Jj UdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z ddlmZmZddlmZddlmZddlZdd lmZdd lmZdd lmZdd lmZmZmZm Z m!Z!m"Z"dd l#m$Z$ddl%m&Z&m'Z'ddl(m)Z)m*Z*ddl+m,Z,dZ-de.d<dZ/de.d<dZ0de.d<dZ1de.d<dZ2de.d<dZ3de.d<d Z4de.d!<d"Z5de.d#<eGd$d%Z6eGd&d'Z7Gd(d)eZ8dUd*Z9dVd+Z:dWd,Z;dWd-ZdYd0Z?dZd1Z@d[d2ZAdWd3ZBdWd4ZCd\d5ZDdXd6ZEdWd7ZFdWd8ZGd]d9ZHd^d:ZId_d;ZJdWd<ZKddd= d`d>ZLddd= dad?ZMd@dAdbdBZNejdCdDdEFZPePjdGejddHdIJejddKdLJejd@dMdNJejd@dOdPJf dcdQZSePjdRejddHdIJejddKdLJejd@dMdNJejd@dOdPJf dcdSZTgdTZUy)datRead-only diagnostics for the local CyberBrain26 installation. ``cyberbrain doctor`` reports the effective configuration and the Bubblewrap prerequisites of the supported local prototype. This module is strictly read-only: - it creates no directory and no database; - it never migrates, prunes, or otherwise modifies existing local state; - it never changes the policy mode and never offers to change it; - it performs, requests, or approves no action of any kind; - it does not evaluate or execute any agent request, and it does not start a sandbox in order to test it. SECRETS RULE: values of environment variables are never printed, logged, or serialized. Only *presence* flags (``True``/``False``) for a short list of conventional credential variable names are reported, and those flags are advisory only. No provider key and no endpoint value leaves this module. Honesty rule: the quality gates executed here are *configuration self-reports* produced by the installation itself, not verified security evidence. Several gate checks (notably ``no_hardcoded_secrets`` in the security gate and ``default_deny_policy`` in the architecture gate) always report ``pass`` without inspecting anything, and the agent-related security checks are skipped when no agents are supplied. The rendered output states this explicitly. One unavoidable SQLite side effect is documented rather than hidden: opening an existing WAL-mode store read-only can create or touch the ``-wal`` and ``-shm`` sidecar files. No schema, row, journal mode, or file permission is changed, and a store that does not exist is never created. The policy mode is only ever REPORTED here. SAFE remains the default and the supported mode for a local installation; any other mode is reported as a hard failure. No environment variable, configuration file, or CLI flag can switch the mode, and this module deliberately offers no such switch. ) annotationsN)Iterator)contextmanager) dataclassfield)Path)Any) __version__)SQLiteDatabase)BubblewrapExecutionProvider)DEFAULT_RETENTION_DAYSENV_WORKSPACES_ROOTresolve_data_dirresolve_db_pathretention_days_from_envworkspaces_root)ApprovalManager) AgentIdentity TrustLevel) PolicyEngine PolicyMode)QualityGateRunner) OPENAI_API_KEYANTHROPIC_API_KEYGEMINI_API_KEYMISTRAL_API_KEYCOHERE_API_KEY GROQ_API_KEYOPENROUTER_API_KEYLITELLM_API_KEYLITELLM_MASTER_KEYztuple[str, ...]_CREDENTIAL_ENV_NAMES) ztuple[int, int]MIN_PYTHON_VERSIONbwrapstrBUBBLEWRAP_BINARYiintEXPECTED_DB_FILE_MODEiEXPECTED_DATA_DIR_MODEEXPECTED_WORKSPACES_ROOT_MODEzEnvironment variable values are never printed: this report contains only presence flags (true/false) for a short list of conventional credential variable names. SECRETS_NOTE) zeCyberBrain26 is a tested local Python prototype, not a production-ready or security-certified system.aQuality gate results are configuration self-reports by the installation, not verified security evidence: the security gate check 'no_hardcoded_secrets' always passes without inspecting any file and the architecture gate check 'default_deny_policy' always passes.zRLIMIT_AS, RLIMIT_CPU and RLIMIT_FSIZE are cooperative resource limits of the child process and are NOT enforcement against hostile code.zThe sandbox applies no cgroup or process-count limit and no disk or inode quota, so process forking inside the sandbox is not bounded by the sandbox.aiA writable workspace handed to the sandbox is confined to the sanctioned root /workspaces (overridable with CYBERBRAIN_WORKSPACES_ROOT): a path that does not resolve inside that root is refused before any process is launched. Content written to a confined workspace does persist outside the disposable filesystem, and the sandbox does not clean it up.zBubblewrap execution is Linux-only; other platforms are reported as a warning and the supported execution path is unavailable there.z|Doctor never verifies a running end-to-end agent task, an LLM response, a network egress control, or a backup/restore cycle.zThe ``--scopes`` CLI option grants scopes only to the 'coder' role; it is not applied to security, evaluator, research, browser, or planner steps. This is a known limitation of the current identity_scopes schema, not a scope-gate bypass.zPresence of a credential environment variable says nothing about whether a provider is configured, reachable, or permitted; doctor contacts no provider.zReading an existing WAL-mode store can create or touch its -wal and -shm sidecar files; no schema, row, journal mode, or file permission is changed, and a missing store is never created.PROTOTYPE_NOTEScTeZdZUdZded<ded<ded<eeZded<d d Zy ) CheckResultz=A single diagnostic check row produced by :func:`run_checks`.r'namestatusdetaildefault_factorydict[str, Any]metadatacr|j|j|jt|jdS)z6Return a JSON-serializable representation of this row.r1r2r3r7)r1r2r3dictr7selfs A/home/oem/CyberBrain26-unified/src/cyberbrain26/product/doctor.pyto_dictzCheckResult.to_dicts/IIkkkkT]]+   N)returnr6) __name__ __module__ __qualname____doc____annotations__rr:r7r>r?r=r0r0s(G I K K$T:Hn: r?r0ceZdZUdZeeZded<edZded<e ddZ e dd Z d d dd Z d d dd Z y) DoctorReportzzDoctorReport.s T/5Jr?z list[str]notesc:td|jDS)z&Number of checks reported as ``fail``.c3@K|]}|jdk(sdyw)failNr2.0checks r= z&DoctorReport.failed..H1G1HsumrJr;s r=failedzDoctorReport.failedH$++HHHr?c:td|jDS)z&Number of checks reported as ``warn``.c3@K|]}|jdk(sdyw)warnrSNrTrUs r=rXz(DoctorReport.warnings..rYrZr[r;s r=warningszDoctorReport.warningsr^r?FstrictcH|jdkDry|r|jdkDryy)aReturn the overall status of the report. Args: strict: When ``True``, a ``warn`` row counts as a failure. Returns: ``"fail"`` when any check failed (or, in strict mode, warned), otherwise ``"ok"``. rrRok)r]rb)r<rds r=overall_statuszDoctorReport.overall_statuss& ;;? dmma'r?c(dddddt||j|t|j|j|j d|jDcgc]}|j c}t|jtgzd Scc}w)z>Return a JSON-serializable representation of the whole report.zcyberbrain doctorTFrc)rJr]rb) command read_onlychanges_nothingperforms_or_approves_actionspolicy_mode_report_onlysecrets_policyrdrgcountsrJrO) r-rglenrJr]rbr>rMrO)r<rdrWs r=r>zDoctorReport.to_dicts+#,1'+*"111@dkk*++ MM 59KK@5u}}@$**%6  AsBN)r@r))rdboolr@r')rdrqr@r6)rArBrCrDrrMrJrErOpropertyr]rbrgr>rFr?r=rHrHscF %d ;F ;-JKE9K IIII05 ). r?rHc8eZdZdZddddZd dZed dZy) _ReadOnlyDatabasea[A :class:`SQLiteDatabase` that can only read an existing store. Constructing the real database creates the parent directory, applies migrations, switches the journal to WAL and chmods the file. ``doctor`` must not write, so this subclass skips initialization and opens every connection in SQLite read-only (``mode=ro``) mode. Zretention_dayscjt|jj|_||_y)z:Record the location without creating or touching any file.N)r expanduserresolvepathrw)r<r{rws r=__init__z_ReadOnlyDatabase.__init__s'J))+335 ,r?cy)z>Do nothing: no migration, no WAL switch, no permission change.NrFr;s r= _initializez_ReadOnlyDatabase._initializesr?c#Kd|jd}tj|ddd}tj|_ ||j y#|j wxYww)zBYield a read-only SQLite connection and always close it afterward.file:?mode=roT@N)uritimeoutisolation_level)r{sqlite3connectRow row_factoryclose)r<r connections r=rz_ReadOnlyDatabase.connections^dii[)__SdCQUV !(       J   s?A,AA,A))A,N)r{z str | Pathrwr)r@None)r@r)r@zIterator[sqlite3.Connection])rArBrCrDr|r~rrrFr?r=rtrts-CE- Mr?rtcn t|jjdzS#t$rYywxYw)z@Return the POSIX permission bits of ``path`` as an octal string.i unavailable)octstatst_modeOSError)r{s r= _mode_stringrs5499;&&.// s %( 44cr |jj}t|dzS#t$rYywxYw)zDReturn whether the POSIX mode grants group or other read/write bits.F?)rrrrq)r{modes r=_is_world_or_group_readablers=yy{"" u  s * 66c Xtj}|jd|jd|j}t ddt d}||d}|j|jft krt ddd|d|d | St dd d|d tjd | S)zFReport the running interpreter against the declared ``>=3.11`` target..rrS)currentrequired_minimumpython_versionrRzPython z is older than the required z:+ declared in pyproject.toml (requires-python = ">=3.11").r9passz (executable: ).)sys version_infomajorminormicror%r0 executable)inforrequiredr7s r=_check_python_versionr s   D Adjj\4::,7G$Q'(*xjI??     /?rB  r?c tdddtdttj j ddtiS)z6Report the installed ``cyberbrain26`` package version.package_versionrz cyberbrain26 z imported from rversionr9)r0r r__file__rzparentrFr?r=_check_package_versionr#sD  {m?4>;Q;Q;S;Z;Z:[[\][)  r?c tj}tj}tj}|||d}|dk7rt ddd|d|d|d| St dd d |d|d | S) zCReport whether the platform supports the Bubblewrap execution path.)systemreleasemachineLinuxplatform_supportedraz Platform is   (z). The supported prototype target is Linux, so the Bubblewrap execution path is Linux-only and unavailable here; identity, policy, audit and the local store still apply.r9rzLinux z.): the Bubblewrap execution path is supported.)platformrrrr0)rrrr7s r=_check_platform_supportedr-s __ F G G*0WQXYH %vhay7)<     !y7)+YZ  r?c <t||jd}ttdd}|jst ddd|d|d| S|j st dd d |d | St j|t jt jz}t|}|j||d |st dd d|d|d| St|rt ddd|d|d|d| St ddd|d|d| S)z7Report the resolved data directory without creating it.)r{existsNdata_dirrazData directory zo does not exist yet. Doctor does not create it; the first command that writes local state creates it with mode rr9rRzData directory path  exists but is not a directory.)writabler exists (mode z) but is not writable.z is writable (mode zG) but readable by group or others; local state should stay owner-only (rrz exists, is writable, mode ) r'rrr+r0is_dirosaccessW_OKX_OKrupdater)rr7 expected_moderrs r=_check_data_dirrGsi(+H ARSH./3M ?? !(,V /$   ?? )(3RS   yy277RWW#45H  !D OO489 $XJnTFBXY   #8,!(+>tfEHHUVXZ      *EdV1M  r?c d|d}tj|dd} |jdj } |j ||dy t |dS#tj$rYywxYw#tj$rY|j ywxYw#|j wxYw#ttf$rYywxYw) zRead ``PRAGMA user_version`` from an existing database in read-only mode. Returns ``None`` when the file cannot be opened as a readable SQLite store. rrTr)rrNzPRAGMA user_versionr) rrErrorexecutefetchonerr) TypeError ValueError)db_pathrrrows r=_read_user_versionrys gYh'__SdC@   !67@@B  {c!fn3q6{ == ==  z "sFA(B B?(A>=A>B'B*&B''B**B<?CCctj}ttdd}t ||j |d}|j st ddd|d|d|d | St|}t|}|j||d |t dd d|d |d| S||k7rt dd d|d|d|d| St|rt ddd|d|d|d|d|d | St ddd|d|d|d|d | S)zFReport the expected local store file without creating or migrating it.rN)r{rexpected_schema_versiondatabaseraz Database zd does not exist yet. Doctor never creates it; the store is created on first use with schema version z and file mode rr9)r user_versionrRrzN) but could not be read as a SQLite store; PRAGMA user_version is unavailable.z has schema version z but this code expects z%; a migration is required before use.z is at schema version z (expected z) but its file mode z6 is readable by group or others; the expected mode is rz exists, schema version z ), file mode ) r CURRENT_SCHEMA_VERSIONrr*r'rr0rrrr)rexpectedrr7rrs r=_check_databasers44H-.qr2MG .."#+ H >> G9%EEMJO%a)    D%g.L OOT<@AG9N4&9DD  xG9$8G#*$IK  #7+G9$:<. *07((5a9    y 8kj dV1 . r?c |dtd}t|tst|tst ddd|d|S|dkrt ddd|d |St dd d |d td |S)zEReport the resolved retention window and reject a non-positive value.CYBERBRAIN_RETENTION_DAYSrwenv_vardefault retentionrRzResolved retention window zK is not an integer; the store requires an explicit positive number of days.r9rzI is not positive; the store requires an explicit positive number of days.rzRetention window is z3 days (CYBERBRAIN_RETENTION_DAYS, else the default zX). Retention is applied only when a caller explicitly runs pruning; doctor never prunes.)r isinstancerqr)r0)rwr7s r=_check_retentionrs).) H .$'z.#/N,^,>?FF  ,^,<=@@    ">"23123C C  r?c $tjt}t|d}|tddd|S t j |dgddd d }|jxs|jxsdj}||d<|j|d<|jdk7r tddd |d|jd|Stddd |d|d|S#t tjf$r }tddd |d |d|cYd}~Sd}~wwxYw)zReport Bubblewrap availability using only ``--version``. Bubblewrap is never asked to execute code; the sandbox is probed only by locating the binary and reading its version string. )binary resolved_pathN bubblewraprRabwrap was not found on PATH. The supported execution path fails closed without it (RuntimeError: Bubblewrap executable ... is unavailable; refusing to run code without a sandbox), so code execution is disabled on this machine. There is deliberately no unsandboxed fallback.r9z --versionTg$@F)capture_outputtextrrWzbwrap found at z but 'bwrap --version' failed: rversion_output returncoderz# but 'bwrap --version' exited with rz; 'bwrap --version' reports: ) shutilwhichr(r0 subprocessrunrSubprocessErrorstdoutstderrstripr)resolvedr7 completedexc version_texts r=_check_bubblewraprs_ ||-.H*;hWHR    NN { #  $$> (8(8>BEEGL!-H &11H\q !(+N''(+      *G ~UVW  ) Z// 0 $XJ.McURST    sCD/D D Dc  t}|j|j|j|j|j d}d|j d|dd|dd|dd |d d |d d }tdd|d|j i|S)zHReport the configured sandbox limits together with their honest caveats.)max_timeout_seconds max_memory_mbmax_cpu_secondsmax_file_size_mbmax_output_bytesz Provider 'z*' is configured with: max_timeout_seconds=rz, max_memory_mb=rz, max_cpu_seconds=rz, max_file_size_mb=rz, max_output_bytes=ra. These are the DEFAULT values from the provider constructor; doctor does not verify them at runtime. Caveats: RLIMIT_AS, RLIMIT_CPU and RLIMIT_FSIZE are cooperative resource limits of the child process and are NOT enforcement against hostile code, because a program that ignores or resets them is not stopped by them. There is no cgroup or process-count limit, so forking inside the sandbox is not bounded by the sandbox, and there is no disk or inode quota on the sandbox filesystem. A writable workspace passed to the sandbox is confined to the sanctioned root /workspaces (overridable with CYBERBRAIN_WORKSPACES_ROOT): a path that does not resolve inside that root is refused before any process is launched, so the read-write bind mount cannot expose an arbitrary host directory. Content written to a confined workspace does persist outside the disposable filesystem, and the sandbox does not clean it up.sandbox_limitsraproviderr9)r rrrrr provider_namer0)rlimitsr3s r=_check_sandbox_limitsr1s*,H';;!//#33$55$55 F X++,-%&;<=>012!"3456"#5678"#567 80  0 (  h44??  r?ctjjt}|K|j r;t |j j jtfSt|dfS)a Return the sanctioned workspaces root and a label naming its source. This mirrors the precedence of :attr:`BubblewrapExecutionProvider.allowed_workspaces_root` but creates nothing: the provider's ``ensure_workspaces_root()`` is replaced by the non-creating :func:`workspaces_root`, because ``doctor`` must never make a directory. Args: data_dir: Resolved data directory used to derive the default root. Returns: The resolved root and a short label naming where it came from. zdefault (/workspaces)) renvirongetrrrryrzr)r env_values r=_configured_workspaces_rootrWsa 23I!2IOO%&113;;=?RRR 8 $&G GGr?c t|\}}ttdd}t||t|j |ddd}d|d}|j st dd d |d |d |z| S|jst ddd|d| St|}||d<t|rt dd d |d|d|d|z| St ddd |d|d |z| S)aReport the sanctioned workspaces root without creating or modifying it. Only ``stat``-level inspection is performed: existence, directory-ness, and permission bits. No directory is created, no migration is run, and the root itself is left exactly as found. rNzAlocal_store.resolve_workspace(), called before any process launchT)r{sourcerrr enforced_byinspections_are_read_onlyzjThis root is the only tree a writable sandbox mount may live in: a workspace that does not resolve inside z+ is refused before any process is launched.rrazWorkspaces root zl does not exist yet. Doctor never creates it; the first command that needs a workspace creates it with mode z. r9rRzWorkspaces root path rrrz) but is readable by group or others; sandboxed code writes there and the content survives the sandbox, so the root should stay owner-only (z). rz exists, is a directory, mode ) rrr,r'rrr0rrr)rrootrrr7 confinementrs r=_check_workspaces_rootr ksb/x8LD&56qr:MD &++-&Z%) H ((,v-X Z ;;=""4&)M /%'23   ;;="*4&0OP    DHV"4(""4&tf=77DoSJLWX    tf$B4& Kk Y  r?c t}|j}djd|jD}t tj }|j |d|d}dt|ddj|d}|tjurQd|j d |d <td d d |j dtjj d|d|z|Std dd |j d|d|z|S)zReport the effective policy mode; anything but SAFE is a hard failure. The mode is only reported. ``doctor`` never changes it, and no environment variable, configuration file, or CLI flag switches it. , c34K|]}|jywrL)r1)rVrules r=rXz%_check_policy_mode..sE499EsT)configured_moderules_loaded_at_constructionrules_are_fixed_at_constructionsensitive_actionszISAFE mode requires human approval for every action in SENSITIVE_ACTIONS (z): z. No environment variable, configuration file, or CLI flag can switch the mode, and doctor reports the mode without offering to change it.zPolicyEngine.mode is a public attribute and can be reassigned without reloading rules; the rules reported here were loaded for z at construction time.mismatch policy_moderRzEffective PolicyEngine mode is z, not zc. A mode other than SAFE is not supported for a local installation. Rules loaded at construction: [z]. PolicyEngine.mode can be reassigned without reloading rules, so the configured value and the loaded rule set are reported separately. r9rz4 (the SAFE default). Rules loaded at construction: [z]. PolicyEngine.mode is a public attribute that can be reassigned without reloading rules, so both the configured mode and the loaded rule set are reported here. ) rrjoin list_rulessortedSENSITIVE_ACTIONSvaluerprSAFEr0)engine configured rule_names sensitiver7shareds r=_check_policy_moder!sb ^FJE1B1B1DEEJ|556I%++(2+/&  H  N 3tyy345. . ( H""8 :  1*2B2B1EV??((+,FFP\RUU      -j.>.>-AB..8\:J JMS S   r?c rtddtj}td|jD}|j |j |jj|d}|rtdddt|d | Stdd d |jjd t|d| S)zReport how built-in agents receive scopes, using a scopeless probe identity. The probe identity below carries NO scopes: doctor grants itself no permission and reports no invented scopes. zcyberbrain-doctor supervisor)agent_idrole trust_levelc32K|]}t|ywrL)r')rVscopes r=rXz&_check_agent_scopes..s?#e*?s)probe_agent_id probe_roleprobe_trust_level probe_scopes agent_scopesrRz/The doctor probe identity unexpectedly carries z3 scope(s); doctor must never hold execution scopes.r9ra*Built-in Ptah agents receive their permission scopes through AgentIdentity.scopes; this check infers no scope on their behalf. SAFE-mode identities have no execution scopes by default - a scope must be granted explicitly. The doctor probe identity 'cyberbrain-doctor' (role=supervisor, trust_level=z') was created with an empty scope set (z! scopes) and holds no permission.) rrVERIFIEDrscopesr$r%r&rr0rp)prober,r7s r=_check_agent_scopesr1s $ '' E ?%,,??L..jj"..44$  H A#lBSATUEE     !,,2234L!""C  E  r?c dt||jdd}|jstddd|d|S t||}t | j }t||d<tj|d<tddt|d|dtjdd|S#t jtttf$rR}t|jd ||d <tdd d |dt|jd ||cYd}~Sd}~wwxYw)a&Count pending human approval requests when an existing store is readable. The store is opened through a read-only connection, so no database is created, migrated, or modified. ``check_expired`` is deliberately not called because it marks requests as expired, which is a write. T)r{rrjpending_approvalsrazNo local store at zK, so there is nothing to count. Doctor never creates the store to find out.r9rv)r: errorrRzThe local store at z* could not be read for pending approvals: N pending_countapproval_timeout_secondsrz& pending human approval request(s) in zG, read through a read-only SQLite connection (default approval timeout z.0fzs). Doctor neither lists nor expires individual requests, and opening a WAL store read-only may create or touch its -wal and -shm sidecar files without changing any stored data.)r'rr0rtr list_pendingrrrr RuntimeErrortyperArpDEFAULT_TIMEOUT_SECONDS)rrwr7rpendingrs r=_check_pending_approvalsr= sY),G @P_cdH >> $$WI.11    $W^L!84AAC!$G H_+:+R+RH '(  7|nB7)LG66s;.rsp    RY04>2B"T(^DTT] > )DO#4JtJ?O>PPZ \s68zrCONFIGURATION SELF-REPORT, NOT VERIFIED SECURITY EVIDENCE: these results are produced by the installation itself. a+. Limits of these gates: the security gate check 'no_hardcoded_secrets' always passes without inspecting any file, the architecture gate check 'default_deny_policy' always passes, and the agent checks of the security gate are skipped because doctor supplies no agent list. The permission gateway is wired only to show that an object is present, and no audit log or AI firewall instance is configured here, so these gates do not prove that audit logging or filtering works. A gate reported as passing is not evidence that the control it names is effective.T)gates self_reporta[ A gate failure here reflects the configuration doctor wired, not a verified installation defect: doctor deliberately supplies no agent list, no audit log and no AI firewall instance, because opening an audit log would write to local state. A failing gate row is therefore reported as a warning, never as evidence that the named control is broken. failed_gatesz Gates reported as failing: r r warned_gatesz Gates reported with warnings: ra)rCrrun_all Exceptionr0r:rAappendrJrKr2rrLr]rMrbrJr1overall_passedr)r@rwgatewayrunnerresultsrsummaryrTrUresultrWrenderedr3r7tails r=_check_quality_gatesraHsF' 6G  F ..&') ! %'G L LJ#--!>> ---- -- --!>>"OOTZTaTaKPUZZ5<<3E3EF  $$   6#3#3"4Bv~~6Fa H I __q   6#3#3"4Bv~~6Fa H I%J&yyH  008z:? ? *1FH , #/  .tyy/F.GqII#/  1$))L2I1J!LL  }  w   4T#Y5G5G4H3%P    (s#G**H H'G>8H>Hc g}dD]"\}} t||j|$tDcic]+}|t t j j|-}}||ddd}d|rdj|ndddjtd }td |rd nd || S#t$rYwxYwcc}w)zFReport available provider adapters and credential presence flags only.))z'cyberbrain26.model_layer.litellm_clientLiteLLM)z&cyberbrain26.model_layer.ollama_clientOllama)z)cyberbrain26.model_layer.llama_cpp_clientz llama.cppFT)adapterscredential_env_presencevalues_printedpresence_is_advisory_onlyz8Model provider adapters available in this installation: r znone importablea+. These are adapters only; doctor contacts no provider and cannot determine whether a provider is reachable, authorised, or correctly configured. The project defines no canonical provider-credential environment variable, so only presence (true/false) is reported for the conventional variable names z, and no value is ever printed. A true presence flag means only that the variable is set and non-empty, not that a key is valid or authorised.model_providersrrar9) __import__rBrXr"rqrrrrr0)re module_namelabelr1presencer7r3s r=_check_model_providersrnsH  U   { #  >SSTd2::>>$/00SHS#+%)  H C"*499X 0A BCH 99* + ,-"  "   !vv  +   Ts B-0B<- B98B9rdbc.t|}t||} tt}t |}t |t r t |nt}t}tttt|t||tt!t#|t%t't)||t+||t-g} | S#t$r+}tddd|dddtd }t}Yd}~d}~wwxYw) aRun every diagnostic check and return the list of results. This is the plain, importable entry point: it does no CLI work and can be called directly from tests. It creates no directory or database, never changes the policy mode, and never performs or approves any action. Args: data_dir: Optional explicit data directory, overriding resolution. db: Optional explicit database file path, overriding resolution. Returns: One :class:`CheckResult` per check, in reporting order. )rrrRzECYBERBRAIN_RETENTION_DAYS is malformed and was rejected fail-closed: z8 The store requires an explicit positive number of days.Nrrr9)rrrr rrr)rr0rrrrrrrrr r!r1r=rarn) rrpresolved_data_dirresolved_db_pathrwretention_checkeffective_retentionrr@rJs r= run_checksrvs$)2&r4EF 56LM"+>:#-nc#BC H^ !NM !#)*()01 !13FG],?@ !F MK 5%W%OQ#'61  55sC D)!DDc0tt||S)a9Run every diagnostic check and return the aggregated report. Args: data_dir: Optional explicit data directory, overriding resolution. db: Optional explicit database file path, overriding resolution. Returns: A :class:`DoctorReport` wrapping the rows from :func:`run_checks`. ro)rJ)rHrvros r= build_reportrxs z8C DDr?Frcc gd}td|jDd}|jD]M}|j|jj dd|j d|dd |j O|jd|jd |j| j d |jd |jdt|jd|rdndd |jd|jdt|jtgzD]}|jd|dj|S)zRender a report as a plain-text table. Args: report: The report to render. strict: Whether a ``warn`` row counts as a failure. Returns: A newline-separated text block ready for printing. )z+CyberBrain26 doctor - read-only diagnosticszI(doctor changes nothing, performs no action, and never approves anything)rc3FK|]}t|jywrL)rpr1rUs r=rXzrender_text..s>@AB MM?)FOO#4KFMM@R?ST $e,A /  LL LLV\\"l^3" r$[!" 99U r?doctorzDCheck the local installation and report the effective security mode.T)r1helpno_args_is_helprWz --data-dirz#Explicit data directory to inspect.)rz--dbz)Explicit SQLite database path to inspect.z--strictzTreat WARN as FAIL.z--jsonzEmit the report as JSON.c.t||}|r;tjtj|j |dn tjt |||j|dk(rtjdy) zRun the read-only installation checks and report the effective security mode. Exits with code 1 when any check fails, or when ``--strict`` is given and any check warns. It never creates files and never changes the policy mode. rorcr)indentrRrS)codeN) rxtyperechojsondumpsr>rrgExit)rrprdas_jsonrs r=rWrW4sr8 3F 4::fnnFn;AFG ;vf56 F+v5jja  6r?mainc"t||||y)zMRun the same read-only checks as ``check``; the alias used by the parent CLI.rrprdrN)rWrs r=rrIs 867Cr?)r(r+r*r,r%r.r-r0rHrxrW doctor_apprrrv)r{rr@r')r{rr@rq)r@r0)rrr@r0)rrr@z int | None)rrr@r0)rwr r@r0)rrr@ztuple[Path, str])rrrwr)r@r0)r@rr@r )r@rrwr)r@r0)rstr | Path | Nonerprr@rI)rrrprr@rH)rrHrdrqr@r') rr'rpr'rdrqrrqr@r)VrD __future__rrrrrrrrcollections.abcr contextlibr dataclassesrrpathlibrtypingr r cyberbrain26r $cyberbrain26.data_plane.sqlite_storer 0cyberbrain26.execution_plane.bubblewrap_providerr cyberbrain26.product.local_storer rrrrr$cyberbrain26.security_plane.approvalr$cyberbrain26.security_plane.identityrr"cyberbrain26.security_plane.policyrr)cyberbrain26.security_plane.quality_gatesrr"rEr%r(r*r+r,r-r.r0rHrtrrrrrrrrrrrrr r!r1r=rCrarnrvrxrTyperrriOptionrWr__all__rFr?r=rs)"H#   $%( $?XAJGG * '.O- 3 "s"##%*s*U c 1$1h     $ 2 2  2 j:04/d0>B$N5p#LH(<~3l(V-` :M`$R#' ;; ; ;@#' EE E E"9>>U[[  O  G ELL|:_`ell4.YZ5<<z8MN ELL7QR !! ! ! !  !!( F ELL|:_`ell4.YZ5<<z8MN ELL7QR DD D D D  DD r?