Pi;|UdZddlmZddlZddlZddlZddlmZmZm Z ddl m Z e j Z e dz dz ZdZdZGd d eZd Zd Zd ZeGddZeGddZeGddZeGddZdkdZdldZdmd!Zdnd#Zdod$Zdpdqd'Zdrd*Z dsd,Z!dtd.Z"dud3Z#d4Z$d5Z%d6Z&d7Z d8Z'd9Z(d:Z)dvd<Z*d=d>dwdAZ+dvdBZ,dxdCZ-dydDZ.dzdGZ/d{dHZ0d|dIZ1d}dKZ2d~dLZ3ddMZ4ddOZ5d=dPddSZ6d{dTZ7ddVZ8d=dPddXZ9ddYZ:ddZZ;dd\Zda?dbe@dc<d=aAd@e@dd<ddeZB dddjZCdS)zDippy configuration system v1.) annotationsN) dataclassfieldreplace)Pathz.dippyconfig DIPPY_CONFIGceZdZdZdS) ConfigErrorzz_tag_rules..s(LLL!wqu555LLLrc4g|]}t|SrKrLrMs rrPz_tag_rules..s5   78GAfE 2 2 2   rc4g|]}t|SrKrLrMs rrPz_tag_rules..s5   78GAfE 2 2 2   rc4g|]}t|SrKrLrMs rrPz_tag_rules..s(TTTa71V5999TTTrc4g|]}t|SrKrLrMs rrPz_tag_rules..s5   78GAfE 2 2 2   r)r&r'r(r)r*)rr&r'r(r)r*)rrrs ``r _tag_rulesrUs LLLLLv|LLL     >uQx~~rk EG##;$%9:::$7$=$=! "8"A"ARRRe##;$%9:::#3D#9#9 $7$@$@! .w77 '& f$$;$%9:::#3D#9#9 $7$@$@! .w77 '& ...;$%9:::%%d74J44P4P&Q&QRRRRn,,;$%9:::#3D#9#9 %% 6w ? ?QQQo--;$%9:::#3D#9#9 %%!7!@!@'RRRg%%;$%9:::#3D#9#9 ""4'#J#J#JKKKKk));$%9:::  gt!4!45555i'';$%9:::#3D#9#9   eWg!F!F!FGGGGj((;$%9:::#3D#9#9   fgw!G!G!GHHHHk));$%9:::#3D#9#9 &&tGWg'N'N'NOOOOg%% u::??$%TUUU-2* l"8"F"F"g--OO!&&&&&&&,8((e##x....!!Cy!C!C!CDDD E E E OOvCCFCCaCCC D D D D D D D D E %' Y.. LL  j%00    sQT.. U!8UU!rtuple[str, bool]cp|dr|dddfS|dfS)z8Strip | anchor from pattern, return (pattern, is_exact).|NTF)endswithrstriprs rrrZsA+ss|""$$d** E>rscXg}d}|t|kr||dkr@|dzt|kr*||dz}|dvr|||dz }_||||dz }|t|kd|S)z1Unescape backslash sequences in a message string.r\rs)"rryrr)rrjoin)rresulti next_chars r _unescaperas F A c!ff** Q44<z)_expand_pattern_tildes.. s+BBQ%a((BBBBBBr)rrrs rrrs+ 88BB'--//BBB B BBrc&t||dS)z&Normalize a single token in a command.Fr)r)rr:s r_normalize_tokenr s  6 6 66rr8r7cFdfd|DS)zENormalize paths in command words and join into a string for matching.rc38K|]}t|VdSrr)rNwr:s rrz#_normalize_words..s.<<$Q,,<<<<<.s.==$Q,,======r)rr)rr:tokenss ` r_normalize_patternrs9]]__F 88====f=== = ==rcLt|d|dS)zCNormalize a redirect target path (strip trailing /, force as path).rTr)rr)rVr:s r_normalize_pathr!s# S))34 @ @ @@r re.Patterncg}d}t|}||kr||}|dkr||dz|krW||dzdkrH|d|dz }||kr&||dkr|d|dz }nM|d|dz }n1|d kr|d |dz }n|d kr|dz}||kr||d kr|dz }||kr||d kr|dz }||kr#||d kr|dz }||kr ||d k||kr-|tj||dz }nz||dz|}|d r d|ddz}|d |d |dz}n,|tj||dz }||ktjdd|zdzS)zConvert a glob pattern with ** support to a regex. ** matches zero or more path components (including /) * matches anything except / ? matches any single character except / [abc] matches character class r*rsz.*ryrz/?z[^/]*?z[^/][!]^Nrrr)rrreescapercompiler)rregexrncrclss r_glob_to_regexr&sS E A G A a%% AJ 881uqyyWQU^s22 T"""Qq55WQZ3..LL&&&FA W%%%Q #XX LL FAA #XXAA1uus**Q1uus**Qa%%GAJ#--Qa%%GAJ#--Avv RYq\\***Qa!eai(>>#&&(ABB-C ZZZZ(((E LL1 & & & FAQ a%%R :cBGGENN*S0 1 11rcd|vrtj||S|dkrdS t|}||duS#tj$rYdSwxYw)aMatch text against a glob pattern with ** support. For patterns without **, uses fnmatch (faster). For patterns with **, converts to regex for proper recursive matching: - ** matches zero or more directories - foo/**/bar matches foo/bar, foo/x/bar, foo/x/y/bar **TNF)fnmatchrmatchrerror)r]rrs r _glob_matchr]s| 7tW---$tw''{{4  ,, 8uus%A AAc:tfddDS)z6Check if pattern contains any fnmatch glob characters.c3 K|]}|vV dSrr)rNrrs rrz"_has_glob_chars..rs'++qG|++++++rz*?[)anyrs`r_has_glob_charsrps& ++++U+++ + ++rwordct||}|jD]\}}t||}||kr|cS |S)z%Resolve command word through aliases.)rr+items)rrr:normalized_wordrrnormalized_sources r_resolve_aliasruse&tS11O&,n&:&:&<&<  " l,\3?? / / /    0 Krremoter Match | NonecR|r(|s&t|d||}|g|ddz}n|}|rd|}nt||}d}|jD]}|r|j} nt |j|} d} |js5t| s&| dz} tj|| rd} nC|| krd} n:tj|| } | s#| dr|| ddk} | r-t|j |j|j |j |j }|S) z>Match command words against rules. Returns last matching rule.rrsNrF *Trrrrr)rrrr&rrr rrrr4rrrr) r8rr:rresolved_firstresolved_wordsnormalized_cmdrrulenormalized_patternmatchedprefix_patterns r _match_wordsrs V'a&#>>()E!""I5 ?.11).#>>F   G!%  !3DL#!F!F z D/2D"E"E D/$6N~~>> #555on6HIIG D1::4@@ D(,>ss,CC    {j F Mrcd|vrt||S|d}|d|d}||d}|rt||}|d|S|S)zNormalize a redirect pattern, handling ** specially. For patterns with **, normalize the prefix before ** and keep the rest. For example: 'src/**' -> '/abs/path/to/src/**' rNr)rindexr)rr:idxrsuffixnormalized_prefixs r_normalize_redirect_patternrs  7w,,, --  C TcT] ! !# & &F STT]F /+FC88#..f... Nrtargetct||}d}|jD]T}t|j|}t ||r-t |j|j|j|j|j }U|S)z@Match redirect target against rules. Returns last matching rule.Nr ) rr'rrrr4rrrr)rrr:normalized_targetrr rs r_match_redirectrs'44F%  8sKK (*< = =   {j F Mrcmdc4g}t|j|||}|r|||s2|jD]*}t |||}|r||+|sdS|D]}|jdkr|cS|D]}|jdkr|cS|dS)amMatch command and its redirects against config rules. Args: cmd: SimpleCommand with words and redirects from parsed bash. config: Loaded configuration. cwd: Current working directory for path resolution. remote: If True, command runs in remote context (container, ssh). Skips path expansion since paths are remote, not local. Returns: Match object for the deciding rule, or None if no rules matched. Priority when combining command + redirect matches: deny > ask > allow. Returns the first match of the most restrictive decision type. rNrvr,r)rr8rr9rr) rrr:rmatches cmd_matchrredirect_matchms r match_commandr"s"GSYFCCCI"y!!! /m / /F,VVSAAN /~... t :  HHH  :  HHH  1:rc$t|||S)aMatch a redirect target against redirect rules. This is a convenience function for testing and for cases where you need to match a redirect target in isolation. Normally, redirects are matched as part of match_command() via SimpleCommand.redirects. Args: target: Redirect target path. config: Loaded configuration. cwd: Current working directory for path resolution. Returns: Match object for the last matching rule, or None if no match. )r)rrr:s rmatch_redirectr$s 663 / //rc|r&t|d||}|g|ddz}n|}t||}d}|jD]}t|j|}d} |js5t |s&|dz} tj|| rd} nC||krd} n:tj||} | s#|dr||ddk} | r|j |j nd}|S) aMatch command against after rules for PostToolUse feedback. Last matching rule wins. Empty string message means silent (no output). Args: words: Command words (e.g., ["git", "push", "origin", "main"]). config: Loaded configuration. cwd: Current working directory for path resolution. Returns: Message string if a rule with message matches, empty string if silent rule matches, None if no rule matches. rrsNFrTrrr) rrr(rrr rrrr) r8rr:r r r rr rrrs r match_afterr&s8 'a&#>>()E!""I5%nc::NF"FF/ cBBz D/2D"E"E D/$6N~~>> #555on6HIIG D1::4@@ D(,>ss,CC  F%)\%=T\\2F Mr tool_namecd}|jD]I}tj||jr-t|j|j|j|j|j}J|S)aMMatch MCP tool name against mcp rules. Simpler than command matching - just fnmatch against tool name. Last match wins. Args: tool_name: MCP tool name (e.g., "mcp__github__get_issue"). config: Loaded configuration. Returns: Match object for the last matching rule, or None if no match. Nr )r)rrr4rrrrr'rrr s r match_mcpr*>sf F  ?9dl 3 3   {j F Mrcrd}|jD],}tj||jr|j|jnd}-|S)aMatch MCP tool against after-mcp rules for PostToolUse feedback. Last matching rule wins. Empty string message means silent (no output). Args: tool_name: MCP tool name (e.g., "mcp__github__create_pr"). config: Loaded configuration. Returns: Message string if a rule with message matches, empty string if silent rule matches, None if no rule matches. Nrr)r*rrrr)s rmatch_after_mcpr,XsLF&FF ?9dl 3 3 F%)\%=T\\2F MrT)frozenc,eZdZUdZded<dZded<dS) _LogConfigzInternal log configuration.rrVFrfullN)r r rrr!r0rrrr/r/os2%%JJJDrr/z_LogConfig | None _log_config _log_disabledcda|jdadS |jjddn#t $rdadaYdSwxYwt |j|jadS)zAConfigure logging based on config settings. Call once at startup.FNT)parentsexist_ok)rVr0)r2r/r1r@mkdirr[r/r0)rs rconfigure_loggingr7{sM z  t<<<<    &*6?CCCKKKs!1AArr rcommandcddl}ddlm}m}ttrdS||d}|||d<|||d<tjr|||d<||j|d< ttj d 5} | | |d zddddS#1swxYwYdS#t$rd aYdSwxYw) zrg Exceptionr rbrcrirr#r4r6rCrHrUr_rpr\rrrrrrrrrrrrrrrrrrrrrrrrrr"r$r&r*r,r/r1r!r2r7rHrrrrMs$$$"""""" 1111111111  h)        )          4    H H H H H H H  H$    &$0000&&&&RMMMMM`     !!!!H5555F       4@E@    CCCC 7777 ==== >>>>AAAA 42424242n&,,,, DI------`&$FK))))))X0000$****Z4. $"& %%%% DDDD, r