uPjvddlmZmZddlZddlZddlmZddlmZddl m Z ddl m Z ddl mZGdd eZy) )FinalcastN) BaseAzureLLM)OpenAIImageEditConfig)get_secret_str)GenericLiteLLMParams)_add_path_to_api_basec eZdZedededefdZ ddedededzd edzd edzdef d Zded edzd edefd Zded edefdZ y)AzureImageEditConfigdata request_urlreturncvd|vr.d|vr*|jDcic]\}}|dk7s ||c}}S|Scc}}w)a) Azure OpenAI ``.../openai/deployments/{deployment}/images/edits`` routes by deployment in the URL; including ``model`` in multipart fields can break the same way as image generations (LiteLLM #26316). Non-deployment edit URLs keep ``model`` when present. z images/edits/openai/deployments/model)items)r r kvs q/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/azure/image_edit/transformation.py%azure_deployment_image_edit_form_dataz:AzureImageEditConfig.azure_deployment_image_edit_form_datasD [ (-C{-R%)ZZ\BTQQ'\AqDB B Cs 55Nheadersrapi_keylitellm_paramsapi_basecxtdi|xsi}||j||_tj||S)a Validate Azure environment and set up authentication headers. Delegates to ``BaseAzureLLM._base_validate_azure_environment`` so the Azure image-edit route uses the same auth resolution as every other Azure provider (videos, vector_stores, responses, containers, ...): - prefers the Azure-style ``api-key`` header when an API key is available - falls back to ``Authorization: Bearer `` only when AAD auth is configured The previous implementation unconditionally set ``Authorization: Bearer ``, which is correct for OpenAI direct but not for Azure OpenAI / API Management gateways that expect the ``api-key`` header. Subscription-key-based deployments (e.g., behind Azure APIM) responded with ``401 "Access denied due to missing subscription key"``. API-key precedence (matches ``AzureVideosConfig``): - ``litellm_params["api_key"]`` is the source of truth. - The positional ``api_key`` kwarg only fills in when ``litellm_params["api_key"]`` is empty. - This is a deliberate change from the old ``or`` chain (where the positional ``api_key`` argument won) so behavior matches every other Azure ``validate_environment`` implementation. In production the only caller (``llm_http_handler.image_edit``) sources both values from the same ``litellm_params.api_key``, so the precedence only matters for direct callers of this method. )rr)rrr _base_validate_azure_environment)selfrrrrrparamss rvalidate_environmentz)AzureImageEditConfig.validate_environmentsAL-F0D"F  6>>#9$FN<|xstjxs td}|td|dt t dz|j dxs/tjxstdxstj}tj||d}||Stj|}t|j}d |vr|r||d <d |vrt|d |d  }n|}tj|j!| } t | S)a Constructs a complete URL for the API request. Args: - api_base: Base URL, e.g., "https://litellm8397336933.openai.azure.com" OR "https://litellm8397336933.openai.azure.com/openai/deployments//images/edits?api-version=2024-05-01-preview" - model: Model name (deployment name). - litellm_params: Additional query parameters, including "api_version". Returns: - A complete URL string, e.g., "https://litellm8397336933.openai.azure.com/openai/deployments//images/edits?api-version=2024-05-01-preview" AZURE_API_BASENz^api_base is required for Azure AI Studio. Please set the api_base parameter. Passed `api_base=` api_versionAZURE_API_VERSIONz/openai/images/edits)rr%routez api-versionrz /images/edits)r ending_path)r)litellmrr ValueErrorrstrgetr%AZURE_DEFAULT_API_VERSIONrget_azure_v1_image_urlhttpxURLdictrr copy_with) rrrrr%v1_url original_url query_paramsnew_url final_urls rget_complete_urlz%AzureImageEditConfig.get_complete_urlFs=*Sw//S>BR3S  pqypzz{|  t^// > ? 1"" 112 100 %;;#(   M#ii1 #<#6#67   ,*5L ' " 1+!25'GG G!99W-77|7L 9~r!resolved_request_urlc&|j||S)N)r)rr r9s r finalize_image_edit_request_dataz5AzureImageEditConfig.finalize_image_edit_request_datas99$@TUUr!)NNN) __name__ __module__ __qualname__ staticmethodr1r+rr r8r;rr!rr r s D s t   #&*# )e)e)et )e t )e * )e )eVAA*A A AFVTVQTVY]Vr!r )typingrrr/r)litellm.llms.azure.common_utilsr-litellm.llms.openai.image_edit.transformationrlitellm.secret_managers.mainrlitellm.types.routerr litellm.utilsr r rr!rrFs. 8O75/}V0}Vr!