Hiep Ha VanandClaude Sonnet 5
40b12ecb15
- ui/monitoring_tab.py (1546 dong) tach thanh presentation/monitoring/** (container + 7 tab/card + shared helper), ui/monitoring_tab.py con lai re-export shim de app.py khong doi. - infrastructure/telemetry/audit_logger.py: CanonicalAuditLogger, core/audit_log.py thanh wrapper mong, tuong thich nguoc 100% voi schema .jsonl cu. - application/monitoring/monitoring_query_service.py: MonitoringQueryService read-only, filter/sort/pagination, khong import PySide6. - Go circular import model_pricing<->usage_tracker va agent_security<-> agent_security_alert (core/agent_security_types.py moi). - infrastructure/sandbox/sandbox_capabilities.py: SandboxCapabilityMatrix theo OS (Windows/Linux/macOS), chua dau noi vao core/sandbox_manager.py. - conftest.py: sua loi checkout khong ten cowork_local khien pytest import nham thu muc khac. - 77 test moi, 167/167 pass. QA da xac nhan UI/business logic khong doi (xem evidence/report/unified_report.html). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
60 lines
2.6 KiB
Python
60 lines
2.6 KiB
Python
"""Permissions card — "what is the agent allowed to touch?", displayed
|
|
nested inside the Sandbox Details card's expandable fold (see
|
|
``sandbox_tab.SandboxDetailsCard``), exactly as in the pre-refactor
|
|
``ui/monitoring_tab.py`` (``self._sbx_detail.layout().addWidget(self.ov_permissions_group)``).
|
|
Editing still opens the same Settings dialog as the Sandbox card's own
|
|
"Edit" button — this card only DISPLAYS ``ctx.config.agent_security``, it
|
|
does not host its own settings-editing UI.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
from typing import Callable
|
|
|
|
from PySide6.QtCore import Qt
|
|
from PySide6.QtWidgets import QGroupBox, QPushButton, QVBoxLayout
|
|
|
|
from ....i18n import tr
|
|
from ..shared.badges import apply_badge
|
|
from ..shared.layout_helpers import kv_row
|
|
from ..shared.open_settings import open_settings_and_notify
|
|
|
|
|
|
class PermissionsCard(QGroupBox):
|
|
def __init__(self, ctx, on_settings_changed: Callable[[], None]):
|
|
super().__init__()
|
|
self._ctx = ctx
|
|
self._on_settings_changed = on_settings_changed
|
|
self.setObjectName("monSection")
|
|
perm_lay = QVBoxLayout(self)
|
|
|
|
self.fs_lbl, self.fs_val = kv_row(perm_lay)
|
|
self.network_lbl, self.network_val = kv_row(perm_lay)
|
|
self.process_lbl, self.process_val = kv_row(perm_lay)
|
|
self.env_lbl, self.env_val = kv_row(perm_lay)
|
|
|
|
self.edit_btn = QPushButton()
|
|
self.edit_btn.setFlat(True)
|
|
self.edit_btn.clicked.connect(self._open_settings)
|
|
perm_lay.addWidget(self.edit_btn, 0, Qt.AlignLeft)
|
|
|
|
def _open_settings(self) -> None:
|
|
open_settings_and_notify(self._ctx, self, self._on_settings_changed)
|
|
|
|
def retranslate(self) -> None:
|
|
self.setTitle(tr("monitoring.overview_permissions_title").upper())
|
|
self.fs_lbl.setText(tr("monitoring.overview_perm_fs"))
|
|
self.fs_val.setText(tr("monitoring.overview_perm_fs_value"))
|
|
self.network_lbl.setText(tr("monitoring.overview_perm_network"))
|
|
self.process_lbl.setText(tr("monitoring.overview_perm_process"))
|
|
self.process_val.setText(tr("monitoring.overview_perm_process_value"))
|
|
self.env_lbl.setText(tr("monitoring.overview_perm_env"))
|
|
self.env_val.setText(tr("monitoring.overview_perm_env_value"))
|
|
self.edit_btn.setText(tr("monitoring.overview_edit"))
|
|
|
|
def refresh(self) -> None:
|
|
net_blocked = bool(self._ctx.config.agent_security.get("block_network"))
|
|
self.network_val.setText(
|
|
tr("monitoring.overview_perm_network_blocked") if net_blocked
|
|
else tr("monitoring.overview_perm_network_allowed"))
|
|
apply_badge(self.network_val, "badgeWarn" if net_blocked else "badgeSuccess")
|