tPj7UddlZddlZddlZddlZddlmZmZmZddlm Z ddl Z ddl Z ddl m Z mZmZdZe ed<dZe ed <d Ze ed <d Ze ed <dZe ed<dZe ed<dZe ed<deehfdeehfdeehfdZe eeeeeeffed<ddddZe eeefed<dZe ed<Gdd eZ d!ed"eeeeffd#Z!d$eeefd%ed&ed'eed"eeeff d(Z"d%ed"e#efd)Z$d*e$iZ%e eeeege#effed+<d!ed%ed"e#efd,Z&e jNd-d%ed&ed.ed/e jPfd"dfd0Z)ed1d2hZ*e eeed3<d4Z+e ed5<d6Z,e ed7<d8ed"efd9Z-d:ed"efd;Z.dZ/d!eeezd?eeefd"e0fd@Z1ejddAddXedZed"e j~fd[Z@d"ee j~d/ffd\ZAgd]ZBy)_N)CallableMappingSequence)Final)context_secret_vaultget_stored_api_keyloginANTHROPIC_BASE_URLANTHROPIC_BASE_URL_ENVANTHROPIC_AUTH_TOKENANTHROPIC_AUTH_TOKEN_ENVANTHROPIC_API_KEYANTHROPIC_API_KEY_ENVOPENAI_BASE_URLOPENAI_BASE_URL_ENVOPENAI_API_KEYOPENAI_API_KEY_ENV anthropicPROFILE_ANTHROPICopenaiPROFILE_OPENAIz Claude CodeCodexOpenCode)claudecodexopencode _KNOWN_AGENTSz1https://docs.claude.com/en/docs/claude-code/setupz'https://developers.openai.com/codex/clizhttps://opencode.ai/docs _INSTALL_DOCSlitellmCODEX_PROXY_PROVIDERceZdZdZy) AgentRunErrorzGRaised for any user-actionable failure while preparing to run an agent.N)__name__ __module__ __qualname____doc__m/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/client/cli/commands/agents.pyr#r#%sQr)r#commandreturnctjj|}|tvr t|S|t t t hfS)zReturn the (display name, env profiles) for a wrapped command. Known agents map to the API family they speak. Anything else gets both families so it works regardless of which env vars the tool reads. )ospathbasenamer frozensetrr)r+bases r* agent_profiler3)sA ''""7+D }T"" -~>? ??r)base_envbase_urlapi_keyprofilesct|}|jd}t|vr(||t<||t<|j t dt|vr|dz|t<||t<|S)aqReturn a copy of base_env wired to route the agent through the proxy. Anthropic clients (Claude Code) append /v1/messages to ANTHROPIC_BASE_URL, so it stays the bare proxy root; OpenAI clients (Codex, OpenCode) expect the /v1 suffix on OPENAI_BASE_URL. ANTHROPIC_API_KEY is dropped so a stray Anthropic key cannot win over the bearer token we set. /N/v1) dictrstriprr rpoprrrr)r4r5r6r7envroots r*build_agent_envr@5sohC//#&DH$&* "#(/ $% %t,!#'%<  ")  Jr)c |jddz}dt}ddtdd|dd|d|dd|d tdd|d d|d g S) aCodex `-c` overrides that point it at the proxy. Codex ignores OPENAI_BASE_URL (it always dials api.openai.com), so the env profile alone cannot route it. It does honor a custom provider, so define one inline; supports_websockets=false forces the HTTP/SSE Responses transport because the proxy does not speak the Responses WebSocket protocol. The key is read from OPENAI_API_KEY, which build_agent_env already exports. r9r:zmodel_providers.z-czmodel_provider=""z.name="LiteLLM proxy"z .base_url="z .env_key="z.wire_api="responses"z.supports_websockets=false)r<r!r)r5r?providers r*_codex_proxy_argsrDNs//#&.D()=(>?H /02 *)* *KvQ' *J12!4 *)* *./  r)r _PROXY_ARGSc~tjtjj |}|r||SgS)zExtra CLI args an agent needs to actually honor the proxy. Claude Code and OpenCode respect the exported env vars, so they get nothing here; Codex needs its provider pointed via config overrides. )rEgetr.r/r0)r+r5builders r*agent_launch_argsrIns3 !__RWW%5%5g%>?G '78 /R/r))rGrG.c|jddz} ||dd|id}|jd vrtd |jd y #tj$r&}td|jdd|d d }~wwxYw)zProbe the proxy with the key so bad creds fail here, not inside the agent. Raises AgentRunError when the proxy is unreachable or rejects the key. Other non-2xx responses are tolerated; the agent's own call is the real test. r9z /v1/models AuthorizationzBearer )headerstimeoutz%Could not reach the LiteLLM proxy at z: zB. Is it running, and is --base-url (or LITELLM_PROXY_URL) correct?N)iiz LiteLLM rejected your key (HTTP z=). Run `lite login` to refresh it, or pass a valid --api-key.)r<requestsRequestExceptionr# status_code)r5r6rGurlrespes r*verify_proxy_keyrUxs% 4C #77)9L'MWYZ  :%.t/?/?.@AI I  &  $ $ 3HOOC4H3IA3OO O   sAB!!BBz.cmdz.bat_WINDOWS_SHIM_SUFFIXESz%%cd:~,%_CMD_PERCENT_GUARD)  _CMD_LINE_BREAKSsegmentc^|jd}|dt|t|z zzS)N\z\\)r<len)r[bares r*_double_trailing_backslashesr`s-..&D (c'lSY67 77r)tokencdjd|jdD}d|jdtzdzS)aQuote one token so both parsers that read it see the original text. Follows the algorithm the Rust standard library settled on for batch files after CVE-2024-24576. Two parsers see this token: cmd.exe, which ends a quoted string on a lone `"` and so wants an embedded one doubled, and the shim's own interpreter, which re-splits `%*` under C runtime rules where a backslash escapes the quote that follows it, so every backslash run standing before a quote is doubled. Quoting cannot stop cmd expanding `%VAR%`, so each `%` is prefixed with `%%cd:~,`: the zero-length substring of the always defined `cd` expands to nothing and leaves no `%` pair for cmd to match. z""c32K|]}t|ywN)r`).0parts r* z!_quote_for_cmd..s_d;DA_rB%)joinsplitreplacerW)raescapeds r*_quote_for_cmdrns>YY_ekkZ]N^__G &89 9C ??r)r/argscVt|dd}tjj|dj t vr|g|St d|Dr,tdtjj|ddjd|g|D}d|d S) a4Build what CreateProcess runs, routing batch shims through cmd.exe. npm installs Claude Code as `claude.cmd`, which PATHEXT lets shutil.which resolve but CreateProcess refuses to run (WinError 193), so a shim has to go through the command processor. cmd.exe does not follow the C runtime quoting that subprocess would apply to an argument list, and it would split on `&` or `|` in a forwarded argument, so the shim case is emitted as one verbatim command line with every token quoted. Every switch is load-bearing: `/s` makes cmd strip only the outer pair, leaving each token quoted and its metacharacters inert, `/e:on` keeps the command extensions that the percent guard is built out of, `/v:off` keeps `!` from expanding, and `/d` keeps a machine's AutoRun commands out of the launch. argv[0] carries the caller-facing name on POSIX; Windows needs the resolved path there. Raises AgentRunError for an argument holding a line break, which cmd would read as the end of the command line and silently drop the rest of. rNc3:K|]}tD]}||v ywrd)rZ)rerabrks r*rgz#_windows_command..s! FE5E Fc3%< F< Fsz4Cannot pass an argument containing a line break to `zW` on Windows: cmd.exe ends the command line there, so the agent would silently lose it. c32K|]}t|ywrd)rn)reras r*rgz#_windows_command..sMeN51Mrhzcmd.exe /d /e:on /v:off /s /c "rB) tupler.r/splitextlowerrVanyr#r0rj)r/rorestinners r*_windows_commandr{s$QR/D wwa &&(0FF}t} FT FFB277CSCSTXCYBZ[a a  88M}t}MME ,UG1 55r)r>cXtj|t|djS)NF)r>check) subprocessrunr; returncode)r+r>s r*_spawn_and_waitrs >>'tCy > I IIr))execvper).Nc<||t|t|yrd)listr;)r/ror>rs r*_replace_processrs D$t*d3i(r))platformrlspawnrrlrc|jdrt|t|||||t|t |y)abReplace this process with the agent; on Windows, run it as a child instead. os.exec* has no process-replacement semantics on Windows: the C runtime spawns a detached child and terminates the parent, so the shell reclaims the console and the agent's TUI never gets one. Windows therefore waits on the child and exits with its status. winN) startswith SystemExitr{rr;)r/ror>rrlrs r* _hand_offrs@ 5!/d;SABB D$t*d3i(r)c6tjjry tjdtj } tj|dtj|y#t $rYywxYw#tj|wxYw)aReattach the controlling terminal to stdin before handing off to the agent. Completing the browser SSO login can leave stdin detached from the terminal, which makes a TUI agent like Claude Code start in non-interactive mode and exit immediately. Reopening /dev/tty onto fd 0 gives the agent a live terminal; when stdin is still a tty (no login happened) this is a no-op. Nz/dev/ttyr) sysstdinisattyr.openO_RDONLYOSErrordup2close)fds r*_restore_controlling_terminalrso yyGGJ 4 A    s$A2B2 A>=A>BF) skip_verifyr4whichverifylauncherreattach_terminalrrrrrc|s tdt|d\} } ||d} | Rtjtj j |d} | rd| nd} td|dd| |s |||t||ntj||| }t|d|}|||| |dg||dd|y) agValidate, wire the environment, and hand off to the agent. On success this never returns: POSIX replaces the current process, Windows waits on the agent and exits with its status. Raises AgentRunError for missing binaries, an unreachable proxy, or a rejected key. reattach_terminal, when given, runs just before handoff to restore stdin. zNothing to run.rNz Install it first: zCould not find `z` on your PATH.r) r#r3rrGr.r/r0r@environrI)r5r6r+rr4rrrr_r7binarydocshintr> extra_argss r* run_agentrs& -.. +KAx'!*%F ~#''(8(8(DE6:+D62.wqzl/$PQQ x! (bjj C *'!*h?J$ Vgaj<:< tjjSrd)rrrr(r)r*_is_interactiver-s 99   r)ctxcN|jd}|jjd}|r|Ststjdtj d|j tt|t|}|stjd|S)Nr5r6zNo LiteLLM key found. Set LITELLM_PROXY_API_KEY (or pass --api-key) for non-interactive use, or run `lite login` from a terminal.z/No LiteLLM credentials found; starting login...)expected_base_urlvaultz9Login did not produce an API key; cannot start the agent.) objrGrclickClickExceptionechoinvoker r r)rr5r6s r*resolve_api_keyr1sggj)Hggkk)$G  "" H   JJ@AJJu 8CWX[C\]G ""#^__ Nr)z0Skip the pre-launch key check against the proxy._SKIP_VERIFY_HELPrcR|jd}t}t|}t|\}}t j d|d|j d t|||g|||rtndy#t$r#} t jt| d} ~ wwxYw)Nr5zlitellm: routing z through proxy at r9)rr) rrrr3rrr<rrr#rstr) rrrorr5started_interactiver6 display_namerrTs r*_launchrHsggj)H!0!2$S)G#F+OL! JJ"<.0B8??SVCWBXYZ +   OdO#@S._command]s VT$Z[Ar)z routed through your LiteLLM proxy. Logs in with LiteLLM if needed, verifies your key against the proxy, exports the env vars z8 reads, then hands off. Any arguments are forwarded to `z`.) rr+optionrargument UNPROCESSED pass_contextContextboolrrr)rrrs` r*_make_agent_commandr\s ]] 2D9,'BC  \\/4EVW ^^F"5+<+<= BemmB$BhsmBPTB>X B |n &x( $ M Or)cJtdtjDS)z@Build one top-level command per known agent, e.g. `lite claude`.c3@K|]\}\}}t||ywrd)r)rerr _profiless r*rgz!agent_commands..ss"j7Pv?Pi$VT2js)ruritemsr(r)r*agent_commandsrqs jTaTgTgTij jjr))r#rrIr3r@rrrU)r,N)Cr.shutilr~rcollections.abcrrrtypingrrrOauthrr r r __annotations__rrrrrrr1rr;rrurr! Exceptionr#r3r@rrDrErIrGResponserUrVrWrZr`rnr{intrrrrrrrrrrrrrrCommandrr__all__r(r)r*rsb  77 AA 44"8%82u2.U.,E,&5&  i):(;<=y.!12 3Y'789? uT#uS)C.%899:;B 6*( uT#s(^$ (e'RIR @3 @5in)<#= @c3hn   #s(^ 2S 8 = U4XseT#Y&6778 9 0s0c0d3i0-5LL     #x((( )    41:66:J0Kin-K&E&&%&8#8#8 @# @# @ 636hsm6eCHo8M6<JS8C=0JwsCx7HJSJ$&:: ) ) 3-) c ) i )  )LLGWET) ) 3-) c )  ) sHSM738+<=tC D ) S8C=('#s(*;DE)C D)D0)C )CX3(N5M+++8C=+RV+[_+(35==*kemmS01k r)