uPj#vUdZddlmZgdZeed<deefdZeZeed<de de fd Z d e de de fd Z y ) z Utils for handling clientside credentials Supported clientside credentials: - api_key - api_base - base_url If given, generate a unique model_id for the deployment. Ensures cooldowns are applied correctly. )Final)api_keyapi_basebase_urlclientside_credential_keysreturncnddlm}|jDcgc] }|tvs |}}gd}||zScc}w)u Provider-specific credential / endpoint-targeting fields that must NOT flow through to a client-redirected upstream. Built dynamically from ``CredentialLiteLLMParams.model_fields`` so any new provider field added there (Bedrock endpoint, Watsonx region, etc.) is gated automatically — plus a fixed list of kwargs-only fields that aren't declared on the typed model. r)CredentialLiteLLMParams) organization extra_body extra_headersdefault_headersapi_typeazure_ad_tokenazure_ad_token_provideraws_session_tokenaws_sts_endpointaws_web_identity_token aws_role_name oci_signeroci_useroci_fingerprint oci_tenancyoci_key oci_key_filenvcf_function_iduse_ssl)litellm.types.routerr model_fieldsr)r f typed_fieldskwargs_only_fieldss w/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/router_utils/clientside_credential_handler.py._admin_config_fields_to_clear_on_base_overrider$sE=&=&J&JraWqNq1rLr!> , ,,Ass 22._ADMIN_CONFIG_FIELDS_TO_CLEAR_ON_BASE_OVERRIDErequest_kwargsc4tfdtDS)z= Check if the credential is a clientside credential. c3&K|]}|v yw)N).0keyr&s r# z+is_clientside_credential..IsKsn$Ks)anyr)r&s`r#is_clientside_credentialr.Es K0JK KKlitellm_paramsctD]}||vs||||<d|vsd|vr*tD]!}|j|d||vs||||<#|S)z Generate a unique model_id for the deployment. Returns - litellm_params: dict for generating a unique model_id. rrN)rr%pop)r0r&r+fields r#get_dynamic_litellm_paramsr4Lsy*6 . "0"5N3 6^#z^'CC >E   ud +&(6u(=u% > r/N) __doc__typingrr__annotations__liststrr$r%dictboolr.r4r)r/r#r<sl $GEG,-S ,-^9g8h.hLTLdLtTdr/