Ë uPêj½¦ãóÈ—UdZddlZddlZddlZddlmZmZmZddlm Z ddl mZddlm Z mZmZddlZddlmZmZmZmZmZddlmZdd lmZdZe dzed < ddlmcmZ e!e d d«ZdZ#eed<d e"fd„Z$ddl%m&Z'ddl%m(Z)ddl%m*Z*m+Z+m,Z,m-Z-m.Z.ddl%m/Z0ddl1m2Z2ddl3m4Z4ddl5m6Z6m7Z7ddl8m9Z9ddl:m;Z;ddlZ>m?Z?m@Z@mAZAmBZBmCZCmDZDdeEd eEfd„ZFdeEdeEd eEfd„ZGdeEd eEfd„ZHdeIeEeEfd eIeEeEffd„ZJd eKd eKdzfd!„ZLeMejœjž«ZPeed"< d eKd eQdzfd#„ZRed$«ZSGd%„d&ej¨«ZUGd'„d(«ZVy#e"$rYŒôwxYw))zF LiteLLM Proxy uses this MCP Client to connnect to other MCP servers. éN)Ú AwaitableÚCallableÚ Generator)Ú timedelta)Úmetadata)ÚAnyÚFinalÚTypeVar)Ú ClientSessionÚMcpErrorÚReadResourceResultÚResourceÚStdioServerParameters)Ú sse_client)Ústdio_clientÚstreamable_http_clientzmcp>=1.28.1ÚMCP_STREAMABLE_HTTP_REQUIREMENTÚreturncóT—tdt›dtjd«›d«S)Nz'MCP streamable HTTP transport requires z, but the installed mcp Úmcpz| does not provide streamable_http_client. Fix with: pip install 'litellm[mcp]' (or upgrade mcp directly: pip install -U mcp))ÚImportErrorrrÚversion©óúk/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/experimental_mcp_client/client.pyÚ$missing_streamable_http_client_errorrs;€ÜØ 1Ô2QÐ1RðSÜ×Ñ Ó&Ð'ð(]ð ]óðr)ÚCallToolRequestParams)ÚCallToolResult)ÚGetPromptRequestParamsÚGetPromptResultÚPromptÚResourceTemplateÚTextContent)ÚTool)ÚAnyUrl)Úverbose_logger)ÚMCP_CLIENT_TIMEOUTÚMCP_NPM_CACHE_DIR)Úget_ssl_configuration)ÚVerifyTypes)ÚMCPAuthÚMCPAuthTypeÚMCPStdioConfigÚMCPTransportÚMCPTransportTypeÚcredential_redirect_hookÚ has_headerÚwithout_headerÚ auth_valuecóf—tj|jd««j«S)z(Convert auth value to Basic Auth format.zutf-8)Úbase64Ú b64encodeÚencodeÚdecode)r3s rÚ to_basic_authr9As'€ä×Ñ˜J×-Ñ-¨gÓ6Ó7×>Ñ>Ó@Ð@rÚschemecó¶—|j«jd«\}}}|j«}|r#|j«|j«k(r|S|S)aReturn ``auth_value`` with a leading `` `` removed, or unchanged when absent. Callers supply both a bare credential and a complete header value, so prefixing unconditionally yields ``Bearer Bearer ``. Scheme names are case-insensitive per RFC 7235. A credential is required after the scheme, so both a token that merely begins with the scheme text and a scheme with nothing behind it are returned untouched. Surrounding whitespace is left to ``_strip_header_whitespace`` at header-build time. ú )ÚlstripÚ partitionÚlower)r3r:Úscheme_nameÚ_Ú remainderÚ credentials rÚstrip_auth_schemerDFsW€ð!+× 1Ñ 1Ó 3× =Ñ =¸cÓ BÑ€KIØ!×(Ñ(Ó*€JÙk×'Ñ'Ó)¨V¯\©\«^Ò;ØÐØÐrcó¢—t|d«}||k(rt|«S tj|d¬«|S#t$rt|«cYSwxYw)a‰Return the base64 credentials for a ``Basic`` header, encoding only when needed. ``Basic `` carries credentials that are already encoded, so encoding the whole value again would bury the scheme inside the payload. This has to run before :func:`to_basic_auth` rather than at header-build time, where no prefix is left to find. A schemed value whose remainder does not decode is the bare ``username:password`` shape with the scheme written in front of it, and is encoded rather than forwarded as an invalid header; a pair always contains ``:``, which is outside the base64 alphabet, so the two never collide. ÚBasicT)Úvalidate)rDr9r5Ú b64decodeÚ ValueError)r3Úcredentialss rÚto_basic_credentialsrKVs\€ô+¨:°wÓ?€KØjÒ Ü˜ZÓ(Ð(ð*Ü×Ñ˜¨tÕ4ðÐøôò*Ü˜[Ó)Ò)ð*úsž7·AÁ AÚheadersc óÖ—|j«Dcic]H\}}t|t«r|j«n|t|t«r|j«n|“ŒJc}}Scc}}w©N)ÚitemsÚ isinstanceÚstrÚstrip)rLÚkeyÚvalues rÚ_strip_header_whitespacerUjsX€ð"Ÿ-™-›/÷áˆCô# 3¬Ô,ˆ‰Œ°#Ì*ÐUZÔ\_ÔJ`¸¿¹¼ÐfkÑ kóðùós”A A%Úexccó°—|g}|rQ|jd«}t|dd«}|r|j|«nt|tj «s|S|rŒQy)NrÚ exceptions)ÚpopÚgetattrÚextendrPÚasyncioÚCancelledError)rVÚqueueÚcurrentÚnesteds rÚ_first_non_cancelled_causeraqsU€Ø),¨€EÙ Ø—)‘)˜A“,ˆÜ˜ ,°Ó5ˆÙØL‰L˜Õ Ü˜G¤W×%;Ñ%;Ô<ØˆNò ðrÚ_SDK_READ_TIMEOUT_CODEcóÒ—t|t«r|jjtk7ryt|j t«syt |jj«S)aÑThe session read timeout elapsing, re-expressed as a ``TimeoutError``, or ``None``. The SDK reports its own elapsed read timeout as ``McpError`` carrying an HTTP status code in a field that otherwise holds JSON-RPC error codes, and it relays an upstream's JSON-RPC error through that same class and field. The numeric code alone therefore cannot separate the two, and an upstream answering with application code 408 would be reported as a gateway timeout it never caused. The SDK raises its own from inside an ``except TimeoutError``, so the elapsed timeout is on the context chain, while a relayed error is built from a received message and has no such chain; that is the discriminator. N)rPrÚerrorÚcoderbÚ__context__ÚTimeoutErrorÚmessage©rVs rÚ_as_read_timeoutrj‚sG€ôcœ8Ô$¨¯ © ¯©Ô:PÒ(PØÜc—o‘o¤|Ô4ØÜ˜Ÿ ™ ×)Ñ)Ó*Ð*rÚTSessionResultcó—eZdZdZdZ ddedzdedzdedzdedzdedzd edzd edzfd„Zed ed edzdedzdedzdedzdefd„«Zd e jdee je jdffd„Z y)ÚMCPSigV4Autha httpx Auth class that signs each request with AWS SigV4. This is used for MCP servers that require AWS SigV4 authentication, such as AWS Bedrock AgentCore MCP servers. httpx calls auth_flow() for every outgoing request, enabling per-request signature computation. TNÚaws_access_key_idÚaws_secret_access_keyÚaws_session_tokenÚaws_region_nameÚaws_service_nameÚ aws_role_nameÚaws_session_namecó~— ddlm}|xsd|_|xsd|_|r'|j||||||j¬«|_y|r|r||||¬«|_yddl} | jj«} | j«|_|j€td«‚y#t$rtd«‚wxYw) Nr©ÚCredentialszJMissing botocore to use AWS SigV4 authentication. Run 'pip install boto3'.zbedrock-agentcorez us-east-1)rsrtrnrorprq©Ú access_keyÚ secret_keyÚtokenz¡No AWS credentials found. Provide aws_access_key_id and aws_secret_access_key, or configure default credentials (env vars, ~/.aws/credentials, instance profile).)Úbotocore.credentialsrwrÚservice_nameÚregion_nameÚ_assume_rolerJÚbotocore.sessionÚsessionÚget_sessionÚget_credentialsrI)ÚselfrnrorprqrrrsrtrwÚbotocorers rÚ__init__zMCPSigV4Auth.__init__¡sè€ð lÝ8ð-ÒCÐ0CˆÔØ*Ò9¨kˆÔñØ#×0Ñ0Ø+Ø!1Ø"3Ø&;Ø"3Ø $× 0Ñ 0ð 1ó ˆDÕñÑ#8Ù*Ø,Ø0Ø'ô ˆDÕó $à%×-Ñ-×9Ñ9Ó;ˆGØ&×6Ñ6Ó8ˆDÔØ×ÑÐ'Ü ðHóðð(øô9ò lÜÐjÓkÐkð lús‚B'Â'B‘>ÜG—K‘KÓ Ø—‘Ü˜Ÿ™Ó)ô ˆñ! ×!1Ñ!1°4×3DÑ3DÀd×FVÑFVÓWˆØ ‰{Ô#à)4×)<Ñ)<×)BÑ)BÓ)Dò 8Ñ%ˆK˜Ø+7ˆGO‰O˜KÒ(ð 8à‹ ùs‚CC)NNNNNNN)Ú__name__Ú __module__Ú__qualname__Ú__doc__Úrequires_request_bodyrQr†ÚstaticmethodrÚhttpxÚRequestrÚResponser©rrrrmrm—s„ñð!Ðð)-Ø,0Ø(,Ø&*Ø'+Ø$(Ø'+ñ-à ™:ð-ð # T™zð-ð ™:ð -ð ˜t™ð-ð ™*ð -ð˜T‘zð-ð ™*ó-ð^ð Øð à ™*ð ð ™:ð ð # T™zð ð ™:ð ðò óð ð> §¡ð°9¸U¿]¹]ÈEÏNÉNÐ\`Ð=`Ñ3aôrrmcóÊ—eZdZdZdej ddddddddddddfdedededee eefzdzdedzd e dzd edzde eefdzdedzd e jdzde jdzdedzdedzdedzfd„Zdeee j&dzffd„Zde eefdzde eefdzfd„Zdedeegeefdefd„Zddœdeegeefdedefd„Zdee eefzddfd„Zd edefd!„Zde fd"„Zded#e j&ffd$„Zd3d%ede e!fd&„Z"e#d'e$de%fd(„«Z& d4d)e'd*edzd%ede%fd+„Z(de e)fd,„Z*d-e+de,fd.„Z-de e.fd/„Z/de e0fd0„Z1d1e2de3fd2„Z4y)5Ú MCPClienta4 MCP Client supporting: SSE and HTTP transports Authentication via Bearer token, Basic Auth, or API Key Tool calling with error handling and result parsing Sampling callbacks for upstream server LLM requests Elicitation callbacks for upstream server user-input requests ÚNÚ server_urlÚtransport_typeÚ auth_typer3Úauth_header_nameÚtimeoutÚstdio_configÚ extra_headersÚ ssl_verifyÚaws_authÚ resolved_authÚsampling_callbackÚelicitation_callbackÚlogging_callbackcó,—||_||_||_||nt|_d|_|xs t |dd«|_||_||_ | |_ | |_||_d|_ ||_| |_||_|r|j#|«yy)Nr§)r¶r·r¸r'rºÚ_mcp_auth_valuerZÚ_credential_slotr»r¼r½Ú _aws_authÚ_resolved_authÚ_last_initialize_instructionsÚ_sampling_callbackÚ_elicitation_callbackÚ_logging_callbackÚupdate_auth_value)r„r¶r·r¸r3r¹rºr»r¼r½r¾r¿rÀrÁrÂs rr†zMCPClient.__init__s©€ð" *ˆŒØ,:ˆÔØ&/ˆŒØ)0Ð)<™gÔBTˆŒØ<@ˆÔð -=Ò,kÄÈ ÐWdÐfjÓ@kˆÔØ3?ˆÔØ4AˆÔØ.8ˆŒØ,4ˆŒð2?ˆÔØ9=ˆÔ*Ø3DˆÔØ6JˆÔ"Ø2BˆÔáØ×"Ñ" :Õ.ðrrc ó0—d}|jtjk(rŽ|jst d«‚t|jj dd«|jj dg«|j|jj d««¬«}t|«dfS|jtjk(rE|j«}|j«}t|j|j||¬«dfSt€ t!«‚|j«}|j«}t#j$d |«||t'j(|j«¬ «}t|j|¬«}||fS)zå Create the appropriate transport context based on transport type. Returns: Tuple of (transport_context, http_client). http_client is only set for HTTP transport and needs cleanup. Nz,stdio_config is required for stdio transportÚcommandrµÚargsÚenv)rÎrÏrÐ)ržrºrLÚhttpx_client_factoryz.litellm headers for streamable_http_client: %s)rLrº)ržÚhttp_client)r·r.Ústdior»rIrÚgetÚ_get_safe_stdio_envrÚsseÚ_get_auth_headersÚ_create_httpx_client_factoryrr¶rºrrr&Údebugr°ÚTimeout)r„rÒÚ server_paramsrLrÑÚ transport_ctxs rÚ_create_transport_contextz#MCPClient._create_transport_context;st€ð15ˆØ×Ñ¤,×"4Ñ"4Ò4Ø×$Ò$Ü Ð!OÓPÐPÜ#8Ø×)Ñ)×-Ñ-¨i¸Ó<Ø×&Ñ&×*Ñ*¨6°2Ó6Ø×,Ñ,¨T×->Ñ->×-BÑ-BÀ5Ó-IÓJô$ˆMô Ó.°Ð4Ð4Ø×Ñ¤,×"2Ñ"2Ò2Ø×,Ñ,Ó.ˆGØ#'×#DÑ#DÓ#FÐ äØŸ™Ø ŸL™LØ#Ø)=ô ððð ô"Ð)Ü6Ó8Ð8Ø×(Ñ(Ó*ˆØ#×@Ñ@ÓBÐÜ×ÑÐMÈwÔWÙ*ØÜ—M‘M $§,¡,Ó/ô ˆô 6Ø—‘Ø#ô ˆ ð˜kÐ)Ð)rÚprovided_envcó”—||Shd£}i}|D]+}|tjvsŒtj|||<Œ-d|vr t|d<|S)a+ Return a safe environment for the stdio subprocess. If provided_env is set, we use it as-is. If provided_env is None, we return a minimal allowlist from the parent environment to avoid leaking sensitive LiteLLM keys (OPENAI_API_KEY, etc.) to sub-processes. >ÚTMPÚHOMEÚLANGÚPATHÚTEMPÚUSERÚSHELLÚLC_ALLÚTMPDIRÚWINDIRÚCOMSPECÚLOGNAMEÚPATHEXTÚ PNPM_HOMEÚ SYSTEMROOTÚ XDG_DATA_HOMEÚXDG_CACHE_HOMEÚXDG_CONFIG_HOMEÚNPM_CONFIG_CACHErò)ÚosÚenvironr()r„rÞÚ safe_keysÚsafe_envrSs rrÕzMCPClient._get_safe_stdio_envjsd€ðÐ#ØÐò ˆ ð0ˆØò 0ˆCØ”b—j‘jÒ Ü "§ ¡ ¨3¡˜’ ð 0ð XÑ-Ü+<ˆHÐ'Ñ(àˆrrÜÚ operationcƒó®K—|j«ƒd{–—†}d} |d|d}}i}|j|j|d<|j|j|d<|j|j|d<t ||fdt|j¬«i|¤Ž}|j«ƒd{–—†} | j«ƒd{–—†} d|_| Bt| d d«}t|t«r%|j«r|j«|_|| «ƒd{–—† |jddd«ƒd{–—† |jddd«ƒd{–—†S7ŒL7Œ³7Œœ7ŒC7Œ*#t$r }tj d |«Yd}~ŒLd}~wwxYw7Œ<#t$rO} tj d| «t#| «}|"t|t$j&«r||‚Yd} ~ SYd} ~ Sd} ~ wwxYw# |jddd«ƒd{–—†7w#t$r }tj d |«Yd}~wd}~wwxYwxYw#t$r}|}‚d}~wwxYw# |jddd«ƒd{–—†7w#t$rO} tj d| «t#| «}|"t|t$j&«r||‚Yd} ~ wYd} ~ wd} ~ wwxYwxYww)aa Execute an operation within a transport and session context. Handles entering/exiting contexts and running the operation. Passes sampling/elicitation/logging callbacks to the ClientSession so that upstream MCP servers can request LLM inference (sampling), user input (elicitation), or send log messages. NrérÀrÁrÂÚread_timeout_seconds)ÚsecondsÚinstructionsz%Error during session context exit: %sz'Error during transport context exit: %s)Ú __aenter__rÉrÊrËrrrºÚ initializerÈrZrPrQrRÚ __aexit__Ú BaseExceptionr&rÙrar\r])r„rÜr÷Ú transportÚin_flight_errorÚread_streamÚwrite_streamÚsession_kwargsÚsession_ctxrÚinit_resultÚinsÚeÚ exit_errorÚ root_causes rÚ_execute_session_operationz$MCPClient._execute_session_operation˜sÑèø€ð"/×!9Ñ!9Ó!;×;ˆ Ø04ˆð* :Ø(1°!©°iÀ±l˜ˆKà46ˆNØ×&Ñ&Ð2Ø6:×6MÑ6MÐ2Ñ3Ø×)Ñ)Ð5Ø9=×9SÑ9SÐ5Ñ6Ø×%Ñ%Ð1Ø59×5KÑ5KÐ1Ñ2ô"/ØØñ"ô&/°t·|±|Ô%Dð"ð!ñ "ˆKð$/×#9Ñ#9Ó#;×;ˆGð UØ+2×+=Ñ+=Ó+?×%?Ø59Ô2ØÐ*Ü!(¨°nÀdÓ!KCÜ! #¤sÔ+°· ± ´Ø=@¿Y¹Y»[˜Ô:Ù& wÓ/×/ðUØ%×/Ñ/°°d¸DÓA×AÐAð :Ø#×-Ñ-¨d°D¸$Ó?×?Ñ?ðO<ùð(<øà%?øð0øðBùÜ$òUÜ"×(Ñ(Ð)PÐRS×TÑTûðUúð@ùÜ ò :Ü×$Ñ$Ð%NÐPZÔ[Ü$>¸zÓ$J ØÐ)¬j¸Ì'×J`ÑJ`Ô.aØ$¨/Ð9ô/bÔ)ûð :ûðUØ%×/Ñ/°°d¸DÓA×AÒAøÜ$òUÜ"×(Ñ(Ð)PÐRS×TÑTûðUþäò ØˆOØûð ûð :Ø#×-Ñ-¨d°D¸$Ó?×?Ò?øÜ ò :Ü×$Ñ$Ð%NÐPZÔ[Ü$>¸zÓ$J ØÐ)¬j¸Ì'×J`ÑJ`Ô.aØ$¨/Ð9ô/bÔ)ûð :ÿsb‚K–E"—KžBIÂ1E%Â2IÂ7G6Ã E'ÃAG6Ä%E)Ä&G6Ä*E-ÅE+ÅE-ÅFÅFÅFÅ!KÅ%IÅ'G6Å)G6Å+E-Å- FÅ6FÆIÆFÆIÆFÆ G3Æ$AG.Ç$ KÇ.G3Ç3KÇ6IÇ8HÈHÈHÈIÈ H>ÈH9È4IÈ9H>È>IÉIÉ IÉ IÉIÉIÉKÉI7É0I3É1I7É6KÉ7 KÊAK Ë KË KËKËKF©Úquiet_on_errorrcƒóÀK—d} d|_|j«\}}|j||«ƒd{–—†| |j«ƒd{–—†SS7Œ 7Œ#t$r }tjd|«Yd}~Sd}~wwxYw#t$r~}t|«}|2tjd|j|jxsd«||‚|rt jnt j}|d|jxsd«‚d}~wwxYw#|G |j«ƒd{–—†7w#t$r }tjd|«Yd}~wd}~wwxYwwxYww)aROpen a session, run the provided coroutine, and clean up. quiet_on_error demotes the failure line to debug for callers that own the exception (call_tool / list_tools under raise_on_error), so an expected pass-through re-auth does not emit a warning per call; every other caller keeps the operator-visible warning.Nz$Error during http_client cleanup: %szMCP client timed out after %ss waiting for %s to answer; the server accepted the request and ended its response stream without a JSON-RPC replyrÓz)MCP client run_with_session failed for %s)rÈrÝrÚacloserr&rÙÚ ExceptionrjÚwarningrºr¶)r„r÷rrÒrÜr Úread_timeoutÚ_logs rÚrun_with_sessionzMCPClient.run_with_sessionÒsdèø€ð15ˆð TØ15ˆDÔ.Ø)-×)GÑ)GÓ)IÑ&ˆM˜;Ø×8Ñ8¸È ÓR×RðÐ&ðTØ%×,Ñ,Ó.×.Ñ.ð'ðSøð"/ùÜ$òTÜ"×(Ñ(Ð)OÐQR×SÑSûðTûô#ò Ü"2°1Ó"5ˆLØÐ'Ü×&Ñ&ðUà—L‘LØ—O‘OÒ. wô ð#¨Ð)Ù2@œ.×.Ò.Än×F\ÑF\ˆDÙÐ<¸d¿o¹oÒ>XÐQXÔYØûð ûðÐ&ðTØ%×,Ñ,Ó.×.Ò.øÜ$òTÜ"×(Ñ(Ð)OÐQR×SÑSûðTúð'üsµ‚E†/BµA¶B¹E¼AÁAÁAÁEÁBÁAÁ BÁ#A>Á9EÁ>BÂEÂ D ÂA9DÄD Ä DÄEÄD.Ä'D*Ä(D.Ä-EÄ. EÄ7EÅ EÅEÅEÅEÚmcp_auth_valuecóž—t|t«r||_y|jtj k(rt |«|_y||_y)zC Set the authentication header for the MCP client. N)rPr£rÄr¸r+ÚbasicrK)r„rs rrÌzMCPClient.update_auth_valueös;€ôn¤dÔ+Ø#1ˆDÕ Ø ^‰^œwŸ}™}Ò ,Ü#7¸Ó#GˆDÕ à#1ˆDÕ rÚdefaultcó"—|jxs|SrN)rÅ)r„rs rÚ_header_slotzMCPClient._header_slots€Ø×$Ñ$Ò/¨Ð/rcó^—i}|jr7t|jt«rç|jtj k(r/t |jd«}d|›||jd«<nÐ|jtjk(r#d|j›||jd«<n|jtjk(r |j||jd«<nS|jtjk(r |j||jd«<n|jtjk(r.t |jd«}d|›||jd«<nË|jtjk(r.t |jd«}d|›||jd«<n€|jtjk(rct |jd«}d|›||jd«<n5t|jt«r|j|j«|j rQ|j"}|r"t%||«rt'|j |«n|j }|j|xsi«t)|«S)z3Generate authentication headers based on auth type.ÚBearerzBearer Ú AuthorizationzBasic z X-API-Keyr{ztoken )rÄrPrQr¸r+Úbearer_tokenrDrrÚapi_keyÚ authorizationÚoauth2r{Úoauth2_token_exchanger£Úupdater¼rÅr1r2rU)r„rLÚ static_bearerÚ oauth2_bearerÚscheme_tokenÚexchanged_bearerÚslotÚinjecteds rr×zMCPClient._get_auth_headerss0€àˆØ×ÓÜ˜$×.Ñ.´Õ4Ø—>‘>¤W×%9Ñ%9Ò9Ü+<¸T×=QÑ=QÐS[Ó+\MØDKÈMÈ?ÐB[G˜D×-Ñ-¨oÓ>Ó?Ø—^‘^¤w§}¡}Ò4ØDJÈ4×K_ÑK_ÐJ`ÐBaG˜D×-Ñ-¨oÓ>Ó?Ø—^‘^¤w§¡Ò6Ø>B×>RÑ>RG˜D×-Ñ-¨kÓ:Ó;Ø—^‘^¤w×'<Ñ'<Ò<àBF×BVÑBVG˜D×-Ñ-¨oÓ>Ó?Ø—^‘^¤w§~¡~Ò5Ü+<¸T×=QÑ=QÐS[Ó+\MØDKÈMÈ?ÐB[G˜D×-Ñ-¨oÓ>Ò?Ø—^‘^¤w§}¡}Ò4Ü*;¸D×Ò?Ø—^‘^¤w×'DÑ'DÒDÜ.?À×@TÑ@TÐV^Ó._Ð$ØDKÐL\ÐK]ÐB^G˜D×-Ñ-¨oÓ>Ò?Ü˜D×0Ñ0´$Ô7Ø—‘˜t×3Ñ3Ô4ð ×Òð×/Ñ/ˆDá<@ÄZÐPWÐY]ÔE^”˜t×1Ñ1°4Ô8Ðdh×dvÑdvð ð N‰N˜8š> rÔ*Ü'¨Ó0Ð0r.c ó¶‡—ddddœdtttfdzdtjdzdtjdzdtj fˆfd„}|S)a‘ Create a custom httpx client factory that uses LiteLLM's SSL configuration. This factory follows the same CA bundle path logic as http_handler.py: 1. Check ssl_verify parameter (can be SSLContext, bool, or path to CA bundle) 2. Check SSL_VERIFY environment variable 3. Check SSL_CERT_FILE environment variable 4. Fall back to certifi CA bundle N)rLrºÚauthrLrºr,rc ób•—t‰j«}tjdt |«j «‰j‰jn‰j}||n|}t‰j‰j«}tj||||d|r d|gi¬«Si¬«S)z=Create an httpx.AsyncClient with LiteLLM's SSL configuration.z&MCP client using SSL configuration: %sTr™)rLrºr,ÚverifyÚfollow_redirectsÚevent_hooks) r)r½r&rÙÚtyperªrÇrÆr0r¶rÅr°ÚAsyncClient)rLrºr,Ú ssl_configÚ fallback_authÚeffective_authÚguardr„s €rÚfactoryz7MCPClient._create_httpx_client_factory..factory7s²ø€ô!6°d·o±oÓ FˆJÜ× Ñ Ð!IÌ4ÐPZÓK[×KdÑKdÔeð;?×:MÑ:MÐ:Y 4×#6Ò#6Ð_c×_mÑ_mˆMØ,0Ð,<¡DÀ-ˆNÜ3°D·O±OÀT×EZÑEZÓ[ˆEÜ×$Ñ$ØØØ#Ø!Ø!%Ù49˜Y¨¨Ð0ô ð ð@Bô ð r)r£rQr°rÚÚAuthr2)r„r7s` rrØz&MCPClient._create_httpx_client_factory-seø€ð.2Ø,0Ø&*ò äœ#œs˜(‘^ dÑ*ð ô—]‘] TÑ)ð ô—*‘*˜tÑ#ð ô × Ñ õ ð2ˆrÚraise_on_errorcƒó0K—tjd|jxsd«dtfd„} |j ||¬«ƒd{–—†}t|j«}|jDcgc]}|j‘Œ}}tjd||jxsd|«|jS7Œncc}w#tj$rtjd«‚t$r¤}t|«j}|rtjntj} | d |›d |›d|jxsd›d|j ›«d |vsd|vr*|rtjntj"} | d«|r‚gcYd}~Sd}~wwxYww)a®List available tools from the server. Args: raise_on_error: When True, re-raise exceptions instead of returning an empty list. Used by the proxy's pass-through MCP flow so it can surface upstream HTTP 401 responses as a proper 401 to the MCP client (triggering the upstream OAuth flow) rather than masking them as "connected, no tools". ú MCP client listing tools from %srÓrc“ó>K—|j«ƒd{–—†S7ŒwrN)Ú list_tools©rs rÚ_list_tools_operationz3MCPClient.list_tools.._list_tools_operation^sèø€Ø ×+Ñ+Ó-×-Ð-Ð-úó‚–—r Nú&MCP client listed %s tools from %s: %sz#MCP client list_tools was cancelledz+MCP client list_tools failed - Error Type: ú , Error: ú , Server: ú , Transport: ÚBrokenResourceErrorÚBrokenú|MCP client detected broken connection/stream during list_tools - the MCP server may have crashed, disconnected, or timed out)r&rÙr¶rrÚlenÚtoolsÚnameÚinfor\r]rrr1rªÚ exceptionr·rd)r„r9r?ÚresultÚ tool_countÚtoolÚ tool_namesr Ú error_typerÚ_log_brokens rr=zMCPClient.list_toolsRsŽèø€ô ×ÑÐ?ÀÇÁÒA[ÐT[Ô\ð .´ó .ð% Ø"&×"7Ñ"7Ð8MÐ^lÐ"7Ó"m×mˆFÜ # F§L¡LÓ 1ˆJØ7=·|±|Ö D¨t §£Ð DˆJÐ DÜ×ÑØ8¸*ÀdÇoÁoÒF`ÐY`Ðblô ð—<‘<Ðð núâ Døô ×%Ñ%ò Ü×"Ñ"Ð#HÔIØÜò Ü $ Q£× 0Ñ 0ˆJñ3Aœ.×.Ò.Än×F^ÑF^ˆDÙðØ)˜lð+Ø˜ðØŸ?™?Ò5¨gÐ6ð7Ø"×1Ñ1Ð2ð 4ô ð%¨ Ñ2°hÀ*Ñ6LÙ=K¤^×%9Ò%9ÔQ_×QeÑQeÙðRôñ ØàIûð5 üsY‚/F²B>ÁB7Á 'B>Á0B9Â3B>Â6FÂ7B>Â9B>Â>1FÃ/BFÆFÆ FÆFÆFrVcód—ttdt|«j›d|›¬«gd¬«S)zTThe error result ``call_tool`` returns when it swallows a failure (no re-execution).Útextz: )r1rTT)r¢ÚisError)ÚMCPCallToolResultr#r1rªris rÚerror_tool_resultzMCPClient.error_tool_resultˆs7€ô!Ü f´d¸3³i×6HÑ6HÐ5IÈÈCÈ5Ð3QÔRÐSØô ð rÚcall_tool_request_paramsÚhost_progress_callbackc ƒóL‡‡‡K—tjd‰j«dtdtdzdtdzfˆˆfd„Šdt fˆˆfd„} |j ||¬ «ƒd{–—†}tjd ‰j«|S7Œ&#tj$r-tjd|j|j«‚t$rÈ}ddl }|j«}tjd |«t!|«j"} |rtjntj$} | d| ›d|›d‰j›d|jxsd›d|j&› «d| vsd| vr| d«|r‚|j)|«cYd}~Sd}~wwxYww)a® Call an MCP Tool. Args: raise_on_error: When True, re-raise the underlying exception instead of returning an ``isError=True`` result. The token-exchange (OBO) tool-call path uses this to detect an upstream 401 so it can re-mint the exchanged token and retry once; every other caller keeps the default and gets graceful ``isError`` degradation. zMCP client calling tool '%s'ÚprogressÚtotalNrhc “ó•K—|r||zdznd}tjd‰j›d|›d|›d|d›d|xsd › «‰r ‰||«ƒd{–—†yy7Œ#t$r }tjd |«Yd}~yd}~wwxYww)Nédrz MCP Tool 'z' progress: ú/z (z.0fz%) - rµzFailed to forward to Host: %s)r&rKrJrr)r[r\rhÚ percentager rXrYs €€rÚon_progressz(MCPClient.call_tool..on_progress¡s¥øèø€Ù._call_tool_operation®sMøèø€Ü× Ñ Ð!JÔKØ ×*Ñ*Ø-×2Ñ2Ø2×<Ñ<Ø"-ð+ó÷ð ðúsƒAAÁA ÁAr z0MCP client tool call '%s' completed successfullyz/MCP client tool call timed out after %ss for %srz"MCP client tool call traceback: %sz*MCP client call_tool failed - Error Type: rBz, Tool: rCrÓrDrErFzkMCP client detected broken connection/stream - the MCP server may have crashed, disconnected, or timed out.)r&rKrJÚfloatrQrrr\r]rrºr¶rÚ tracebackÚ format_excrÙr1rªrdr·rW)r„rXrYr9rfÚtool_resultr rhÚerror_tracerQrras `` @rrezMCPClient.call_tools²úèø€ô ×ÑÐ:ÐK—|j«ƒd{–—†S7ŒwrN)Úlist_promptsr>s rÚ_list_prompts_operationz7MCPClient.list_prompts.._list_prompts_operationásèø€Ø ×-Ñ-Ó/×/Ð/Ð/úr@NrAz%MCP client list_prompts was cancelledzUMCP client list_prompts failed - Error Type: %s, Error: %s, Server: %s, Transport: %srErFrG)r&rÙr¶rrrHÚpromptsrJrKr\r]rrr1rªrdr·)r„rorMÚprompt_countÚpromptÚprompt_namesr rQs rrnzMCPClient.list_promptsÝs>èø€ä×ÑÐ?ÀÇÁÒA[ÐT[Ô\ð 0´=ó 0ð Ø"&×"7Ñ"7Ð8OÓ"P×PˆFÜ"% f§n¡nÓ"5ˆLØ=C¿^¹^Ö"L°6 6§;£;Ð"LˆLÐ"LÜ×ÑØ8¸,ÈÏÉÒHbÐ[bÐdpô ð—>‘>Ð!ð Qúâ"Løô ×%Ñ%ò Ü×"Ñ"Ð#JÔKØÜò Ü $ Q£× 0Ñ 0ˆJÜ× Ñ ØgØØØ—‘Ò* 7Ø×#Ñ#ô ð%¨ Ñ2°hÀ*Ñ6LÜ×$Ñ$ðRôð Iûð! üóY‚/E²B<ÁB5Á'B<Á.B7Â3B<Â4EÂ5B<Â7B<Â<1EÃ-A$EÅEÅEÅEÅEÚget_prompt_request_paramsc ƒó„‡K—tjd‰j«dtfˆfd„} |j |«ƒd{–—†}tjd‰j«|S7Œ&#t j$rtjd«‚t$rž}ddl }|j«}tjd|«t|«j}tjd ||‰j|jxsd |j «d|vsd|vrtjd «‚d}~wwxYww)z.Fetch a prompt definition from the MCP server.zMCP client fetching prompt '%s'rc“ó˜•K—tjd«|j‰j‰j¬«ƒd{–—†S7Œw)Nz0MCP client sending get_prompt request to session)rJrc)r&rÙÚ get_promptrJrc)rrus €rÚ_get_prompt_operationz3MCPClient.get_prompt.._get_prompt_operationsJøèø€Ü× Ñ Ð!SÔTØ ×+Ñ+Ø.×3Ñ3Ø3×=Ñ=ð,ó÷ð ðúsƒAA ÁAÁA Nz1MCP client get_prompt '%s' completed successfullyz#MCP client get_prompt was cancelledrz#MCP client get_prompt traceback: %sz_MCP client get_prompt failed - Error Type: %s, Error: %s, Prompt: %s, Server: %s, Transport: %srÓrErFz}MCP client detected broken connection/stream during get_prompt - the MCP server may have crashed, disconnected, or timed out.)r&rKrJrrr\r]rrrhrirÙr1rªrdr¶r·)r„ruryÚget_prompt_resultr rhrkrQs ` rrxzMCPClient.get_prompts*øèø€ä×ÑÐ=Ð?X×?]Ñ?]Ô^ð ´õ ð Ø-1×-BÑ-BÐCXÓ-Y×'YÐÜ×ÑÐ SÐUn×UsÑUsÔtØ$Ð$ð(Zùô×%Ñ%ò Ü×"Ñ"Ð#HÔIØÜò Ûà!*×!5Ñ!5Ó!7ˆKÜ× Ñ Ð!GÈÔUä $ Q£× 0Ñ 0ˆJÜ× Ñ ØqØØØ)×.Ñ.Ø—‘Ò* 7Ø×#Ñ#ô ð%¨ Ñ2°hÀ*Ñ6LÜ×$Ñ$ðSôð ûð+ üs;ƒ-E±A.ÁA,Á%A.Á+EÁ,A.Á.1D=ÂBD8Ä8D=Ä=EcƒóÂK—tjd|jxsd«dtfd„} |j |«ƒd{–—†}t|j«}|jDcgc]}|j‘Œ}}tjd||jxsd|«|jS7Œncc}w#tj$rtjd«‚t$ro}t|«j}tjd|||jxsd|j «d |vsd |vrtjd«gcYd}~Sd}~wwxYww)z)List available resources from the server.z$MCP client listing resources from %srÓrc“ó>K—|j«ƒd{–—†S7ŒwrN)Úlist_resourcesr>s rÚ_list_resources_operationz;MCPClient.list_resources.._list_resources_operation.sèø€Ø ×/Ñ/Ó1×1Ð1Ð1úr@Nz*MCP client listed %s resources from %s: %sz'MCP client list_resources was cancelledzWMCP client list_resources failed - Error Type: %s, Error: %s, Server: %s, Transport: %srErFz€MCP client detected broken connection/stream during list_resources - the MCP server may have crashed, disconnected, or timed out)r&rÙr¶rrrHÚ resourcesrJrKr\r]rrr1rªrdr·)r„r~rMÚresource_countÚresourceÚresource_namesr rQs rr}zMCPClient.list_resources*sDèø€ä×ÑÐCÀTÇ_Á_ÒE_ÐX_Ô`ð 2´]ó 2ð Ø"&×"7Ñ"7Ð8QÓ"R×RˆFÜ$'¨×(8Ñ(8Ó$9ˆNØCI×CSÑCSÖ$T°x X§]£]Ð$TˆNÐ$TÜ×ÑØ<¸nÈdÏoÉoÒNhÐahÐjxô ð×#Ñ#Ð#ð Súâ$Tøô ×%Ñ%ò Ü×"Ñ"Ð#LÔMØÜò Ü $ Q£× 0Ñ 0ˆJÜ× Ñ ØiØØØ—‘Ò* 7Ø×#Ñ#ô ð%¨ Ñ2°hÀ*Ñ6LÜ×$Ñ$ðRôð Iûð! ürtcƒóÂK—tjd|jxsd«dtfd„} |j |«ƒd{–—†}t|j«}|jDcgc]}|j‘Œ}}tjd||jxsd|«|jS7Œncc}w#tj$rtjd«‚t$ro}t|«j}tjd|||jxsd|j «d |vsd |vrtjd«gcYd}~Sd}~wwxYww)z2List available resource templates from the server.z-MCP client listing resource templates from %srÓrc“ó>K—|j«ƒd{–—†S7ŒwrN)Úlist_resource_templatesr>s rÚ"_list_resource_templates_operationzMMCPClient.list_resource_templates.._list_resource_templates_operationRsèø€Ø ×8Ñ8Ó:×:Ð:Ð:úr@Nz3MCP client listed %s resource templates from %s: %sz0MCP client list_resource_templates was cancelledz`MCP client list_resource_templates failed - Error Type: %s, Error: %s, Server: %s, Transport: %srErFz‰MCP client detected broken connection/stream during list_resource_templates - the MCP server may have crashed, disconnected, or timed out)r&rÙr¶rrrHÚresourceTemplatesrJrKr\r]rrr1rªrdr·)r„r†rMÚresource_template_countÚresourceTemplateÚresource_template_namesr rQs rr…z!MCPClient.list_resource_templatesNsKèø€ä×ÑÐLÈdÏoÉoÒNhÐahÔið ;¼mó ;ð Ø"&×"7Ñ"7Ð8ZÓ"[×[ˆFÜ-0°×1IÑ1IÓ-JÐ#Ø\b×\tÑ\tÖ-uÐHXÐ.>×.CÓ.CÐ-uÐ#Ð-uÜ×ÑØEØ'Ø—‘Ò* 7Ø'ô ð×+Ñ+Ð+ð\úâ-uøô×%Ñ%ò Ü×"Ñ"Ð#UÔVØÜò Ü $ Q£× 0Ñ 0ˆJÜ× Ñ ØrØØØ—‘Ò* 7Ø×#Ñ#ô ð%¨ Ñ2°hÀ*Ñ6LÜ×$Ñ$ðRôð Iûð! ürtržc ƒóH‡K—tjd‰«dtfˆfd„} |j|«ƒd{–—†}tjd‰«|S7Œ#tj $rtjd«‚t$r”}ddl}|j«}tjd|«t|«j}tjd ||‰|jxsd |j«d|vsd|vrtjd «‚d}~wwxYww)z,Fetch resource contents from the MCP server.z!MCP client fetching resource '%s'rc“ól•K—tjd«|j‰«ƒd{–—†S7Œw)Nz3MCP client sending read_resource request to session)r&rÙÚ read_resource)rržs €rÚ_read_resource_operationz9MCPClient.read_resource.._read_resource_operationys-øèø€Ü× Ñ Ð!VÔWØ ×.Ñ.¨sÓ3×3Ð3Ð3úsƒ*42®4Nz4MCP client read_resource '%s' completed successfullyz&MCP client read_resource was cancelledrz&MCP client read_resource traceback: %sz_MCP client read_resource failed - Error Type: %s, Error: %s, Url: %s, Server: %s, Transport: %srÓrErFz€MCP client detected broken connection/stream during read_resource - the MCP server may have crashed, disconnected, or timed out.)r&rKrrr\r]rrrhrirÙr1rªrdr¶r·)r„ržrŽÚread_resource_resultr rhrkrQs ` rrzMCPClient.read_resourceusøèø€ä×ÑÐ?ÀÔEð 4´Mõ 4ð Ø04×0EÑ0EÐF^Ó0_×*_Ð Ü×ÑÐ VÐX[Ô\Ø'Ð'ð+`ùô×%Ñ%ò Ü×"Ñ"Ð#KÔLØÜò Ûà!*×!5Ñ!5Ó!7ˆKÜ× Ñ Ð!JÈKÔXä $ Q£× 0Ñ 0ˆJÜ× Ñ ØqØØØØ—‘Ò* 7Ø×#Ñ#ô ð%¨ Ñ2°hÀ*Ñ6LÜ×$Ñ$ðSôð ûð+ üs9ƒ#D"§A»A¼AÁD"ÁAÁ1DÂBDÄDÄD")F)NF)5rªr«r¬rr.ÚhttprQr/r,r£rgr-r*r°r8rr†Útuplerr2rÝrÕrrrkrÚboolrrÌrr×rØÚlistÚMCPToolr=r¯rrVrWÚMCPCallToolRequestParamsrer!rnrr rxrr}r"r…r%r rrrrr´r´s„ñðØ+7×+<Ñ+<Ø!%Ø26Ø'+Ø $Ø.2Ø/3Ø)-Ø&*Ø+/Ø-1Ø04Ø,0ñ(/àð(/ð)ð(/ðð (/ð ˜$˜s C˜x™.Ñ(¨4Ñ/ð(/ð ™*ð (/ð˜‘ð(/ð% tÑ+ð(/ð˜C ˜H‘~¨Ñ,ð(/ð $Ñ&ð(/ð—*‘*˜tÑ#ð(/ð—z‘z DÑ(ð(/ð$ d™?ð(/ð'¨™oð(/ð# T™/ó(/ðT-*à ˆsE×%Ñ%¨Ñ,Ð,Ñ -ó-*ð^,°°S¸#°X±ÀÑ0Eð,È$ÈsÐTWÈxÉ.Ð[_ÑJ_ó,ð\8:àð8:ð˜]˜O¨Y°~Ñ-FÐFÑGð8:ð ó 8:ð| %ò "Tà˜]˜O¨Y°~Ñ-FÐFÑGð"Tðð "Tð ó"TðH 2°°d¸3À¸8±nÑ0Dð 2Èó 2ð0 Cð0¨Có0ð'1 4ó'1ðR#¨h°s¸E×ò óð ð37Ø$ñ K-à":ðK-ð!)¨4¡ðK-ðð K-ð óK-ðZ" D¨¡Ló"ðH'Ð:Pð'ÐUdó'ðR" d¨8¡nó"ðH%¨tÐ4DÑ/Eó%ðN$ vð$Ð2Dô$rr´)Wrr\r5róÚcollections.abcrrrÚdatetimerÚ importlibrÚtypingrr r r°rrrr rrÚmcp.client.sserÚmcp.client.stdiorrÚ__annotations__Úmcp.client.streamable_httpr’Ústreamable_httpÚstreamable_http_modulerZrrrÚ mcp.typesrr•rrVrr r!r"r#r$r”Úpydanticr%Úlitellm._loggingr&Úlitellm.constantsr'r(Ú&litellm.llms.custom_httpx.http_handlerr)Úlitellm.types.llms.custom_httpr*Úlitellm.types.mcpr+r,r-r.r/r0r1r2rQr9rDrKr£rUrrarÚcodesÚREQUEST_TIMEOUTrbrgrjrkr8rmr´rrrúr©s©ðòóÛ Û ß:Ñ:ÝÝß&Ñ&ãß\Õ\Ý%Ý)à%)Ð˜˜d™ Ó)ð ß?Ð?á$Ð%;Ð=UÐW[Ó\Ðð*7Ð Ó6ð¨kóõHÝ9÷õõ&Ýå+ßCÝHÝ6÷ ÷ ó ðA˜cðA cóAð #ð ¨sð °só ð Sð¨Sóð( d¨3°¨8¡nð¸¸cÀ3¸h¹óð Mð °mÀdÑ6Jó ñ!$ E§K¡K×$?Ñ$?Ó @Ð˜Ó@ð+ð+˜-ð+¨L¸4Ñ,?ó+ñ$Ð)Ó*€ôm5—:‘:ôm÷`R òR øðaò Ùð úsÁEÅE!Å E!