uPj# dZddlZddlZddlmZddlmZmZmZm Z m Z ddl m Z m Z ddlZddlmZddlmZmZe dZGd d e eeZGd d e ZGd de ZGdde ZGdde ZGdde ZGdde ZGdde ZGdde ZGdde Zdede fdZ! d%d ed!ed"ed#edzdedzf d$Z"y)&z^ Secret Manager Handler Handles retrieving secrets from different secret management systems. N)Mapping)AnyFinalGenericProtocolTypeVar)ReadOnly TypedDict) print_verbose)KeyManagementSettingsKeyManagementSystem_ClientTc"eZdZUdZeeed<y)_SecretManagerClientViewzPTyped read of the untyped secret manager handle configured for this key manager.clientN)__name__ __module__ __qualname____doc__r r__annotations__s/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/secret_managers/secret_manager_handler.pyrrsZ X rrc(eZdZededzfdZy)_AzureKeyVaultSecretreturnNcyNrselfs rvaluez_AzureKeyVaultSecret.values#&r)rrrpropertystrr!rrrrrs &sTz&&rrceZdZdedefdZy)_AzureKeyVaultClientnamercyrr)r r&s r get_secretz_AzureKeyVaultClient.get_secret!rN)rrrr#rr(rrrr%r% s@s@';@rr%c"eZdZedefdZy)_GoogleKmsDecryptResponsercyrrrs r plaintextz#_GoogleKmsDecryptResponse.plaintext%s"%rN)rrrr"bytesr-rrrr+r+$s %5%%rr+c&eZdZdeeefdefdZy)_GoogleKmsClientrequestrcyrr)r r1s rdecryptz_GoogleKmsClient.decrypt*r)rN)rrrrr#objectr+r3rrrr0r0)sVwsF{3V8QVrr0c&eZdZdedeeeffdZy) _AwsKmsClientCiphertextBlobrcyrr)r r7s rr3z_AwsKmsClient.decrypt.r)rN)rrrr.rr#r3rrrr6r6-sHeHU 0CHrr6c"eZdZdededzfdZy)_GoogleSecretManagerClient secret_namerNcyrrr r;s r%get_secret_from_google_secret_managerz@_GoogleSecretManagerClient.get_secret_from_google_secret_manager2r)r)rrrr#r>rrrr:r:1sXXtXrr:c"eZdZdededzfdZy)_SyncSecretReaderr;rNcyrrr=s rsync_read_secretz"_SyncSecretReader.sync_read_secret6r)r)rrrr#rBrrrr@r@5sCCCC$JCrr@c(eZdZededzfdZy)_InfisicalSecretrNcyrrrs r secret_valuez_InfisicalSecret.secret_value:s*-r)rrrr"r#rFrrrrDrD9s -cDj--rrDceZdZdedefdZy)_InfisicalClientr;rcyrrr=s rr(z_InfisicalClient.get_secret?r)rN)rrrr#rDr(rrrrHrH>sCcC.>CrrHsrcddl} tjtj|j |k(S#|j $rYywxYw)z"Check if a string is valid base64.rNF)binasciibase64 b64encode b64decodedecodeError)rJrLs r _is_base64rRBsJ 0 0 34;;=BB >>s8?AAr key_managerr;key_management_settingsc d}d|i}|d}|tjjk(s1t|jdzt|j zdk(r&d|i}|d}|j |j}|S|tjjk(s|jj dk(rtj|} | tdt| } | durtj| } n tdd|i} | d} | jt j"| d  }|j$j'd }|S|tj(jk(r tj|d}|t+d |d tj|}d|i}|d}|j|}|d}|j'd }t-|t.r|j1}|S|tj2jk(rHddlm}t-||r4d}| |j8}|j;||}t=d|dud|S|tj>jk(r? d|i}|d}|jA|}t=d|dud|td| |S|tjBjk(r/ d|i}|d}|j;|}|td| |S|tjDjk(r/ d|i}|d}|j;|}|td| |S|tjFjk(rjddl$m%}t-||r5|j;||r|jMnd}|/td|tdt|j |S|dk(rtj|}|Sd|i}|d} | j |jN}|S#t*$r}t=d||d}~wwxYw#t*$r}t=d||d}~wwxYw#t*$r}t=d||d}~wwxYw) aL Get a secret from the configured secret manager. Args: client: The secret manager client instance key_manager: The type of key manager (e.g., "azure_key_vault", "google_kms", etc.) secret_name: The name/path of the secret to retrieve key_management_settings: Optional settings for the key management system Returns: The secret value as a string, or None if not found Raises: ValueError: If the secret cannot be retrieved or required parameters are missing Exception: For other errors during secret retrieval Nr.z+azure.keyvault.secrets._client.SecretClientKeyManagementServiceClientzBGoogle KMS requires the encrypted secret to be in the environment!Tz@Google KMS requires the encrypted secret to be encoded in base64)r& ciphertext)r1zutf-8z!AWS KMS - Encrypted Value of Key=z is None)r7 Plaintextr)AWSSecretsManagerV2)r;primary_secret_namez get_secret_value_response: [set=]z(secret from google secret manager: [set=z-No secret found in Google Secret Manager for zAn error occurred - )r;z0No secret found in Hashicorp Secret Manager for z/No secret found in CyberArk Secret Manager for )CustomSecretManager)r;optional_paramsz-No secret found in Custom Secret Manager for zMCustom secret manager client must be an instance of CustomSecretManager, got local)(r AZURE_KEY_VAULTr!typerrr( GOOGLE_KMS __class__osgetenv ValueErrorrRrMrOr3litellm_google_kms_resource_namer-rPAWS_KMS Exception isinstancer#stripAWS_SECRET_MANAGER-litellm.secret_managers.aws_secret_manager_v2rZr[rBr GOOGLE_SECRET_MANAGERr>HASHICORP_VAULTCYBERARKCUSTOM*litellm.integrations.custom_secret_managerr] model_dumprF)!rrSr;rTsecretraw_view client_object azure_view azure_clientencrypted_secretb64_flagrXgoogle_kms_viewgoogle_kms_clientgoogle_kms_responseencrypted_valueciphertext_blob aws_kms_viewaws_kms_clientaws_kms_responser-rZr[google_secret_manager_viewgoogle_secret_manager_clientehashicorp_viewhashicorp_client cyberark_viewcyberark_clientr]infisical_viewinfisical_clients! rget_secret_from_managerrLsy,F9A68JH#H-M *::@@@   ) )C /$}2E2N2N N 8 9NVW]L^ (2 ((5;;t Mo *55;;;  " " + +/K K"$))K"8  #ab b$%56 t  & 0 01A BJR OWX^M_#28#<%6%>%>99(&?&  %..55g>D MA +3399 9 "$;!=  "? }HUV V!'!1!1/!BIQRXGY ,X 6"0"8"8"8"X,K8 !!'* fc "\\^FZ MW +>>DD D  f1 2"& &2&=&Q&Q#,,'$7-F  %66;6OF~ #ST_S`!abbT MI +44:: : QY[aPbM%28% M3 +2288 8R f1 2,,'I`!8!C!C!Efj-F~ #PQ\P]!^__M*3346  M  ;' M NVW]L^"0":!,,[9FF Mg  04 5G   04 5G   04 5G sH;P +Q)+Q" P>)P99P> Q QQ" R+Q;;Rr)#rrMrdcollections.abcrtypingrrrrrtyping_extensionsr r rglitellm._loggingr "litellm.types.secret_managers.mainr r rrrr%r+r0r6r:r@rDrHr#boolrRrrrrrs  #991*Y : y'(*; '8' A8A&& WxWIHIYYDD.x. DxD#$=A [ [[[3T9 [  4Z [r