o +iٔ@sdZddlmZddlZddlZddlmZmZddlmZddl m Z m Z m Z m Z ddlmZmZmZmZmZddlmZmZdd lmZdd lmZdd lmZmZe r`dd lmZm Z m!Z!d Z"dZ#dZ$dZ%dZ&GdddeZ'd6ddZ(GdddeZ)ddd7d#d$Z*d8d'd(Z+Gd)d*d*eZ,Gd+d,d,e,Z-Gd-d.d.e,Z.Gd/d0d0eZ/Gd1d2d2e/Z0Gd3d4d4e/Z1gd5Z2dS)9zAnthropic text editor and memory tool middleware. This module provides client-side implementations of Anthropic's text editor and memory tools using schema-less tool definitions and tool call interception. ) annotationsN)datetimetimezone)Path) TYPE_CHECKING AnnotatedAnycast)AgentMiddleware AgentState ModelRequest ModelResponse_ModelRequestOverrides) ToolRuntimetool) ToolMessage)Command) NotRequired TypedDict) AwaitableCallableSequencetext_editor_20250728str_replace_based_edit_toolmemory_20250818memoryaIMPORTANT: ALWAYS VIEW YOUR MEMORY DIRECTORY BEFORE DOING ANYTHING ELSE. MEMORY PROTOCOL: 1. Use the `view` command of your `memory` tool to check for earlier progress. 2. ... (work on the task) ... - As you make progress, record status / progress / thoughts etc in your memory. ASSUME INTERRUPTION: Your context window might be reset at any moment, so you risk losing any progress that is not recorded in your memory directory.c@s.eZdZUdZded< ded< ded<dS)FileDataz)Data structure for storing file contents. list[str]contentstr created_at modified_atN__name__ __module__ __qualname____doc____annotations__r(r(k/var/www/html/psymed-ai/venv/lib/python3.10/site-packages/langchain_anthropic/middleware/anthropic_tools.pyr/s rleftdict[str, FileData] | Nonerightdict[str, FileData | None]returndict[str, FileData]cCsV|dur dd|DSi|}|D]\}}|dur$||dq|||<q|S)zCustom reducer that merges file updates. Args: left: Existing files dict. right: New files dict to merge (None values delete files). Returns: Merged dict where right overwrites left for matching keys. NcSsi|] \}}|dur||qSNr().0kvr(r(r) Jsz!files_reducer..)itemspop)r*r,resultr2r3r(r(r) files_reducer<s  r8c@s$eZdZUdZded< ded<dS)AnthropicToolsStatez8State schema for Anthropic text editor and memory tools.z:NotRequired[Annotated[dict[str, FileData], files_reducer]]text_editor_files memory_filesNr"r(r(r(r)r9Vs r9allowed_prefixespathrr=Sequence[str] | Nonecsd|vs |drd|}t|tj|ddds(d|durCtfdd|DsCd |d |}t|S) a5Validate and normalize file path for security. Args: path: The path to validate. allowed_prefixes: Optional list of allowed path prefixes. Returns: Normalized canonical path. Raises: ValueError: If path contains traversal sequences or violates prefix rules. ..~zPath traversal not allowed: \/Nc3s|]}|VqdSr0) startswithr1prefix normalizedr(r) }s  z!_validate_path..zPath must start with one of : )rD ValueErrorosr>normpathreplaceany)r>r=msgr(rGr)_validate_path`s     rQfilesrcCsZ|dr|n|d}g}|D]}||r(|t|d}d|vr(||qt|S)zList files in a directory. Args: files: Files dict. path: Normalized directory path. Returns: Sorted list of file paths in the directory. rCN)endswithrDlenappendsorted)rRr>dir_pathmatching_files file_pathrelativer(r(r)_list_directorys   r[c@sveZdZdZeZdddd,ddZd-ddZd.ddZd/d d!Z d/d"d#Z d/d$d%Z d/d&d'Z d/d(d)Z d/d*d+ZdS)0_StateClaudeFileToolMiddlewarez;Base class for state-based file tool middleware (internal).Nallowed_path_prefixes system_prompt tool_typer tool_name state_keyr^r?r_ str | Noner.NonecsN|_|_|_|_|_t|      ddfdd }|g_dS)a-Initialize. Args: tool_type: Tool type identifier. tool_name: Tool name. state_key: State key for file storage. allowed_path_prefixes: Optional list of allowed path prefixes. system_prompt: Optional system prompt to inject. Nruntime&ToolRuntime[None, AnthropicToolsState]commandrr> file_textrcold_strnew_str insert_line int | Nonenew_path view_rangelist[int] | Noner. Command | strc sNd|i} |dur || d<|dur|| d<|dur|| d<|dur$|| d<|dur,|| d<|dur4|| d<zZ|d krC| |j|jWS|d krQ| |j|jWS|d kr_| |j|jWS|d krm| |j|jWS|d kr{| |j|jWS|dkr| |j|jWSd|WStt fy} z t | WYd} ~ Sd} ~ ww)aExecute file operations on virtual file system. Args: runtime: Tool runtime providing access to state. command: Operation to perform. path: File path to operate on. file_text: Full file content for create command. old_str: String to replace for str_replace command. new_str: Replacement string for str_replace command. insert_line: Line number for insert command. new_path: New path for rename command. view_range: Line range [start, end] for view command. Returns: Command for state update or string result. r>Nrhrirjrkrmrnviewcreate str_replaceinsertdeleterenameUnknown command: ) _handle_viewstate tool_call_id_handle_create_handle_str_replace_handle_insert_handle_delete_handle_renamerKFileNotFoundErrorr rergr>rhrirjrkrmrnargseselfr(r) file_toolsR      z:_StateClaudeFileToolMiddleware.__init__..file_toolNNNNNN)rerfrgrr>rrhrcrircrjrcrkrlrmrcrnror.rp)r`rarbr=r_rtools)rr`rarbr^r_rr(rr)__init__s Fz'_StateClaudeFileToolMiddleware.__init__requestr handler'Callable[[ModelRequest], ModelResponse]r cjfdd|jp gDjjdg}d|i}jr+|jr&|jdjnj|d<||jdi|S)  zB_StateClaudeFileToolMiddleware.wrap_model_call..typerr r_Nr(rr`rar_overriderrrr overridesr(rr)wrap_model_call z._StateClaudeFileToolMiddleware.wrap_model_call2Callable[[ModelRequest], Awaitable[ModelResponse]]crfdd|jp gDjjdg}d|i}jr,|jr'|jdjnj|d<||jdi|IdHS) rcrrrrrr(r)r%rzC_StateClaudeFileToolMiddleware.awrap_model_call..rrrr_Nr(rrr(rr)awrap_model_call z/_StateClaudeFileToolMiddleware.awrap_model_callrdictryr9rzrc Cs|d}t||jd}td||ji}||}|durAt||}|r8d|} tdt| ||j dgidSd |} t | |d } d d t | D} d| } tdt| ||j dgidS) Handle view command.r>r<dict[str, Any]N messagesrrzrupdateFile not found: rcS"g|] \}}|dd|qS|r(r1iliner(r(r)rW"z?_StateClaudeFileToolMiddleware._handle_view..) rQr=r getrbr[joinrrrar enumerate) rrryrzr>normalized_pathrR file_datamatchingrrP lines_contentformatted_linesr(r(r)rx6sB     z+_StateClaudeFileToolMiddleware._handle_viewc Cs|d}|d}t||jd}td||ji}||}ttj } |r,|dn| } | d} t |j|| | | didt d |||j d gid S) Handle create command.r>rhr<rr rrr r!rFile created: rr)rQr=r rrbrnowrutc isoformatsplitrrra) rrryrzr>rhrrRexistingrr content_linesr(r(r)r{fs2  z-_StateClaudeFileToolMiddleware._handle_createc Cs|d}|d}|dd}t||jd}td||ji}||} | dur1d|} t| | d } d | } || vrGd |} t| | ||d } | d }t t j }t|j||| d |didtd|||jdgidS)Handle str_replace command.r>rirjr<rNrrrString not found in file: rr rrString replaced in rr)rrQr=r rbrrrKrNrrrrrrrrra)rrryrzr>rirjrrRrrPrr new_content new_linesrr(r(r)r|sD      z2_StateClaudeFileToolMiddleware._handle_str_replacec Cs|d}|d}|d}t||jd}td||ji}||} | dur/d|} t| | d} |d } | d|| | |d} tt j  }t |j|| | d |d id t d |||jdgidS)Handle insert command.r>rkrjr<rNrrrr rrText inserted in rr)rQr=r rrbrrrrrrrrrra)rrryrzr>rktext_to_insertrrRrrPrr updated_linesrr(r(r)r}s>   z-_StateClaudeFileToolMiddleware._handle_insertc CsB|d}t||jd}t|j|didtd|||jdgidS)Handle delete command.r>r<NrFile deleted: rr)rQr=rrbrra)rrryrzr>rr(r(r)r~s z-_StateClaudeFileToolMiddleware._handle_deletec Cs|d}|d}t||jd}t||jd}td||ji}||} | dur2d|} t| ttj  } | } | | d<t |j|d|| idt d |d |||jd gid S) Handle rename command.old_pathrmr<rNrr!rFile renamed:  -> rr)rQr=r rrbrKrrrrrcopyrrra) rrryrzrrmnormalized_oldnormalized_newrRrrPrfile_data_copyr(r(r)rs<  z-_StateClaudeFileToolMiddleware._handle_rename) r`rrarrbrr^r?r_rcr.rdrr rrr.r rr rrr.r )rrryr9rzrcr.r)r#r$r%r&r9 state_schemarrrrxr{r|r}r~rr(r(r(r)r\s b   0 & 2 /r\cs(eZdZdZddd fdd ZZS) StateClaudeTextEditorMiddlewareaState-based text editor tool middleware. Provides Anthropic's text_editor tool using LangGraph state for storage. Files persist for the conversation thread. Example: ```python from langchain.agents import create_agent from langchain.agents.middleware import StateTextEditorToolMiddleware agent = create_agent( model=model, tools=[], middleware=[StateTextEditorToolMiddleware()], ) ``` N)r^r^r?r.rdcstjttd|ddS)zInitialize the text editor middleware. Args: allowed_path_prefixes: Optional list of allowed path prefixes. If specified, only paths starting with these prefixes are allowed. r:)r`rarbr^NsuperrTEXT_EDITOR_TOOL_TYPETEXT_EDITOR_TOOL_NAME)rr^ __class__r(r)rCs   z(StateClaudeTextEditorMiddleware.__init__)r^r?r.rdr#r$r%r&r __classcell__r(r(rr)r0srcs*eZdZdZdedd fd d ZZS) StateClaudeMemoryMiddlewarea'State-based memory tool middleware. Provides Anthropic's memory tool using LangGraph state for storage. Files persist for the conversation thread. Enforces /memories prefix and injects Anthropic's recommended system prompt. Example: ```python from langchain.agents import create_agent from langchain.agents.middleware import StateMemoryToolMiddleware agent = create_agent( model=model, tools=[], middleware=[StateMemoryToolMiddleware()], ) ``` Nr]r^r?r_rr.rdcs tjttd|p dg|ddS)a&Initialize the memory middleware. Args: allowed_path_prefixes: Optional list of allowed path prefixes. Defaults to ["/memories"]. system_prompt: System prompt to inject. Defaults to Anthropic's recommended memory prompt. r; /memories)r`rarbr^r_NrrMEMORY_TOOL_TYPEMEMORY_TOOL_NAME)rr^r_rr(r)rjs z$StateClaudeMemoryMiddleware.__init__)r^r?r_rr.rdr#r$r%r&MEMORY_SYSTEM_PROMPTrrr(r(rr)rVs rc@s~eZdZdZddddd1ddZd2ddZd3ddZd4dd Zd5d%d&Zd5d'd(Z d5d)d*Z d5d+d,Z d5d-d.Z d5d/d0Z dS)6#_FilesystemClaudeFileToolMiddlewarez@Base class for filesystem-based file tool middleware (internal).N r=max_file_size_mbr_r`rra root_pathr=list[str] | Nonerintr_rcr.rdcsz|_|_t|_|pdg_|dd_|_jjdddt |      ddfdd }|g_ dS)aoInitialize. Args: tool_type: Tool type identifier. tool_name: Tool name. root_path: Root directory for file operations. allowed_prefixes: Optional list of allowed virtual path prefixes. max_file_size_mb: Maximum file size in MB. system_prompt: Optional system prompt to inject. rCTparentsexist_okNrerrgrr>rhrcrirjrkrlrmrnror.rpc s8d|i} |dur || d<|dur|| d<|dur|| d<|dur$|| d<|dur,|| d<|dur4|| d<zN|d krA| |jWS|d krM| |jWS|d krY| |jWS|d kre| |jWS|d krq| |jWS|dkr}| |jWSd|WSttt fy} z t | WYd} ~ Sd} ~ ww)aExecute file operations on filesystem. Args: runtime: Tool runtime providing tool_call_id. command: Operation to perform. path: File path to operate on. file_text: Full file content for create command. old_str: String to replace for str_replace command. new_str: Replacement string for str_replace command. insert_line: Line number for insert command. new_path: New path for rename command. view_range: Line range [start, end] for view command. Returns: Command for message update or string result. r>Nrhrirjrkrmrnrqrrrsrtrurvrw) rxrzr{r|r}r~rrKrPermissionErrorrrrr(r)rs> z?_FilesystemClaudeFileToolMiddleware.__init__..file_toolr)rerrgrr>rrhrcrircrjrcrkrlrmrcrnror.rp) r`rarresolverr=max_file_size_bytesr_mkdirrr)rr`rarr=rr_rr(rr)rs   .rrrr_Nr(rrr(rr)rrz3_FilesystemClaudeFileToolMiddleware.wrap_model_callrcr) rcrrrrrr(r)rrzH_FilesystemClaudeFileToolMiddleware.awrap_model_call..rrrr_Nr(rrr(rr)rrz4_FilesystemClaudeFileToolMiddleware.awrap_model_callr>rcs|ds d|}d|vsd|vrd}t||d}|j|}z||jWnty<d|}t|dwdt||j|jrbtfdd|jD}|sbd |j}t||S) aValidate and resolve a virtual path to filesystem path. Args: path: Virtual path (e.g., /file.txt or /src/main.py). Returns: Resolved absolute filesystem path within root_path. Raises: ValueError: If path contains traversal attempts, escapes root directory, or violates allowed_prefixes restrictions. rCr@rAzPath traversal not allowedzPath outside root directory: Nc3s(|]}|p|dkVqdS)rCN)rDrstriprE virtual_pathr(r)rI7s  zQ_FilesystemClaudeFileToolMiddleware._validate_and_resolve_path..zPath must start with one of: ) rDrKlstriprr relative_torr=rO)rr>rPrZ full_pathallowedr(rr)_validate_and_resolve_paths,       z>_FilesystemClaudeFileToolMiddleware._validate_and_resolve_pathrrrzrc Cs |d}||}|r|sd|}t||j|jkr6|jdd}d|d|d}t|z|}Wnt yU}z d|d|}t||d }~ww| d } | ri| d d kri| d d } d dt | D} d | } t dt| ||jdgidS)rr>rrzFile too large: z exceeds MBzCannot decode file rJNrrcSrrr(rr(r(r)r\rzD_FilesystemClaudeFileToolMiddleware._handle_view..rrr)rexistsis_filerstatst_sizerrK read_textUnicodeDecodeErrorrrrrrra) rrrzr>rrPmax_mbrrlinesrformatted_contentr(r(r)rxAs>       z0_FilesystemClaudeFileToolMiddleware._handle_viewcCsZ|d}|d}||}|jjddd||dtdtd|||jdgid S) rr>rhTrrrrrr)rparentr write_textrrra)rrrzr>rhrr(r(r)r{ks z2_FilesystemClaudeFileToolMiddleware._handle_createc Cs|d}|d}|dd}||}|s d|}t||}||vr1d|}t||||d} || tdt d |||j d gid S) rr>rirjrrrrrrrr) rrrrr rKrNrrrra) rrrzr>rirjrrPrrr(r(r)r|s.     z7_FilesystemClaudeFileToolMiddleware._handle_str_replacecCs|d}|d}|d}||}|sd|}t||}|d} | r8| ddkr8| dd} d } nd } |d} | d|| | |d} d| } | rX| d7} || td td |||j d gidS)rr>rkrjrrrrNTFrrrr) rrrr rrrrrra)rrrzr>rkrrrPrrhad_trailing_newlinerrrr(r(r)r}s:       z2_FilesystemClaudeFileToolMiddleware._handle_insertcCsX|d}||}|r|n |rt|tdtd|||jdgidS)rr>rrrr) rrunlinkis_dirshutilrmtreerrra)rrrzr>rr(r(r)r~s    z2_FilesystemClaudeFileToolMiddleware._handle_deletecCs|d}|d}||}||}|sd|}t||jjddd||tdtd|d|||jd gid S) rrrmrTrrrrrr) rrrKrrrvrrra)rrrzrrmold_fullnew_fullrPr(r(r)rs&    z2_FilesystemClaudeFileToolMiddleware._handle_rename)r`rrarrrr=rrrr_rcr.rdrr)r>rr.r)rrrzrcr.r)r#r$r%r&rrrrrxr{r|r}r~rr(r(r(r)rs ^   / *  % -rcs*eZdZdZddddfd dZZS)$FilesystemClaudeTextEditorMiddlewarea#Filesystem-based text editor tool middleware. Provides Anthropic's text_editor tool using local filesystem for storage. User handles persistence via volumes, git, or other mechanisms. Example: ```python from langchain.agents import create_agent from langchain.agents.middleware import FilesystemTextEditorToolMiddleware agent = create_agent( model=model, tools=[], middleware=[FilesystemTextEditorToolMiddleware(root_path="/workspace")], ) ``` Nr)r=rrrr=rrrr.rdcstjtt|||ddS)a-Initialize the text editor middleware. Args: root_path: Root directory for file operations. allowed_prefixes: Optional list of allowed virtual path prefixes (default: ["/"]). max_file_size_mb: Maximum file size in MB (default: 10). )r`rarr=rNr)rrr=rrr(r)rs z-FilesystemClaudeTextEditorMiddleware.__init__)rrr=rrrr.rdrr(r(rr)r s rcs,eZdZdZddeddfddZZS) FilesystemClaudeMemoryMiddlewareabFilesystem-based memory tool middleware. Provides Anthropic's memory tool using local filesystem for storage. User handles persistence via volumes, git, or other mechanisms. Enforces /memories prefix and injects Anthropic's recommended system prompt. Example: ```python from langchain.agents import create_agent from langchain.agents.middleware import FilesystemMemoryToolMiddleware agent = create_agent( model=model, tools=[], middleware=[FilesystemMemoryToolMiddleware(root_path="/workspace")], ) ``` Nrrrrr=rrrr_r.rdcs"tjtt||p dg||ddS)aInitialize the memory middleware. Args: root_path: Root directory for file operations. allowed_prefixes: Optional list of allowed virtual path prefixes. Defaults to ["/memories"]. max_file_size_mb: Maximum file size in MB (default: 10). system_prompt: System prompt to inject. Defaults to Anthropic's recommended memory prompt. r)r`rarr=rr_Nr)rrr=rr_rr(r)rKs z)FilesystemClaudeMemoryMiddleware.__init__) rrr=rrrr_rr.rdrr(r(rr)r7s r)r9rrrrr)r*r+r,r-r.r/)r>rr=r?r.r)rRr/r>rr.r)3r& __future__rrLrrrpathlibrtypingrrrr !langchain.agents.middleware.typesr r r r rlangchain.toolsrrlangchain_core.messagesrlanggraph.typesrtyping_extensionsrrcollections.abcrrrrrrrrrr8r9rQr[r\rrrrr__all__r(r(r(r)sJ      &&++ 0