5jTH UdZddlmZddlZddlZddlZddlZddlZddlZ ddl m Z m Z ddl m Z ddlmZddd d d d d d ddd gd ddddddd ddd ddd gdddddddd dd d d!d!d gdd"dd#Zd$ed%<dZd Zdd&Zdd'Ze ej,j/d(e ej3j4d)z Zd*d*d+d,Zd-ed.<dd/Zdd0Zdd1Zdd2Z dd3Z!dd4Z"efdd5Z#dd6Z$dd7Z%ddd8Z&dd9dd;Z' dd<Z( dd=Z) dd>Z*dd?Z+dd@Z,dAZ-ddBZ. ddCZ/ddDZ0ddEZ1ddFZ2dGZ3dHZ4ddIZ5 ddd9 ddJZ6ddKZ7 ddd9 ddLZ8 ddMZ9 ddNZ:efddOZ;e ej,j/dPdQZ<e ej,j/dRdSZ=e ej,j/dTdUZ>e ej3j4Z?e ej,j/dVe@e?dWz ZAejdXZCejZEddYZFdZd[gd\d]d^d_d`dadbid_gdcdddegdfdgd^igdcdddegdhdid^djd`dkgdldmigdcdddegdndod^dpd`dqdbidpgdcdddedrZGd$eds<eGjDcgc]}|dt c}ZId:edu<dvd[gdwdxdydzd{d^d|d`d}dbid|gdcddd~dvd[gdwddddd^d`ddbd`ddbdd|dgdcddd~dZd[gdwddddd^d|d`ddbid|gdcddd~dvd[gdwddddd^d`ddbd`ddbd`ddbdddbdgddcddd~gdwddddd^d`ddbd`ddbd`ddbd`ddbd`ddbdd_gdcddd~dZJd$ed<ieGeJZKd$ed<iZLd-ed<ddZMddZNddZOddZPddZQddZRddZSePeQeReSdrZTd-ed<ddZUiZVd$ed<ejZWdZXddZY ddZZddZ[dZ\ddZ]GddZ^ddZ_ddZ`GddZaGddZbGddZceaebecdZdd-ed<ddZe dd„ZfddÄZgdd9 ddĄZh ddńZiddƄZjddDŽZkddȄZldݐddɄZmddʄZndd˄Zodݐdd̄ZpGd̈́deqZrGdτdeqZsGdфdetZuycc}w(aGAssistant module for Togen LLM chat (DVI-529). Provides a pluggable provider registry (ASSISTANT_PROVIDERS), settings persistence for global admin config and per-user connection overrides, an availability gate (is_assistant_available), a chat proxy, and a vision-based field-extraction helper used by the Claude-vision OCR backend. Architecture note (D1): ASSISTANT_PROVIDERS is intentionally open-ended so a future full-MCP provider can be registered here without touching routes or UI. The dispatch branch in chat() keys on provider id; MCP providers would add their own branch. ) annotationsN)datetimetimezone)Path)Any anthropiczClaude (Anthropic API)zclaude-opus-4-7zClaude Opus 4.7)idlabelzclaude-sonnet-4-6zClaude Sonnet 4.6zclaude-haiku-4-5-20251001zClaude Haiku 4.5z+https://console.anthropic.com/settings/keys)r r models default_modeldocs_urlgooglezGemini (Google AI)zgemini-2.5-prozGemini 2.5 Prozgemini-2.5-flashzGemini 2.5 Flashzgemini-2.0-flashzGemini 2.0 Flashz&https://aistudio.google.com/app/apikeyopenaiz OpenAI (GPT)zgpt-4.1zGPT-4.1zgpt-4ozGPT-4ozo4-miniz$https://platform.openai.com/api-keys)rrrzdict[str, dict]ASSISTANT_PROVIDERSctjD]*\}}|jdgD]}|d|k(s |ccS,tS)zJReturn the provider id that owns model_id, defaulting to DEFAULT_PROVIDER.r r )ritemsgetDEFAULT_PROVIDER)model_idprov_idprovms /var/www/html/togen/assistant.py_provider_for_modelrFsQ,224 (B' Aw("  cztjD]$}|jdgD] }|d|k(s y&y)z>Return True if model_id is a registered model of any provider.r r TF)rvaluesr)rrrs r_is_known_modelrOsH#**,(B' Aw("  rASSISTANT_SETTINGS_FILEzassistant_settings.jsonF)enabledaccessible_to_usersdefault_context_mdzdict[str, Any]DEFAULT_ASSISTANT_SETTINGSc tt}tjrI t j tj }t|trt|jdtr|d|d<t|jdtr|d|d<t|jdtr|d|d<|jdr|d|d<t|jdtr|d|d<t|jdtr|d|d<|jdr|d|d<|jdr|d|d<|S|S#tjtf$rY|SwxYw) z;Return global assistant settings, falling back to defaults.r!r"r#api_keyapi_keysprovider_enabledr ocr_model) dictr$ris_filejsonloads read_text isinstancerboolstrJSONDecodeErrorOSError)settingssaveds rload_assistant_settingsr6kss./H&&( JJ6@@BCE%&eii 2D9*/ *:HY'eii(=>E6;H[) O8O$$g.   O sEE00F  F ctjtj|dtj t j t jzy)z>Persist global assistant settings. File is 0600 (key-bearing).)indentN)r write_textr,dumpschmodstatS_IRUSRS_IWUSR)r4s rsave_assistant_settingsr@s6&&tzz(1'EF!!$,,"=>rc>t|jdxsiS)zAExtract the assistant sub-dict from user settings (may be empty). assistant)r*r user_settingss rget_user_assistantrEs  !!+.4" 55rc&t|}||d<|S)zCReturn a copy of user_settings with the assistant sub-dict updated.rBr*)rDrBupdateds rset_user_assistantrIs=!G$GK Nrcz|ryt}|jdsyt|}|jdxsi}t|j s|jdry|jdr@|jdxsi}t|j s|jdryy)aReturn True if the assistant is available for this user. Admins: always available when the feature is enabled. Normal users: available when they have their own key (any provider), OR when the org key is configured for any provider and accessible_to_users is True. Tr!Fkeysr&r"r')r6rrEanyr) user_emailis_adminrD global_cfgua user_keysorg_keyss ris_assistant_availablerSs(*J >>) $ M *Bv$"I 9   "&&"3~~+,>>*-3 x !Z^^I%> rc4t|||syt|S)u]Return True only when the assistant is both entitled AND has a usable key. `is_assistant_available` is an *entitlement* gate — admins pass it unconditionally and org-key access passes it on the flag alone. That is not enough to actually run a request: without an effective key, chat fails with "No API key configured". This stricter check is what the topbar indicator (green vs red) and the chat gate use, so an entitled-but-unconfigured user (e.g. an admin who never set a key) sees red and the "configure your key" prompt instead of an input box that silently errors. F)rS_has_any_effective_key)rMrNrDs ris_assistant_connectedrVs "*h F !- 00rcFt|}|jdxsi}|j|r||S|dk(r|jdr|dSt}|jdxsi}|j|r||S|dk(r|jdr|dSy)zReturn the best API key for provider_id (user key beats org key). Checks new per-provider `keys` dict first; falls back to legacy single `api_key` field when provider_id is 'anthropic' for back-compat. rKrr&r'NrErr6)rD provider_idrPrQrOrRs r_effective_keyrZs M *Bv$"I}}[!%%k!bffY&7)}(*J~~j)/RH||K  $$k!jnnY&?)$$ rc4tfdtDS)zLReturn True if there is at least one usable key for any registered provider.c36K|]}t|ywN)rZ).0pidrDs r z)_has_any_effective_key..sQc~mS1Q)rLrrCs`rrUrUs Q=PQ QQrct|}|jd|dSt}|jdxsdS)zGReturn the context markdown to use (user override beats admin default). context_mdr#r rX)rDrPrOs r_effective_context_mdrdsC M *B vvl',(*J >>. / 525rcd}|r&t|j}t|r|}|s7t|}|j dxs|j dxst }t |}t||}|||fS)uReturn (model_id, provider_id, key) for a plain-/agentic-chat request. A per-invocation `model_override` (when it names a registered model) beats the user's saved default_model; otherwise falls back to the caller default. The provider — and therefore the key — is always derived from the resolved model, so selecting e.g. a Gemini model routes to the Google key. Nr model)r1striprrEr DEFAULT_MODELrrZ)rDmodel_overriderf candidaterPrYkeys r_resolve_chat_modelrls| E'--/ 9 %E   .'K266'?Km%e,K  4C +s ""r)rf list[dict]ct||\}}}|s td|dk(rt||||S|dk(rt||||S|dk(rt ||||Std|d)aSend messages to the configured provider and return the reply text. Resolves provider from `model` when given (per-invocation override), else from the user's selected default model; dispatches to the appropriate backend (anthropic/google/openai). Raises AssistantUnavailable if no key is configured for the resolved provider. Raises AssistantError on API failure. No API key configured.rrfrkrrz(Chat is not yet available for provider ''.)rlAssistantUnavailable _chat_google _chat_openai_chat_anthropic)messagessystemrDrfrYrks rchatrx s2-GE; "#;<<hHfEsCChHfEsCCk!xu#FF  2;-rB rc< ddl}|j|} |jj |d|xsd|}|j djS#t$r}td|d}~wwxYw#|j$r}tt||d}~wwxYw)Nr#anthropic package is not installed.r&r )rf max_tokensrwrv) r ImportErrorrr AnthropicrvcreatecontenttextAPIErrorAssistantErrorr1)rvrwrfrk _anthropicexcclientresponses rruru!sS& ! !# ! .F 0??))T"&12 }}+ V"#KLRUUV, 0SX&C/0s/ C>C4 C1 C,,C14 D=DDc  ddlm}||}g}|r|j d|d|D]?}|j |j dd t |j d d dA |jjj|d | } | jdjjxsd S#t$r}td|d}~wwxYw#t$r}tt ||d}~wwxYw)zVSend a plain (non-tool) chat request to OpenAI Chat Completions and return reply text.rOpenAI openai package is not installed.Nr{rwrrrrrr r|rfr}rv)rrr~rrrrr1rx completionsrchoicesmessagerrr) rvrwrfrk_OpenAIrr oa_messagesrrs rrtrtVs P,S !F K H@A GGFF+3779b12   0;;**11 2  "**228b8% P"#EFCOP& 0SX&C/0s0B=.AC= C CC C=#C88C=ct}t|jdxsdj}|rt |r|}t |}n t }t}t|}|||fS)aYResolve (model_id, provider_id, key) for title-block OCR. Uses the admin ``ocr_model`` setting (a bare registered model id) plus the org-level key for that model's provider. Defaults to Anthropic (DEFAULT_MODEL + org anthropic key) when the setting is unset or names an unknown model, so existing OCR behavior is unchanged. r)r ) r6r1rrgrrrhr_effective_key_system_only)cfgrawrrYrks r_resolve_ocr_modelrwsg " #C cggk"(b ) / / 1C s#)#.  & $[ 1C [# %%rc Ft\}}}|std|ddjd|D}|dgk(rd}nd|d}t|||||} |j }|j d r*|j d d }|j d r|d d }tj|}|D cic]} | t|j| d c} Scc} w#tjtttf$r} td|d| | d } ~ wwxYw)aUse a vision model to extract named fields from an image. image_bytes: raw PNG/JPEG image bytes. fields: list of field names to locate in the image (e.g. ["customer_name", "job_no"]). Returns a dict mapping field names to extracted string values (empty string when not found). Raises AssistantUnavailable or AssistantError on failure. Provider/model come from the admin ``ocr_model`` setting (default Anthropic org key); the request is routed to the matching provider's vision path. No org API key configured for vision OCR. c3&K|] }d| ywz- N)r^fs rr`z!extract_fields..s5bH5 full_texta You are an OCR assistant. Transcribe ALL text visible in this image, preserving line breaks and layout as closely as possible. Return ONLY a JSON object with a single key 'full_text' whose value is the full transcribed text. No other keys, no markdown, no commentary.zYou are an OCR assistant. Extract the following fields from the image of an engineering drawing title block. Return ONLY a JSON object mapping field names to their string values. Fields to extract: zl If a field is not present or not legible, use an empty string. Return only the JSON object, no other text.```r,Nr Unexpected response format from vision: )rrrjoin_ocr_vision_callrg startswithsplitr,r-r1rr2KeyError IndexErrorAttributeErrorr) image_bytesfieldsrrYrk fields_listpromptrresultrrs rextract_fieldsrsE"4!5Hk3 ",[M F  ))5f55K + W  GGRmT: :  ;#{F KC fiik >>% ))E"1%C~~f%!"gC39:a3vzz!R()):::  (J Gf? }IVYUZ[\beefs+A$C&;#C!C&!C&&#D  DD ) batch_date batch_numbermixtureyards rock_moisture sand_moistureinitialsnotesc t\}}}|std|ddjd|Dxsd}d|zdz}t|||||} |j }|j dr*|j dd }|j d r|d d }tj|}t|ts td  t D cic]"} | t#|j%| dxsd$} } g} |j%dxsgD]} t| tst#| j%ddxsdj }|sD| j'|t#| j%ddxsdj d| | dS#tjtttf$r} td|d| | d } ~ wwxYwcc} w)uVision-extract a concrete QC batch ticket into structured fields. image_bytes: raw PNG/JPEG of one batch-ticket page. material_names: the QC material vocabulary, so the model can match the per-material weighed amounts to known materials. Returns ``{"fields": {batch_date, batch_number, mixture, yards, rock_moisture, sand_moisture, initials, notes}, "materials": [{"name", "actual"}, ...]}`` — best effort; a missing/illegible value is an empty string and materials may be empty. Raises AssistantUnavailable/AssistantError on provider failure (callers treat OCR as best-effort prefill). Provider/model come from the admin ``ocr_model`` setting (default Anthropic org key), reusing the title-block OCR resolution + per-provider vision path. rrrc3&K|] }d| ywrr)r^rs rr`z'extract_batch_ticket..s6!r!X6rz- (none configured)aYou are reading a concrete Quality-Control batch ticket. Extract the batch header and the per-material actual (weighed/dispensed) amounts. Return ONLY a JSON object with these keys: batch_date (YYYY-MM-DD if you can determine it, else the date text), batch_number (the batch or ticket number), mixture (the mix design name or code), yards (cubic yards produced, number only), rock_moisture (rock/stone moisture percent, number only), sand_moisture (sand moisture percent, number only), initials (the operator initials), notes (any free-text notes), materials (an array of objects {"name": , "actual": } for each material weighed). Match each material name to this list where possible: u Use an empty string (or omit) any field that is absent or not legible. Return only the JSON object — no markdown fences, no commentary.rrr,rNzexpected a JSON objectrrr materialsnameactual)rr)rr)rrrrrrgrrr,r-r/r* ValueErrorr2rrr_BATCH_TICKET_KEYSr1rr)rmaterial_namesrrYrkmatsrrdatarkrritemrs rextract_batch_ticketrs "4!5Hk3 ",[M F   996~6 6 O:OD BEI ILM M $ ;#{F KC iik >>% ))E"1%C~~f%!"gzz#$%56 6& 6H HaTXXa_*++ HF HI+&,"P$% 488FB'-2.446 $$'2(>(D"$E$K$K$MO P P9 55  *j. I.{m9SE J  IsA;F"'G"#GGGc|dk(rt||||S|dk(rt||||S|dk7rtd|dt||||S)a Send a single image + prompt to the given provider and return raw text. Images are sent at full resolution (no downscale) to preserve fine title-block text for OCR. Mirrors the per-provider vision message shapes used by interpret_images (DVI-953). rrprrz+Vision OCR is not configured for provider 'rq) _ocr_google _ocr_openairr_ocr_anthropic)rYrrkrrs rrrsjh;hCHHh;hCHHk!"9+b I   +vX3 GGrc ddl} ddl}|j |}|j |j } |jj|ddddd|d d d |d gd g} | jdjS#t$r}td|d}~wwxYw#|j$r}tt||d}~wwxYw)Nrrzr{rimagebase64 image/pngtype media_typerrsourcerrrrr)rrr~rrrstandard_b64encodedecodervrrrrrr1) rrrfrkrrrrb64rs rrrsS& ! !# ! .F  # #K 0 7 7 9C0??))#%,(0.9(+'"(8  * ("'''3 S"#HIsRS4   0SX&C/0s/BAB  B BB C /CC c ddl} ddlm}||}|j |j } |jjj|ddddd |id d |d gd g} | jdjjxsdS#t$r}t d|d}~wwxYw#t$r}tt||d}~wwxYw)Nrrrr{rr image_urlurlzdata:image/png;base64,rrrrrrr )rrrr~rrrrrxrrrrrrrr1) rrrfrkrrrrrrs rrr<sP,S !F  # #K 0 7 7 9C0;;**11#%0*/3I#1O)P"(8    2  "**228b8+ P"#EFCOP, 0SX&C/0s/BAB2 B/ B**B/2 C;CCc  ddlm}ddlm}|j |} |jj||jd|jj|d|jj|g g|jd  }|jS#t$r}t d|d}~wwxYw#t$r}t!t#||d}~wwxYw) Nrrrrr{rrr mime_typerrrr)rrrrr~rrrr rrr from_bytesrrrrrr1) rrrfrkrrrrrs rrrZsV*1]]3] 'F0==11 //[K/X ..v6 0040H2  }}# V"#KLRUUV$ 0SX&C/0s/ B#BC# B=, B88B= C# CC#i Uc ddlm}ddlm}|j ||}|j \}}t ||}|tkDr?t|z }|jt||zt||zf|j}|jdvr|jd}|}|j|dt|jS#t $r|cYSwxYw)zRe-encode image to JPEG, capped at _INTERPRET_MAX_LONG_EDGE on the long edge. Accepts any PIL-readable format; returns JPEG bytes. Falls back to the original bytes if Pillow is unavailable or the image is already small enough. r)BytesIO)Image)RGBLrJPEG)formatquality)iorPILropensizemax_INTERPRET_MAX_LONG_EDGEresizeintLANCZOSmodeconvertsave_INTERPRET_JPEG_QUALITYgetvaluer) rrrimgwh long_edgescalebufs r_downscale_imager|s jj-.xx11I / /,y8E**c!e)nc!e)n=u}}MC 88< '++e$Ci V-DE||~ sCC C$#C$c$t|g||||S)zInterpret a single image using the configured Vision assistant model. Delegates to interpret_images with a single-element list; behavior is unchanged. )rDrf)interpret_images)rrhistoryrDrfs rinterpret_imager!s [M67-_d eerc|xsd}|jdr%|tdd}t|}t|}n|jdre|tdd}t|}t |}|j dxsi}|j |xs|dk(r|j dnd}nt }t}t||}|s t }t}|s t||}|||fS)aResolve (model_id, provider_id, key) from a ``source:modelId`` string. Shared by the saved Vision default and the per-request override. ``system:`` forces the org key, ``user:`` forces the user's own key, otherwise the default provider/key. Falls back to the default model/provider when unparseable and always tries a last-resort effective key so a valid model never fails purely on prefix mismatch. r zsystem:Nzuser:rKrr&) rlenrrrErrhrrZ)rD raw_modelrrYrkrPrQs r_resolve_vision_modelr%sRII&S^_-)(3 (5   g &S\]+)(3  .FF6N(b mmK(g+Q\B\RVVI->bf & ]K8  & ]K8 [# %%rc Lddl}|s tdd}|r9t|j}t |j dddr|}|s%|j dxsij d d}t||\}} } | s td | d k(rt||||| S| d k(rt||||| S| dk7rtd| d ddl } t|} g}t|dD]f\}}t|}|j|j!}| dkDr|j#dd|d| d|j#ddd|ddhg}|rd}|D]}|j ddk(r9|s7|j#d|dt|j dddgzd d!}P|j#|dt|j ddd |j#d|d n|j#d|d|dgzd | j%| "} |j&j)|d#|$}|j*dj,S#t$r} td| d} ~ wwxYw#| j.$r} t1t| | d} ~ wwxYw)%uInterpret an ordered sequence of images using the configured Vision assistant model. images: ordered list of raw image bytes (any PIL-readable format). Each image is preceded by a 'Frame k/N' text label so the model can reference frames. prompt: user question / instruction for this turn. history: prior conversation turns [{role, content}] — images are pinned on the first user turn as context for multi-turn sessions. user_settings: caller's settings dict (for key + model resolution). Raises AssistantUnavailable if no key is configured or provider not supported. Raises AssistantError on API failure. rNz&No images provided for interpretation.r :rvisionassistant_modelz0No API key configured for Vision interpretation.rrprrz:Vision interpretation is not yet configured for provider 'rqrzstartrFrame /rrr image/jpegrrFrrrrTr{r)rrrr1rgrrrr%_interpret_images_google_interpret_images_openairr~r# enumeraterrrrrrvrrrrr)imagesrr rDrfrr$rjrrYrkrrn frame_contentr img_bytesscaledrrvfirst_user_injectedturnrrs rrrs( "#KLL I J$$& 9??3226 7!I "&&x06B;;>Jc ddl} ddlm}||}t |} g} t |dD]g\} } t| } |j| j}| dkDr| jdd | d | d | jd d d|idig}|rd}|D]}|jddk(r9|s7|jd| dt|jddd gzdd}P|j|dt|jddd|jd|dn|jd| d|d gzd |jjj|d|}|j dj"j$xsdS#t$r}t d|d}~wwxYw#t&$r}t)t||d}~wwxYw)zSInterpret an image sequence using OpenAI vision (Chat Completions image_url parts).rNrrr{rr+rr-r.rrrzdata:image/jpeg;base64,rFrrrr rTr0r)rrrr~rrr#r3rrrrrr1rxrrrrrrr)r4rr rfrkrrrrr5r6rr7r8rrvr9r:rs rr2r2dsP,S !F F A!#M!&2 9!),''/668 q5  &F1#Qqc:J!K L#:3%!@A   H# aDxx6)2E",TXXV_acMdIe0f/gg!'+#f#dhhyZ\F]B^ _` a F;<$(H'II  0;;**112  "**228b8W P"#EFCOPX 0SX&C/0s0F#AG# F=, F88F= G# GG#ct}|jdxsi}|j|r||S|dk(r|jdr|dSy)zHReturn the org-level key for provider_id (for system: model selections).r'rr&N)r6r)rYrOrRs rrrsU(*J~~j)/RH||K  $$k!jnnY&?)$$ r PRODRUN_DIRz/var/www/html/prodrunmerge QR_SHARED_DIRz/var/www/html/sharedWOR_DIRz/var/www/html/worTOOL_AUDIT_LOGztool_audit.jsonlz$^[a-zA-Z0-9][a-zA-Z0-9 _\-\.]{0,79}$c t5tjdd5}|jt j |dzddddddy#1swYxYw#1swYyxYw#t $rYywxYw)z;Append one JSON line to the audit log; swallows exceptions.azutf-8)encodingrN) _audit_lockrBr writer,r;r)entryfhs r _audit_appendrJs{  3$$S7$; 3rE*T12 3 3 3 3 3 3 3    sEA1A%(AA%A1A" A%%A.*A1.A11 A=<A=prod_run togen_adminprodrun_statuszbGet the current status of a production run merge job. Returns status, message, and result summary.objectjob_idstringuSProduction run job ID — alphanumeric, spaces, dashes, or dots; max 80 characters.)r description)r propertiesrequired)rrQ input_schema)required_roles anthropic_defreprint_list_projectszCList available project folders for reprint or lookup, newest first. wor_historyzQList new and in-progress Work Order Request PDFs. Defaults to 'maintenance' type.rz WOR type.) maintenance mobilemachinesafety preventive)rrQenummanuals_lookupzPLook up a manual previously associated with an Equipment, Asset, or System name. equipmentz!Equipment, asset, or system name.)rMrWrXr^_TIER0_TOOL_DEFSrVTIER0_ANTHROPIC_TOOLStakeoff_workflowrzSubmit QR Merge Jobc*d|jddiSNFolderfolderr rrDs rri8!%%"2E'Fr qr_submitzSubmit a QR code merge job for a project folder. Merges shop drawings with carrier sheets and writes results to the shared folder. Requires explicit user confirmation before execution.rfzGProject folder name (alphanumeric, spaces, dashes, dots; max 80 chars).)rUtier display_namemake_display_argsrVzDuplicate Project FoldercL|jdd|jdddS)Nrfr new_folder)SourcezNew namergrhs rririPs%eeHb)lB/( rduplicate_folderzDuplicate a project folder under a new name, copying all documents, CSV, and metadata. Requires explicit user confirmation before execution.zSource project folder name.z)New folder name (must not already exist).)rfrprpzSubmit Production Runc*d|jddiSrdrgrhs rririnrjrprodrun_submitzSubmit a Production Run merge job. Starts the merge worker for the given folder. Requires explicit user confirmation before execution.zProduction run job folder name.zSave Carrier Sheet to Projectcn|jdd|jdd|jdddS)NrOr folder_name product_code)JobzProject folder Product codergrhs rriris3552&eeM26EE."5( rscs_save_to_projectzSave a Single Carrier Sheet (from an existing creation session) to a project folder, updating the project CSV with the carrier sheet URL. Requires explicit user confirmation before execution.z5SCS job ID from a completed carrier creation session.z3Target project folder name in the shared directory.z3Product code to match or append in the project CSV.booleanzGAppend a new CSV row if the product code is not found (default: false).)rOrvrw append_row)rOrvrwzCreate Carrier Sheetc|jd|jdd|jdd|jdddS)N job_numberrOr rw customer_name)z Job numberryCustomerrgrhs rriris>%% aeeHb.ABEE."5or2( rcreate_carrierzGenerate a QR carrier sheet for an existing upload session (job_id). The shop drawing PDF must already have been uploaded via the Create Carrier UI first. Optionally overrides carrier field values. Requires explicit user confirmation before execution.zQJob ID from a completed file-upload session (returned by the UI after uploading).zJob number override.zProduct code override.zCustomer name override.zProject name override.)rOr~rwr project_name)rkrrrtrzr_TIER1_TOOL_DEFS_ALL_TOOL_DEFS_tier1_callbacksc|t|<y)zFRegister the executor for a Tier-1 tool (called by app.py at startup).N)r)tool_idfns rregister_tier1_callbackrs "Wrcltj|}|y|d}|sytfd|DS)a,Return True when user holds at least one required role for this tool. Deny-by-default: unknown tool_ids return False. Empty required_roles list means any authenticated user is permitted (mirrors @login_required). Mirrors the same role flags as the underlying Flask route decorators. FrUTc3@K|]}j|ywr]rg)r^rrs rr`z"_authorize_tool..s-qtxx{-s)rrrL)rrdefnrSs ` r_authorize_toolrs?   g &D |$%H  -H- --rc4tfdtDS)u$Return True if the user is authorized to call at least one registered tool. Used by the chat route (Phase C) to decide whether a non-admin user gets agentic mode — if they have access to at least one tool, they use chat_agentic(); otherwise they fall back to plain chat(). c36K|]}t|ywr])r)r^tidrs rr`z&has_any_tool_access..sDcsD)Dra)rLr)rs`rhas_any_tool_accessrs D^D DDrcrt|jddj}|rtj |rd|vrddiSt |z dz }|j sddd S tj|j}i}d D]}||vs||||<|S#t$rdd icYSwxYw) uGReturn production run job status (safe summary only — no file paths).rOr z..errorzInvalid job_id.z status.jsonpendinguInitializing…)statusr)rr drawing_merge label_mergezCould not read status.) r1rrg_SAFE_TOOL_ARG_REmatch _PRODRUN_DIRexistsr,r-r.r)args_userrO status_pathrsafers r_tool_prodrun_statusrs (B' ( . . 0F *008DFN*++'-7K    #0ABB 3zz+//12!F "ADyq'Q " 31223s+.B& B&& B65B6cBg}tjrt ttjddD]J}|js|jj dr0|j |jL d|iSd|iS#t$rYd|iSwxYw)z6Return project folder names from the shared directory.c6|jjSr])r=st_mtime)es rriz-_tool_reprint_list_projects..saffh//rTrkreverse.folders) _SHARED_DIRis_dirsortediterdirrrrr3)_argsrrrHs r_tool_reprint_list_projectsr sG ##%/ / <<>%***?*?*DNN5::.  / w Iw    w  s4B B)B BBct|jddj}|dvrd}t|z }|df|dz dfg}g}|D]\}}|j s|j dD]^} t j|jj} |j|j| jd|d`|jd d d |iS#t$rYwxYw) z@Return new and in-progress WOR PDF names for the requested type.rrY>r[r\rYrZnew in_progressz*.pdfz%Y-%m-%dT%H:%M:%SZ)rdaterc |dS)Nrr)xs rriz#_tool_wor_history..4s QvYrTrfiles)r1rrg_WOR_DIRrglobrutcfromtimestampr=rrrstrftimer3sort) rrwor_typewor_basedirsr directoryrrmtimes r_tool_wor_historyrs488FM2399;HOO ("H 5 M !=1$DE!  6! ( A  11!&&(2C2CD FF!NN+?@$   JJ&J5 U   s4AC++ C76C7cFt|jddj}|sddiSdj|j j }t dz }|jsddiS tj|j}|j|}|r|jdsddiSd|jdd|jd |d|jd dd S#tjtf$rddicYSwxYw) zILook up a manual by equipment name; returns name + association date only.r_r foundF zpm_manuals_index.jsonfilenameT original_name updated_at)rr_rr) r1rrgrlowerr_APP_DIRr+r,r-r.r2r3)rrr_rk index_filerrHs r_tool_manuals_lookupr8sDHH["-.446I  ((9??$**, -C33J     zz*..01 HHSME  *-YY{B/?E*4EFii b1    ' *  s;#DD D _TOOL_HANDLERSctjtjj }|xsij dd}t ||}|||||d}|sd|d<t|dd|diStj |}|d |d<t|dd |diS |||}d|vrd nd |d<t||S#t$r!} d| |d<t|ddicYd } ~ Sd } ~ wwxYw)uAuthorize, execute, and audit one tool call. Returns a result dict suitable for a tool_result message block. Never raises — errors are returned as {"error": "..."} dicts and audited. emailunknowntsrtoolrauthzdeniedoutcomerz2Access denied: insufficient permissions for tool 'rqN unknown_toolzUnknown tool: ' input_errorsuccesshandler_error: Tool execution failed.) rnowrutc isoformatrrrJrr) rrrrrraudithandlerrrs r dispatch_toolrYs) hll # - - /B ZR  Wi 0E GT *E E #ieMgYVXYZZ  )G)ie?7)2677 3t$-4v,==9ie 3,SE2ie1223s& C C1C,&C1,C1_pending_actionsiXctjtjj }t j Dcgc]\}}||dz tkDs|}}}|D] }t |= ycc}}w)z7Remove expired tokens (caller must hold _pending_lock).rN)rrrr timestamprr_PENDING_ACTION_TTL)rrvexpireds r_pending_purge_expiredrsj ,,x|| $ . . 0C-335]TQqwI\9\q]G]   Q  ^s A7!A7c ttj} t5t t j tjj|||||||||| | d t| <ddd| S#1swY| SxYw)aStore conversation state keyed by a fresh UUID token; return the token. provider_id + working_messages are provider-native so resume_agentic can rebuild the correct client/adapter. extra_tier1 holds any additional Tier-1 calls emitted in the same turn beyond the first; they are auto-cancelled on resume so every tool call in the paused assistant turn gets a result (required by OpenAI/Gemini, and correct for Anthropic too). ) rrrrMworking_messages tool_use_id tier0_resultsrwrfauthorized_toolsrY extra_tier1N) r1_uuiduuid4 _pending_lockrrrrrrr) rrrMrrrrwrfrrYrtokens r_pending_creaters*  E   ,,x||,668$ 0&* 0&& #  L! Ls AA>>Bct5ttj|}| dddy|jd|k7r dddyt|=ddd|S#1swYSxYw)zPop and return a pending action; None if missing, expired, or wrong user. Leaves the entry in place when the email doesn't match so the correct user can still consume it. NrM)rrrr)rrMrHs r_pending_consumersw $  $$U+ = $$ 99\ "j 0 $$ U #$ L$ Ls#A"A"A""A, c|jdk(rd|jdS|jdk(r.d|j|jt |j dS |j S#t$rd|jicYSwxYw)z7Convert an Anthropic SDK content block to a plain dict.rrtool_use)rr rinputr)rrr rr*r model_dumpr)blocks r_content_block_to_dictrs zzV 33 zzZ((JJ%++&   $!! $ ##$sA--BBceZdZdZdZddZy)_AgenticResultz/Normalized result of one adapter.create() call.r tool_calls stop_reasonrc<||_||_||_||_yr]r)selfrrrrs r__init__z_AgenticResult.__init__s $&rN) rr1rlistrr1rrreturnNone__name__ __module__ __qualname____doc__ __slots__rrrrrrs9|Dcgc] }t|c}Scc}wr]rGrrvrs r init_messagesz$_AnthropicAgentAdapter.init_messages/s!)*AQ***c>|Dcgc] }t|c}Scc}wr]rGrspecsss r build_toolsz"_AnthropicAgentAdapter.build_tools2s!&'AQ'''rc ddl} |jj |d|xsd||}d} g} |jD]m} | jdk(r| | jz } "| jdk(s2| j| j| jt| jdo|jD cgc] } t!| } } |j"dk(rdn|j"d k(rd n |j"}t%| | || S#t$r}td|d}~wwxYw#|j $r}t t||d}~wwxYwcc} w) Nrrzr|r )rfr}rwrvtoolsrrr rrend_turn)rr~rrrvrrrr1rrrrr rr*rrrr)rrrvrwrfr$rrresprcallsrbrstops rrz_AnthropicAgentAdapter.create5sY W * 4??))|! *D\\ _EzzV# "z) EHHejj4PUP[P[K\]^  _ 37,,?Q%a(??!--;z**j8Jd>N>N dE455/ W&'LMSV V W"" 4 S* 3 4@s4D $D&9E D# DD#&E5E  Ec d|jdS)NrBrrrr's rformat_assistant_turnz,_AnthropicAgentAdapter.format_assistant_turnQs#99rcJ|Dcgc]}d|d|dd}}d|dgScc}w)N tool_resultrr)rrrrrr)rresultsrblockss rformat_tool_resultsz*_AnthropicAgentAdapter.format_tool_resultsTsI #1]3CPQR[P\ ]   F344  s Nrkr1rrrvrmrrr rmrrrrr'rrrr1rmrr rr r rYrrr"rr.r3rrrrr%s%K1+(68:5rrc@eZdZdZd dZd dZd dZd dZd dZddZ y)_OpenAIAgentAdapterrc\ ddlm}||S#t$r}td|d}~wwxYw)Nrrrr{)rrr~rr)rrkrrs rrz_OpenAIAgentAdapter.make_client_s; T 0s## T&'IJPS S Ts + &+c |Dcgc]0}|jddt|jddd2c}Scc}w)Nrrrr r)rr1rs rrz!_OpenAIAgentAdapter.init_messagesfs8_ghZ[vv.3quuYPR?S;TUhhhs5=c f|Dcgc]!}d|d|jdd|ddd#c}Scc}w)NfunctionrrQr rTrrQ parameters)rr@rgrs rr"z_OpenAIAgentAdapter.build_toolsisM  #fI#$55#;"#N"3    s&.cXg}|r|jd|d|j| |jjj |d||xsd}|jd} | j} | jxsd} g} g} t| ddxsgD]}|jjxsd} tj|}| j|j"|jj$|d | j|j"d |jj$|d d | j&}|dk(s| rd n|dk(rdn|}| xsd| d}t)| | ||S#t $r}t t||d}~wwxYw#tj $ri}YwxYw)Nrwrr|)rfr}rvr$rr rz{}r%r@)r arguments)r rr@rr*r&)rr)rextendrxrrrrr1rrrgetattrr@rDr,r-r2r r finish_reasonr)rrrvrwrfr$rr'rchoicerrr(raw_tool_callstcraw_argsrfinishr*rs rrz_OpenAIAgentAdapter.createvs    VD E8$ 4;;**11$mt 2Dann{{ b!3 d39r B{{,,4H zz(+ LLr{{/?/?$O P  ! !ee"%'[[%5%5HM#  %%$ 4z F*J ,$nEdE4551 4 S* 3 4''  s)-E+6F+ F4F  FF)(F)cld|jdd}|jdr|jd|d<|S)NrBrrrr,)rr'rs rr.z)_OpenAIAgentAdapter.format_assistant_turns9(TXXi5HI 88L ! $ 6C  rc@|Dcgc]}d|d|ddc}Scc}w)Nrrr)r tool_call_idrr)rr1rs rr3z'_OpenAIAgentAdapter.format_tool_resultss4 Q}-=!I, W   sNr4r5r6r7r8r9r:rrrr<r<\s'K$i  $6L  rr<c@eZdZdZd dZd dZd dZd dZd dZddZ y)_GoogleAgentAdapterrcn ddlm}|j |S#t$r}td|d}~wwxYw)Nrrrr{)rrr~rrr)rrkrrs rrz_GoogleAgentAdapter.make_clientsA Z .}}S})) Z&'OPVY Y Zs 4 /4cddlm}g}|D]p}|jdd}|dk(rd}|j|j ||j j t|jddg r|S) NrrrrrBrfrr r)rrrrrrrr1)rrvrrrrs rrz!_GoogleAgentAdapter.init_messagess1 sA55(D{" OOGOOgll>T>TUXYZY^Y^_hjlYmUn>o=pOq r  s rc ddlm}|Dcgc]5}|j|d|jddt |d7}}|j |gScc}w) NrrrrQr rTrA)function_declarations)rrFunctionDeclarationrrTool)rr rr!declss rr"z_GoogleAgentAdapter.build_toolsss1    ' 'vYEE-41!N2CD (    5 9:: s:Ac Vddlm} |jj|||j |xsd|d}|jd} d} g} t| jjD]v\} } t| ddr| | jz } t| dd}|2| j|jd | |jt!|j"xsid x| rd nd }t%| | || jS#t $r}t t||d}~wwxYw) Nrrr|)rr$rrr r function_callz::r%rr&)rrr rrrrr1 candidatesr3rrrFrrrr*rr)rrrvrwrfr$rr'rcandrr(ipartfcr*s rrz_GoogleAgentAdapter.creates21 4==11!44'-~&*52Dq! !3!34 gGAttVT* !5B~ rwwir!$5rwwQUVXV]V]VcacQdef g#z dE4>> 4 S* 3 4s4D D(D##D(c|jSr]r,r-s rr.z)_GoogleAgentAdapter.format_assistant_turns xxrcLddlm}g}|D]^} tj|d}t |tsd|i}|j|jj|d|`|jd|gS#tjt f$r d|di}Y{wxYw) Nrrrr tool_name)rrrr) rrr,r-r2 TypeErrorr/r*rrfrom_function_responser)rr1rrrpayloads rr3z'_GoogleAgentAdapter.format_tool_resultss1 eA 3**Qy\2gt,#W- LL<{m2 N   Nrc|xsijdd}ttD]}|j|||||} | jdk7s | j s| j cS|j|j| g} g} | j D]0} | dtvr| j|  | j| 2g} | D]C} t| d| d|}| j| d| dtj|dE| r| d}t|d}|d |d}| d d Dcgc] }|d|dd }}t|d|d|||d| ||||j| }t||d|d|| j |j!|j#| ycc}w)a Run the provider-agnostic agentic tool-calling loop. Executes Tier-0 tools inline. Raises PendingActionRequired when the model calls a Tier-1 (mutating) tool so the caller can request user confirmation. Raises AssistantError on provider API failure. rr rrrr rrbrrrnrN)rrb) rrrMrrrrwrfrrYrrmrrrm display_args partial_replyz0 [Response truncated: tool-call limit reached.])rrange_AGENTIC_MAX_ROUNDSrrrrrr.rrr,r;rrYPendingActionRequiredrEr3)rhrrrwrfr$rrM_roundr' tier0_calls tier1_callscallrrt1rrmcrrs r _agentic_looprxs*"!!'2.J+,;L~~f&6uM   z )99   = =d CD  OO )DF|//""4(""4(  )  D"4<gEF  #Dz!&\::f-"   QB#BvJ/D44 34R[AL%QR!"$ai@K$Z[%!1tH+!&#//' E(Z!.1)"ii    ; ;M JKw;Lz @7s=F>c<tjDcgc]\}}t||r t|}}}tDcgc]}t||s|}}|r1dj |}d|d}|r|dz|zj n|}||fScc}}wcc}w)a_Build the authorized JSON-Schema tool specs + confirmation preamble. dispatch_tool() still enforces authz per-call; restricting the surfaced tool list just prevents the model from requesting tools the user can't use. Returns (tool_specs, system) where system has the Tier-1 preamble prepended when any mutating tool is available. z, uHIMPORTANT — mutating tools: when you call any of the following tools (a ), the user will see a confirmation prompt before the action executes. If they decline you will receive {"cancelled": true, "message": "Action cancelled by user."} as the tool result; acknowledge this gracefully. Propose at most one mutating action per response turn.z )rrrrrrrg) rrwrr tool_specsr tier1_names names_strpreambles r_build_agentic_contextr~Xs,113 GT 7D ) 4J #3Q3oc46P3QKQIIk*  {E E :@(V#f,335X v ' Rs!BBBc  t||\}}}|s tdt|}|j|}t ||\} }|j | } |j t|} t||| ||| |S)uAgentic chat: provider-agnostic tool-use loop with per-tool authz and audit. Resolves the provider from the user's selected default model and runs the tool-use loop on Claude, Gemini, or OpenAI. Tier-0 (read-only) tools execute inline. Tier-1 (mutating) tools pause the loop and raise PendingActionRequired; call resume_agentic() after the user decides. user: session["user"] dict — used for per-tool authorization. user_settings: caller's user-settings dict — used for key resolution. Raises AssistantUnavailable / AssistantError on API failure. Raises PendingActionRequired when a mutating tool awaits user confirmation. ro) rlrrrirr~r"rrrx) rvrwrrDrfrYrkrhrrzr$rs r chat_agenticrvs(2-GE; "#;<<";/G   %F/f=J    +E,,T(^< &*:FE5RV WWrc 0|xsijdd}t||}|y|d}|d}|d}|d} |} |d } |d } |d } |d }|jd t}|jdxsg}tjt j j}||||dd}|sd|d<t|ddd}nPtj|}|d|d<t|dd|di}n |||}d|vrdnd|d<t|t| | | tj|dgz}|D]3}|j|d|dtjdddd5t|}t!||}|s t#d |j%|}t|}|j'|j)|t+|||| | ||S#t$r!}d||d<t|ddi}Yd}~d}~wwxYw)!aResume the agentic loop after the user confirms or cancels a Tier-1 action. Retrieves the pending conversation state (including the provider id + provider-native working messages), executes (or skips) the Tier-1 tool, and continues the loop until the model emits a final reply. Raises AssistantUnavailable / AssistantError on API failure. Raises PendingActionRequired if the resumed loop hits another Tier-1 tool. rr NzKThis action has expired or was already handled. Please start a new request.rrrrrrwrfrrYrTrcancelled_by_userrzAction cancelled by user.) cancelledr no_callbackrzNo handler registered for 'z'. Contact your administrator.rrrrrkrbz=Not executed: only one mutating action is processed per turn.ro)rrrrrrrrrJrrrr,r;rrirZrrrrEr3rx)r confirmedrrDrMrHrr working_msgsrrbrrwrfr$rYrrr tier1_resultcbrcombined_resultsextrarhrkrresumed_messagess rresume_agenticrs*"!!'2.J UJ /E }\FmDFmD./LM*KIO,MHoFGnE./Eii /?@Kii .4"K hll # - - /B E .ie+/rsC  # ')$/@ A&1D E.9K L -A %#.> ?%0B C%0B C ,< y 1h /y 1 ": /"(_"H# JJNN! X ''*CC .N8?6 . 1(00(00"%0140;>00B00"%0140;>00B&(-fd @6FHH #H*-H&}5/F$H! ('H &J   0.}=7 *H !!)'^ !)'\$ !)'\% !*'p#$F) 'R. %H !!)'z/7G]%^.6G_%`.6G`%a.6G_%` &J   mW%/Wt#K%5"J9I"JJ$&.%# . E3( "84+8$* "'3b%'/&   & & && &  &  & & &&&& &RL$$!*4545nJ J ZJ;J;\()!#!##N@ N@ N@N@  N@  N@  N@ N@ N@bH XX X  X  X  X XDXX XXXX XX XX  XX~BHJ = < >8T6Q<QF\F+I+q!%s) S(