AXjm+dZddlmZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z m Z ddlmZddlZddlmZe rdd lmZd gZd Zej.d Zdd ZddZddZddZddZddZddZ ddZ ddZ!y)zSkill download + archive extraction for the agent toolset. Split out from ``agent_toolset`` because fetching a session agent's skills and safely unpacking a (possibly third-party) archive is a distinct concern from the tool implementations themselves. ) annotationsN) TYPE_CHECKING)Path PurePosixPath)partial)run_sync)AsyncAnthropicdownload_session_skillsiz!anthropic.lib.tools.agent_toolsetcF |j|y#t$rYywxYw)zJTrue if ``child`` is ``root`` or a path inside it (both already resolved).FT) relative_to ValueError)childroots a/var/www/html/content_generation/venv/lib/python3.12/site-packages/anthropic/lib/tools/_skills.py_withinr#s. $  s   cZ|jdd}|jdst|jrt d|t|j Dcgc] }|dk7s | }}t d|Drt d||rtt|SdScc}w)u@Return ``name`` as a confined relative path, or raise on path-traversal. Strips ``.`` components; rejects absolute paths and any ``..`` component outright (those only appear in malicious archives). Returns ``""`` for entries that resolve to nothing (e.g. ``"./"``) — the caller should skip those. \/z+refusing archive member with absolute path .c3&K|] }|dk( yw)..N).0ps r z$_safe_member_name..8s $e19esz-refusing archive member with '..' component: )replace startswithr is_absoluterpartsanystr)namenormrr!s r_safe_member_namer&,s <<c "D s}T2>>@FthOPP%d+11 >11Q#XQ1E > $e $$HQRR).3}e$ %6B6 ?s " B(-B(ct}d}|D]?}t|j}|s|j|dt |dkDs>d}At |dk(r|rt t |SdS)aReturn the single top-level directory shared by every archive entry, or ``""`` if the entries don't all live under one common directory. Skill bundles are packaged wrapped in one directory named after the skill (e.g. ``pdf/SKILL.md``, ``pdf/scripts/...``). The extractor strips that wrapper so the contents land directly in the skill's destination directory instead of a redundant nested ``//`` level. FrTr)setrr!addlennextiter)namestops has_nestednr!s r_archive_top_dirr2=srUDJ a &&  q u:>J  #4yA~*4T D"Dc|s|St|j}|r"|d|k(r|dd}|rtt|SdS|S)zDrop the leading ``top`` component from ``safe`` (an already-confined relative path). Returns ``""`` for the bare top-dir entry itself.rr(Nr)rr!r#)safetopr!rests r _strip_topr8RsP  $  % %E qSQRy,0s=$'(8b8 Kr3c|dzrdSdS)a Reduce an archive entry's Unix mode to ``0o755`` if it is executable, ``0o644`` otherwise. Skill bundles can ship executable scripts (e.g. ``scripts/foo.sh``), so the execute bit recorded in the archive must survive extraction or invoking the script directly fails with permission denied. The mode is deliberately collapsed to one of two values: this preserves "is it executable" while never propagating setuid/setgid/sticky or group/other-write bits from a (possibly third-party) archive. Iiir)src_modes r_archive_file_moder<^su$5/%/r3c |jddt|j}tj|rvtj |5}|j }|Dcgc]}t|jx}s|}}t|}|D]}tt|j|} | s&|| z j} t| |std|j|jr| jdd| jjdd|j|5} t| d5} t!j"| | ddddddt%j&| t)|j*dz  dddyt-j|d 5} | j/Dcgc]7}|j1r|j3r%|j5r6|9}}|Dcgc]}t|j6x}s|}}t|}|D]}tt|j6|} | s&|| z j} t| |std |j6|j9r| jdd| jjdd| j;|}||5} t| d5} t!j"| | ddddddt%j&| t)|j< dddycc}w#1swY xYw#1swYxYw#1swYyxYwcc}wcc}w#1swY|xYw#1swYxYw#1swYyxYw) aExtract a skill download (a zip or tar.* archive) from disk into ``dest``. Skill bundles are wrapped in a single directory named after the skill; that wrapper is stripped so files land directly under ``dest`` rather than a redundant ``dest//`` level. Skills can be third-party, so this refuses any member that would escape ``dest`` (zip-slip / tar-slip) and skips symlink/hardlink/device members in tar archives. Tparentsexist_okmodez&refusing to extract unsafe zip member )r?r@wbNzr:*)rAz&refusing to extract unsafe tar member )mkdir_SKILL_DIR_MODEresolvezipfile is_zipfileZipFileinfolistr&filenamer2r8rris_dirparentopenshutil copyfileobjoschmodr< external_attrtarfile getmembersissymislnkisdevr$isdir extractfilerA) archive_pathdestrzfinfosinfos safe_namesr6r5targetsrcouttfmmembersmember extracteds r_extract_skill_archiverjls JJtdJA <<>D,' __\ *bKKME).Y7H7W2W!2W!JY":.C!"3DMM"BCH+..0vt,$'MdmmM^%_``;;=LLL= ##D4#@WWT]c4+=&&sC0,>]!3D4F4F"4L!MN +,  l /2 mmo[oaggi1779PQPWPWPY1o[!(MA2CAFF2K-KQ-Ka Mz*F/ +=]]#+, \M $6#5% 0 /sN)M/M/ B>N NM4 ,N47N N<N5NNNN<!N>NCN< N0N$ )N014N</N4M> 9NN NN N<$N- )N00N9 5N<<OclK|jr|Sd}|jjjj |23d{}|j js$|"t |j t |kDsH|j }U7P6|td|d|d|Sw)uNResolve ``version`` to the concrete numeric timestamp the ``/v1/skills/{id}/versions/{version}`` endpoints require. ``session.agent.skills[].version`` may be an alias such as ``"latest"``, which those endpoints reject — so list the skill's versions and pick the newest. Numeric versions are returned unchanged. Nzskill z$ has no concrete version to resolve z against)isdigitbetaskillsversionslistversionintr)clientskill_idrqnewestvs r_resolve_skill_versionrwsF;;%%..33H=a 99   FNc!))ns6{6RYYF=~6(-QRYQ\\deff Ms6AB4B B BB4*#B4 B4BB4cK|jjj|d{}tt j|dz j d{}g}|j jD]} t||j|jd{}|jjjj||jd{}tjj|jj!xs |j} | dvr |j} tt j|| z j d{} t#| |s"t$j'd|j+t j| } | j)d{r| j+d{t-t/t0j2| dd{t5||j|| d{|j7| t$j9d|j|| |S7I7777 777o7Q#t:$r,} t$j'd |j| Yd} ~ /``. Looks up the session's resolved agent, and for each skill fetches its files via ``client.beta.skills.versions.download`` and extracts the archive under a directory named after the skill. The archive is streamed to a temp file rather than buffered whole in memory. A failure on one skill is logged and does not block the others. Returns the list of skill directories that were created, so the caller can remove them when the workdir is torn down. Nrnrt)rrrz.skill name %r escapes the skills dir; skippingT) ignore_errorsz-downloaded skill skill_id=%s version=%s -> %sz(failed to download skill skill_id=%s: %s)rmsessionsretrieveranyiorFagentrnrwrtrqrorQpathbasenamer$striprlogwarning is_symlinkunlinkrrrOrmtree_download_and_extractappendr_ Exception) rs session_idworkdirsession skills_root downloadedskill version_idrqdirnamer\adestes rr r s KK((11*==Gejj1H<EEGGHK J%% W5fennemm\\J"KK..77@@V[VdVd@eeGgg&&w||'9'9';<NG/)..uzz+6@IIKKLD4- Lgll[JJt$E%%'''lln$$76==$dKL L L' DQ Q Q   d # HHDennV`bf g)&. 9>G ]e L ($ L Q W KKBENNTU V V Ws)KI42KI7$K$J (I:)AJ +I=,BJ 3J 44J (K*(J JJ *J+,J JJ 7J 87J /K7K:J =J J J J J  J  K!J;5K;KKc,Ktj|jjddtd{t t tjdd|jd{\}}tj|tj|} |jjjjj||4d{}|j!|d{dddd{t t"t||d{|j%dd{y777o7X7J#1d{7swYZxYw7?7'#|j%dd{7wxYww) zGStream the skill archive to a temp file, then extract it into ``dest``.Tr>Nz.skill-z.archive)prefixsuffixdirry) missing_ok)r}rrMrDrErrtempfilemkstemprQclosermrnrowith_streaming_responsedownloadstream_to_filerjr)rsrtrr\fdtmp_nametmparchives rrrsC **T[[ ! ' 't/ ' ZZZ!'(*:*:9U_eiepep"qrrLBHHRL **X C*;;%%..FFOO P  ((2 2 2  -tH~tDDDjjDj)))[r  3    E)cjjDj)))s9FE7F3E41F&?E4%E&E4)E>E?E E4E!E40E01E45F E2 FFE4EE4E-!E$ "E-)E42F4F F  FF)rrrrreturnbool)r$r#rr#)r.z list[str]rr#)r5r#r6r#rr#)r;rrrrr)r[rr\rrNone)rsr rtr#rqr#rr#)rsr rr#rzstr | os.PathLike[str]rz list[Path]) rsr rtr#rr#r\rrr)"__doc__ __future__rrQrOloggingrTrGrtypingrpathlibrr functoolsrr}anyio.to_threadr_clientr __all__rE getLoggerrrr&r2r8r<rjrwr rrr3rrs#  ' $) $ %g;<7"E*  0:>z&, ,+.,9O,,^*r3