import tempfile

from gaia.security import PathValidator

# No scope supplied: the CWD, plus anything the interactive CLI persisted.
validator = PathValidator()

# An explicit scope stands alone — persisted grants are NOT unioned in.
# Grant the files a session actually attached, not the folders holding them.
session = PathValidator(allowed_paths=["/home/user/documents/report.pdf"])

# Reads: scope AND secrets. `.env`, id_rsa, *.pem, ~/.ssh/* are refused even
# when they sit inside an allowed directory.
is_allowed, reason = session.validate_read("/home/user/documents/report.pdf")

# Writes: additionally refuses blocked directories and files that execute on
# their own (.bashrc, PowerShell profiles, autostart entries, .git/**).
is_allowed, reason = session.validate_write("/home/user/documents/out.md")

# A scratch directory for throwaway files. Only this directory is granted — the
# rest of the system temp dir stays denied, and those denials name the scratch
# directory. Secret and blocked-file checks still apply inside it.
session.set_scratch_dir(tempfile.mkdtemp(prefix="gaia-scratch-"))

import os

from gaia.security import PathValidator

os.environ["GAIA_ALLOWED_PATHS"] = "/home/user/evals/task-17"

v = PathValidator(allowed_paths=["/home/user"])
v.allowed_paths                       # {PosixPath('/home/user/evals/task-17')}
v.is_path_allowed("/home/user/evals/answers.json")   # False, and never prompts

from gaia.rag.sdk import RAGSDK, RAGConfig

# RAG automatically detects and blocks symlinks
rag = RAGSDK(RAGConfig())

# This is blocked if it's a symlink — PathValidator raises PermissionError
try:
    rag.index_document("/suspicious/symlink.pdf")
except PermissionError as e:
    print(f"Security error: {e}")

from gaia.rag.sdk import RAGConfig, RAGSDK

config = RAGConfig(
    max_file_size_mb=50  # Reject files > 50MB
)

rag = RAGSDK(config)

# Automatically rejects large files
try:
    rag.index_document("huge_file.pdf")  # 100MB
except ValueError as e:
    print(f"File too large: {e}")