreviewed_at : zreviewer : zreason : zcontext :zmetadata :zrecord :z7 none (no decision has been recorded for this request)z decision : z reviewer : z timestamp : z reason : z Note: this approval is bound to the request id and the recorded action/resource/context only. It is not cryptographically bound to the code that will run.zStatus PENDING blocks execution: the waiting execution proceeds only on APPROVED and raises SecurityError on any other terminal status.)#rd get_requestr^r`Exit get_recordrrrr4r5r6rwr|r-r}rrfrrrrmrgr{r.r~rrrr8rzrirrPENDING) rwrWrarrrrrrqr7s r"rrsYrH*nMG!!*-G  ~.< < jjm    +F"27DIIK"H7=OF34 4::ga=> JJ!'"4"4!567 JJ!'.."6"6!789 JJ!G,>"?!@AB JJ!)G,?,?"@!ABC JJ!'"2"2"9c!:;< JJ!'.."7C!89: JJ ! JJy)* JJ ! JJy))*+ JJ ! ~ LM &v'<'<&=>? &v&789 &y1A1A'B&CDE &v}}';&<=> JJ  ~~///  N 0r!cpt||| }|j|}|0tjd|ddtjd|j t jk7rtjd|d|j jd |d dt|tj||j|d d ||jj|jxsd d|j j tjd|dk(r$|j!|||} tj"} n#|j%|||} tj&} | tjd|d|ddt|tj||j|d d ||jj|jxsd d tjdt|| || j||dd || jj| jxsd | j(|d tjd|d|d|dt+t-j,d |dk(rtjdytjdy)zShared implementation of the ``approve`` and ``deny`` commands. Raises: typer.Exit: With code 1 when the request is missing and code 2 when it was already decided or changed state concurrently. Neither case is silent. rNrz" was not found in the local store.TrXrz is z, not pending; z was not applied. not_appliedz approvals rez request is )rlrmrnrorkrfrgrhr0approvez could not be zRd; its state changed concurrently. Run 'approvals show' to see the current status.zconcurrent state changed)r{r)rlrmrnrorkrfrgri zd by z at .zA waiting execution blocked on this request will now proceed. The approval is not cryptographically bound to the code that will run.zEA waiting execution blocked on this request will raise SecurityError.)rdrr^r`rr|rrr-rur USER_ACTIONrmrrfrgrAPPROVAL_GRANTEDdenyAPPROVAL_DENIEDr{r.r) r}rwrWrarrrrrexistingupdatedrss r"_decider\srH*nMG"":.H &zn4VW]abjjm.000  |40E0E/Foj) +    & &??"   +^^,,&&," 5 567 jjm9//*h?#44 ,,z8V<#33   |>(DL L    & &??"   +^^,,&&,"+ jjm~~1~XJ'''!!'R ' 2 2fE  JJ Jtd|||||xs t|y)zNApprove a pending request; exits non-zero if it is missing or already decided.rNrr#rwrWrarrrs r"rrs*  '%'r!rc >td|||||xs t|y)zKDeny a pending request; exits non-zero if it is missing or already decided.rNrrs r"rrs" FJ"j(:YFWFY[abr!historyc t||| }t|j|dd}|rGtjt j |Dcgc] }t|c}dty|s#tj|dyd |d ygd }|D cgc]w} | j| j| j| jxsd | jj| jt!| j"| j$xsd gy} } tjt'|| tjd t)|dycc}wcc} w)z/List recorded approval decisions, newest first.rc|jSr;)r)rs r"zhistory..s 1;;r!T)keyreverser0rNzNo approval decisions recorded.z No approval decisions for agent r)rwrfrmrgr}rrrr%rHz decision(s) recorded.)rdsorted list_recordsr^r`r4r5rr6rwrfrmrgr}r-rr.rrrUrI) rWrarrfrrrrecordsrrOrqrPs r"rrsLrH*nMGW))(39NX\]G 4::7Caq1CAWZ[\   . 4H:Q?  G*      OO MM OO "s OO ! ! OO f&& ' MM S  D  JJ}Wd+, JJCL>!789CD& s E$ $Ars#J# "! K G    O EEXTfF  &`&`&`&` &`d&*. ..  .  .  . .... .$. .b0 y!X\FJW\SX -bU-bC-bU-bQ -b  -b"-b`vY]FJW\TY 9 K9 U9  D9 U 9 R 9  9 9 xW\W\W\W\  W\  W\  W\ W\ W\ty!Y]FJW\ \^KU DU    Z ".vY]FJW\ Z\ cK cU c D cU c  c X c  c cy!X\FJW\^bSX ,:U,:C,:U,:\ ,: Q ,:  ,:",:r!