uPj>UddlZddlZddlZddlZddlZddlmZddlZddlm Z m Z ddl Z ddl m Z ddlmZddlmZddlmZddlmZeZeed <d Zeed <Gd d e ZdededefdZdZeed<deefdZdedefdZ d$dejBdzdefdZ"dedzde#dzfdZ$ d$dedee#zdzdedzfdZ%dedzdedzfdZ& d$dede#dzde#dzfd Z' d$dedee#zdzfd!Z(dede#fd"Z)de#fd#Z*y)%N)Final) BaseModelValidationError)verbose_logger) DualCache) HTTPHandler)get_azure_ad_token_provider)get_secret_from_manager oidc_cache<!_OIDC_TOKEN_EXPIRY_MARGIN_SECONDSc"eZdZUdZedzed<y)_OidcTokenClaimsNexp)__name__ __module__ __qualname__rfloat__annotations__a/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/secret_managers/main.pyrrsCrr oidc_tokenmax_ttlreturnc|jd}t|dk7r|S|d} tj|dt| dzzz}tj |}|j |St|j }t||ttjz tz S#tttf$r|cYSwxYw)zCache TTL for a fetched OIDC token: ``max_ttl``, capped so the cache entry never outlives the token's own ``exp`` claim (minus a safety margin). Falls back to ``max_ttl`` when the token carries no readable ``exp``..=)splitlenbase64urlsafe_b64decodermodel_validate_jsonrint ValueError OverflowErrorrmintimer )rrsegmentspayloaddecodedclaimsrs r_oidc_token_cache_ttlr0s!&&s+H 8}a[G11'CCL=STCT|jdDcgc]#}|js|j%c}nt t }|Dcgc]!}tj j|#c}Scc}wcc}w)aI Return the absolute, normalized list of directories from which ``oidc/file/`` is permitted to read token files. Defaults to standard container credential mount points. Operators can override via the ``LITELLM_OIDC_ALLOWED_CREDENTIAL_DIRS`` environment variable (comma-separated list of absolute paths). $LITELLM_OIDC_ALLOWED_CREDENTIAL_DIRS,)osgetenvr"striplistr1pathrealpath)overridedraw_dirss r!_get_oidc_allowed_credential_dirsr>4syii FGH %NN3/=q1779= 7 8 *2 2ABGG  Q  22 > 3sBB)&Brequested_pathc8tjj|s tdtjj |}t D]+} tjj ||g|k(r|cS-td#t$rYDwxYw)z Resolve ``requested_path`` and verify it falls within one of the allowed credential directories. Raises ``ValueError`` otherwise. zoidc/file path must be absolute. Use the format 'oidc/file//var/run/secrets/' (note the leading slash after 'oidc/file/').zoidc/file path is outside the allowed credential directories. Set LITELLM_OIDC_ALLOWED_CREDENTIAL_DIRS to extend the allowlist.)r5r9isabsr(r:r> commonpath)r?resolvedalloweds r_resolve_oidc_file_pathrEFs 77== ( #  gg&&~6H46 ww!!8W"56'AB  L     s%B  BBtimeoutcL|tjdd}t|S)a* Factory function to create HTTPHandler for OIDC requests. This function can be mocked in tests. Args: timeout: Optional timeout for HTTP requests. Defaults to 600.0 seconds with 5.0 connect timeout. Returns: HTTPHandler instance configured for OIDC requests. g@g@)rFconnectrF)httpxTimeoutrrIs r_get_oidc_http_handlerrL`s$--s; w ''rvaluecf|ydh}dh}|jj}||vry||vryy)a Converts a string to a boolean if it's a recognized boolean string. Returns None if the string is not a recognized boolean value. :param value: The string to be checked. :return: True or False if the string is a recognized boolean, otherwise None. NtruefalseTF)r7lower)rM true_values false_values value_lowers r str_to_boolrUssG } K")L,,.Kk!  $r secret_name default_valuecFt||}|t|tsy|S)zi Guarantees response from 'get_secret' is either string or none. Used for fixing linting errors. )rVrWN) get_secret isinstancestr)rVrWrMs rget_secret_strr\s'+]SE E3!7 Lrvalc4|y|j}|r|SdS)z Strip whitespace and treat None, '', and whitespace-only strings as unset. Use when pairing secrets (mutual exclusion, optional auth) so whitespace-only values do not count as present. N)r7)r]strippeds rnormalize_nonempty_secret_strr`s$ {iikH8)T)rcZt||}|yt|tr|St|S)aP Guarantees response from 'get_secret' is either boolean or none. Used for fixing linting errors. Args: secret_name: The name of the secret to get. default_value: The default value to return if the secret is not found. Returns: The secret value as a boolean or None if the secret is not found. N)rYrZboolrU)rVrW _secret_values rget_secret_boolrds4&k=AM M4 (=))rc tj}tj}d}|jdr|j dd}|jdr\|j dd}|j dd\}}dj |j ddd}|dk(rtj|}||St} | jdd |id d i } | jd k(rT| j}t|d} | dkDrtj||| |Stj d|t"|St%d|dk(r$t'j(d} | t%d| S|dk(r$t'j(d} | t%d| S|dk(rt'j(d} t'j(d}| | t%dtj|}||St} | j| d |id|dd } | jd k(r:| j+jd d}tj||d!|St%d"|d#k(rwt'j(d$}|8tj d%t-|&} |}| t%d'|St3|d)5}|j5}|cdddS|d*k(r3t7|}t3|d)5}|j5}|cdddS|d+k(r(t'j(|}|t%d,|d-|S|d.k(rNt'j(|}|t%d,|d-t3|d)5}|j5}|cdddSt%d/ t9rtj: tj:}d0}| |j<}||j>||j>vrd0}tA||||1} tG|tHr)tKjL|}tG|tNr|S|Syt&jPj|}| tS|nd}|tG|tNr|S|S#t.$r*}d(|}tj0|t%|d}~wwxYw#1swY(xYw#1swY5xYw#1swYBxYw#t.$rJ}tj0d2||tCjDt'j(|}Yd}~*d}~wwxYw#t.$r|cYSwxYw#t.$r}||cYd}~S|d}~wwxYw)3N os.environ/zoidc//rgoogle)keyz]http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identityaudiencezMetadata-FlavorGoogle)paramsheadersi r)rjrMttlzQGoogle OIDC token for %s is already expired or expires within %ss; not caching itzGoogle OIDC provider failedcircleciCIRCLE_OIDC_TOKENz*CIRCLE_OIDC_TOKEN not found in environment circleci_v2CIRCLE_OIDC_TOKEN_V2z-CIRCLE_OIDC_TOKEN_V2 not found in environmentgithubACTIONS_ID_TOKEN_REQUEST_URLACTIONS_ID_TOKEN_REQUEST_TOKENzWACTIONS_ID_TOKEN_REQUEST_URL or ACTIONS_ID_TOKEN_REQUEST_TOKEN not found in environmentzBearer z!application/json; api-version=2.0) AuthorizationAcceptrMi'zGithub OIDC provider failedazureAZURE_FEDERATED_TOKEN_FILEzTAZURE_FEDERATED_TOKEN_FILE not found in environment will use Azure AD token provider) azure_scopez'Azure OIDC provider returned None tokenzAzure OIDC provider failed: rfileenvzEnvironment variable z not foundenv_pathzUnsupported OIDC providerlocal)client key_managerrVkey_management_settingszJDefaulting to os.environ value for key=%s. An exception occurred - %s. %s)*litellm_key_management_system_key_management_settings startswithreplacer"joinr get_cacherLget status_codetextr0 set_cacherwarningr r(r5r6jsonr ExceptionerroropenreadrE'_should_read_secret_from_secret_managersecret_manager_clientrM hosted_keysr traceback format_excrZr[ast literal_evalrbenvironrU)rVrWkey_management_systemrsecretsecret_name_split oidc_provideroidc_audr oidc_clientresponserp env_secretactions_id_token_request_urlactions_id_token_request_tokenazure_federated_token_fileazure_token_providere error_msgf safe_pathtoken_file_pathrrsecret_value_as_bools rrYrYs$+#A#A%,%E%E Fm,!))-< g&#.#6#6w#C"3"9"9#q"A x88-33C8<= H $#--+->J%!!02K"o"H-*H5'H ##s*%]] 2:yI7(([ PS(T"! #**k#9 "! !>?? j (#67J! !MNN  m +#9:J! !PQQ  h &24))^4_ *+37U7] m$--+->J%!!02K","H-'./M.N%OA'H##s*%]]_00$? $$JG$T!! !>?? g %02 :V0W &)1&&j/JV^._$0!5!7J!)()RSS%% 0#6 "!VVX ! " "f $6x@Ii% "VVX ! " "e #8,J! #8 *!MNN  j (%'YYx%8O& #8 *!MNNos+ "qVVX ! " "89 92 2 49V9V9b 0 ' = =% (4"7"="=K*6/;;G'/F/R/RR&- 1! + +,C  fc*+.+;+;F+C(!"6=33% +ZZ^^K0F:@:L;v#6RV #/J?SUY4Z++ W!0)EaS'II"((3$Y//0 " "  " " " "8 0$$b((*  ;/ 0      $ G s3RS S S,5U A S96UUAU U  S%%S  SSS),S69 U ?UU U  U  UU UU U9)U4,U92U44U9ctsytj}| |jy|j d|jvS)a Returns True if a `get_secret` read for `secret_name` would actually reach the hosted manager. Mirrors the gating `get_secret` applies below: the manager has to be up and readable, and `hosted_keys`, when set, is an allowlist of the names it is consulted for. Callers use this to tell "the manager does not have this key" apart from "the manager was never asked". FTrf)rrrr removeprefix)rVrs r!secret_manager_would_be_consultedrpsK 3 4%,%E%E&*A*M*M*U  # #M 26M6Y6Y YYrcdtj}tj|y|jdvS)a Returns True if the secret manager should be used to read the secret, False otherwise - If the secret manager client is not set, return False - If the `_key_management_settings` access mode is "read_only" or "read_and_write", return True - Otherwise, return False F) read_onlyread_and_write)rrr access_mode)rs rrrs7&-%E%E$$,0G0O " . .2Q QQr)N)+rr$r5r+rtypingrrJpydanticrrrlitellm._loggingrlitellm.caching.cachingr&litellm.llms.custom_httpx.http_handlerr3litellm.secret_managers.get_azure_ad_token_providerr .litellm.secret_managers.secret_manager_handlerr r rr rr[r'r0r1r8r>rErKrLrbrUr\r`rdrYrrrrrrs  /+->SK E,.!5-yTcTCTCT&0T%uS3493$CC4 (EMMD$8 (K (&sTzdTk4(,  :$  4Z  *sTz *cDj *"&**$;* D[*2(,pp:$pf Z3 Z4 Z R Rr