license_acceptance.py

Go to the documentation of this file.

# Copyright (c) 2025-present Aquin Labs Private Limited. All Rights Reserved.
# This file is part of the Aquin Engine. Unauthorized copying, modification,
# distribution, or use of this file, via any medium, is strictly prohibited.
# Proprietary and confidential. See LICENSE for terms.
 
"""First-run AQIT license acceptance gate."""
 
from __future__ import annotations
 
import hashlib
import os
import sys
from datetime import datetime, timezone
from typing import Any
 
from aquin.auth_config import load_config, save_config
from aquin.license_text import LICENSE_URL, read_license_text
 
# Only `aquin license` (read terms) bypasses the gate. Everything else requires acceptance.
_LICENSE_EXEMPT_CMDS = frozenset({"license"})
 
 
def current_license_hash() -> str:
    return hashlib.sha256(read_license_text().encode("utf-8")).hexdigest()
 
 
def _accepted_record(cfg: dict[str, Any]) -> dict[str, Any] | None:
    block = cfg.get("license_accepted")
    return block if isinstance(block, dict) else None
 
 
def is_license_accepted() -> bool:
    record = _accepted_record(load_config())
    if not record:
        return False
    return str(record.get("hash") or "").strip() == current_license_hash()
 
 
def record_license_acceptance() -> None:
    cfg = load_config()
    cfg["license_accepted"] = {
        "hash": current_license_hash(),
        "accepted_at": datetime.now(timezone.utc).isoformat(),
    }
    save_config(cfg)
 
 
def _env_auto_accept() -> bool:
    return os.environ.get("AQUIN_LICENSE_ACCEPTED", "").strip().lower() in {"1", "true", "yes"}
 
 
def ensure_license_accepted(*, cmd: str | None) -> None:
    if cmd in _LICENSE_EXEMPT_CMDS:
        return
    if is_license_accepted():
        return
    if _env_auto_accept():
        record_license_acceptance()
        return
    _prompt_and_accept(context="first_use")
 
 
def accept_license_cli() -> None:
    """Non-interactive acceptance via `aquin --accept-license`."""
    if is_license_accepted():
        print("License already accepted.")
        return
    record_license_acceptance()
    print("License accepted.")
 
 
def _non_tty_message() -> None:
    print(
        "The AQIT license has not been accepted on this machine.\n"
        "The CLI is unusable until you accept.\n"
        f"Read the license:  {LICENSE_URL}\n"
        "Or run:  aqit license --plain\n"
        "Then run any aqit command interactively and accept when prompted, or run:\n"
        "  aqit --accept-license\n"
        "after reviewing the terms (non-interactive / CI: set AQUIN_LICENSE_ACCEPTED=1).",
        file=sys.stderr,
    )
 
 
def _prompt_and_accept(*, context: str = "first_use", exit_on_decline: bool = True) -> bool:
    if not sys.stdin.isatty():
        _non_tty_message()
        if exit_on_decline:
            sys.exit(1)
        return False
 
    from aquin.license_display import prompt_license_acceptance
 
    if not prompt_license_acceptance(context=context):
        if exit_on_decline:
            print("License not accepted. The CLI is unusable until you accept.")
            sys.exit(1)
        print("License not accepted. The CLI is unusable until you accept.")
        return False
 
    record_license_acceptance()
    from aquin.ascii_layout import center, rule, width
 
    print()
    w = width()
    print(rule("=", w))
    print(center("LICENSE ACCEPTED", w))
    print(rule("=", w))
    print()
    return True