uPjMUddlZddlZddlZddlZddlZddlmZddlmZddl m Z m Z m Z ddl mZddlZddlmZ ddlmZmZddlmZmZd Z dd lmZd Ze ed<dSdZGddeZ Gdde Z!eGddZ"de#de$fdZ%de$de$de&de'de$f dZ(de$de fdZ)d e$de fd!Z*d"Z+e ed#<d$Z,e ed%<d&Z-e ed'<d(Z.e ed)<d*Z/e ed+<d,Z0e ed-<d.Z1e ed/<d0e&de&fd1Z2ejfd2Z4e ed3<ejfd4ed5Z5e ed6<dTd0e&d7e$dzde$fd8Z6de&d0e&d9e&d7e$de7e&e#ff d:Z8de&d0e&d9e&d7e$de7e&e#ff d;Z9 dUde&d0e&d9e&d7e$de:dzd?e:dzde7e&e#ffd@Z; dTde&d0e&ddMe de fdNZ?dKe de fdOZ@dPe$dQe&e$e fde$fdRZAy#e$rd ZYwxYw#e$rd ZYwxYw)VN) dataclass) formatdate)AnyFinalProtocol)urlparse)BaseLLMException)hashes serialization)paddingrsaTF)versionz0.0.020231130OCI_API_VERSIONreturnc&ts tdy)Nzicryptography package is required for OCI authentication. Please install it with: pip install cryptography)_CRYPTOGRAPHY_AVAILABLE ImportErrorb/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/oci/common_utils.py_require_cryptographyr!s " w   #rcJeZdZ ddededej dzffd ZxZS)OCIErrorN status_codemessageheadersc*t||||y)N)rrr)super__init__)selfrrr __class__s rr zOCIError.__init__)s #  rN) __name__ __module__ __qualname__intstrhttpxHeadersr __classcell__)r"s@rrr(s7 )-      %   rrc*eZdZdZdddededdfdZy) OCISignerProtocolz Protocol for OCI request signers (e.g., oci.signer.Signer). Compatible with the OCI Python SDK's Signer class. See: https://docs.oracle.com/en-us/iaas/tools/python/latest/api/signing.html Fenforce_content_headersrequestr/rNcyr#r)r!r0r/s rdo_request_signz!OCISignerProtocol.do_request_signCs r)r$r%r&__doc__rboolr2rrrr-r-;s)PU s  Y] rr-cPeZdZUdZeed<eed<eed<eed<edefdZ y) OCIRequestWrapperz Wrapper for HTTP requests compatible with OCI signer interface. Wraps request data in the format expected by OCI SDK signers, which require objects with method, url, headers, body, and path_url attributes. methodurlrbodyrct|j}|j|jrd|jzzSdzS)z0Returns the path + query string for OCI signing.?)rr8pathquery)r!parseds rpath_urlzOCIRequestWrapper.path_urlUs8!*{{FLLcFLL0IIbIIrN) r$r%r&r3r(__annotations__dictbytespropertyr@rrrr6r6Gs9 K H M K J#JJrr6datactj|dj}tj|j S)NF)usedforsecurity)hashlibsha256digestbase64 b64encodedecode)rErJs r sha256_base64rN\s7NN4?FFHF   F # * * ,,rr7r=rsigned_headerscg}|D]8}|dk(r|jd|}n||}|j|d|:dj|S)N(request-target) z:  )lowerappendjoin)r7r=rrOlinesheadervalues rbuild_signature_stringrZisgE + ' '||~&av.EFOE xr%)* + 99U rkey_strcttj|jdd}t |t j s td|S)Nutf-8)passwordzNThe provided private key is not an RSA key, which is required for OCI signing.)rr load_pem_private_keyencode isinstancer RSAPrivateKey TypeError)r[keys rload_private_key_from_strretsJ33wC c3,, -hii Jr file_pathc. t|dd5}|jj}dddst d|t |S#1swY$xYw#t$rtd|t$r}t d|d||d}~wwxYw) z%Loads a private key from a file path.rr])encodingNzPrivate key file not found: z!Failed to read private key file 'z': zPrivate key file is empty: )openreadstripFileNotFoundErrorOSError ValueErrorre)rffr[es rload_private_key_from_filerrsT )S7 3 .qVVX^^-G . 6ykBCC $W -- . . L">yk JKK T9)CsKLRSSTs-AAAAAB=BB OCI_REGION_OCI_REGION_ENVOCI_USER _OCI_USER_ENVOCI_FINGERPRINT_OCI_FINGERPRINT_ENV OCI_TENANCY_OCI_TENANCY_ENV OCI_KEY_FILE_OCI_KEY_FILE_ENVOCI_KEY _OCI_KEY_ENVOCI_COMPARTMENT_ID_OCI_COMPARTMENT_ID_ENVoptional_paramsc |jdxs'tjjtxsd|jdxs#tjjt|jdxs#tjjt |jdxs#tjjt |jdxs#tjjt|jdxs#tjjt|jdxs#tjjtd S) a Merge OCI credentials from optional_params (explicit, always wins) and environment variables (fallback). Returns a dict with resolved values for: oci_region, oci_user, oci_fingerprint, oci_tenancy, oci_key, oci_key_file, oci_compartment_id oci_regionz us-ashburn-1oci_useroci_fingerprint oci_tenancyoci_key oci_key_fileoci_compartment_id)rrrrrrr) getosenvironrtrvrxrzr~r|r)rs rresolve_oci_credentialsrs&)),7l2::>>/;Zl^l#'' 3Trzz~~m7T*../@AiRZZ^^ThEi&**=9]RZZ^^L\=]"&&y1QRZZ^^L5Q'++N;`rzz~~N_?`-112FGr2::>>ZqKr rz^[a-z][a-z0-9-]{0,30}[a-z0-9]$_OCI_REGION_RE/z/actions/[^/?#]+/?$_OCI_ACTION_PATH_REapi_basec|r%tjd|jdSt|}|d}t |t rt j|stdd|dd|d S) a.Return the OCI inference base URL, respecting any explicit api_base override. If ``api_base`` already ends with a fully-formed OCI action path (``/{OCI_API_VERSION}/actions/``), that suffix is stripped so callers can append their own action path without producing a doubled URL. r<rrzInvalid OCI region zB: must match ^[a-z][a-z0-9-]{0,30}[a-z0-9]$ (e.g. 'us-ashburn-1').rrzhttps://inference.generativeai.z.oci.oraclecloud.com) rsubrstriprrar(rmatchr)rrcredsregions rget_oci_base_urlrs"&&r84;;C@@*?;E,'F fc ".*>*>v*F%fZ/st  -VH4H IIr request_datac:|jd}tj|jd}t |jddj }|dvrt d|i|}|jdd|jd t t|t|||| }| t d  |j|d |j|j||fS#t$r} tdd| d| d } ~ wwxYw)zHSign a request using an OCI SDK Signer object passed in optional_params. oci_signerr]r7POST>GETPUTrPATCHDELETEzUnsupported HTTP method: content-typeapplication/jsoncontent-length)r7r8rr9Nz;oci_signer cannot be None when calling sign_with_oci_signerTr.iz1Failed to sign request with provided oci_signer: z. The signer must implement the OCI SDK Signer interface with a do_request_sign(request, enforce_content_headers=True) method. See: https://docs.oracle.com/en-us/iaas/tools/python/latest/api/signing.htmlr)rjsondumpsr`r(upperro setdefaultlenr6r2 Exceptionrupdater) rrrrrr9r7prepared_headersrequest_wrapperrqs rsign_with_oci_signerrs2(++L9J**\*11':D++Hf=>DDFF >>4VH=>>)k0BC 0#c$i.A.f(TdkopOVWW ""?D"Q NN?**+ D=  CA3G__   sC:: DDDct|}|d}|d}|d}|d}|d} |r|r|r|s3| s1tddtdtdtdt d t d t|jd d j} tj|jd} t|} | jxsd} | j}t!d}|jdd}tt#| }t%| }|||||d}gd}t'| | ||}t)d}|rUt+|ts#tddt-|j. |j1ddj1dd}|r t3|n| r t5| nd}| tdd |j7|jdt9j:t=j>}tAjB|jE}|d|d|}d|ddjG|d |d!}|jI||||||d"|| fS)#zVSign a request using manually provided OCI credentials (user/fingerprint/tenancy/key).rrrrrizMissing required OCI credentials: oci_user, oci_fingerprint, oci_tenancy, and at least one of oci_key or oci_key_file. These can also be supplied via environment variables: , z (or z@). Alternatively, provide an oci_signer object from the OCI SDK.rr7rr]rT)usegmtrr)datehostrrx-content-sha256)rrQrrrrNrzKoci_key must be a string containing the PEM private key content. Got type: z\nrSz zWPrivate key is required for OCI authentication. Provide either oci_key or oci_key_file.zSignature version="1",keyId="z"",algorithm="rsa-sha256",headers="rRz ",signature="") authorizationrrrrr)%rrrvrxrzr~r|r(rrrrr`rr=netlocrrrNrZrratyper$replacererrsignr PKCS1v15r SHA256rKrLrMrVr)rrrrrrrrrrr7r9r?r=rr content_typecontent_lengthx_content_sha256headers_to_signsigned_header_namessigning_stringoci_key_content private_key signature signature_b64key_idrs rsign_with_manual_credentialsrs+?;EJ'H"#45O}-K9%G/L ?+gQ]I!/$8#9DDFF**\*11':DX&F++$D--DD)D!++n6HILD NN+D1$(, .O"364RefN#'O'3'!!%g!7!7 8: "//%6>>vtL  "/2 ( 5  m  #''g& I "++I6==?M"m1XJa/@AF HH0123#_A  ' NN*(, 0    D=rapi_keymodelstream fake_streamc\|jdt||||St||||S)at Route to the appropriate OCI signing method based on what credentials are present. If ``oci_signer`` is in optional_params, use the OCI SDK signer object. Otherwise use manual RSA-SHA256 signing with explicit credentials (which can also be supplied via OCI_* environment variables). Returns: Tuple of (signed_headers, signed_body_bytes) r)rrr)rrrrrrrrs rsign_oci_requestrgs8(<(4#G_lHUU ',PX YYrc\|jdd|jddt|S)a Populate common OCI request headers (content-type, user-agent). Full credential validation is deferred to signing time so that credentials supplied via environment variables are resolved at call time rather than at construction time. rrz user-agentzlitellm/)r_litellm_version)rrrs rvalidate_oci_environmentrs3 ~'9: |x0@/A%BC Nrr(floatr4r'ListDictany)stringnumberbooleanintegerarrayobjectrOCI_JSON_TO_PYTHON_TYPESschemac|jditdtdtffd |}t|tr|j dd|S)uWInline all ``$ref``/``$defs`` references — OCI does not support JSON Schema ``$ref``.z$defsobjrct|trd|vro|d}|jdrW|jdd}|vrddiSj | j ||j |S|S|jDcic]\}}||c}}St|tr|Dcgc] }| c}S|S#j |wxYwcc}}wcc}w)Nz$refz#/$defs/rrr) rarB startswithsplitaddrdiscarditemslist) rrefrdkvitem_resolvedefsresolving_stacks rrz)resolve_oci_schema_refs.._resolves c4 } [>>*-!$3!3Co- &11#'',5'c(:;'//4 /2yy{;tq!Ax{N; ; c4 /23tHTN3 3 (//4;3sCC-C3C*N)rsetrrarBpop)rresolvedrrrs @@@rresolve_oci_schema_refsrsV**Wb)D"%%Occ&v&H(D! Wd# Orrct|trd|vrcd|vr_|dDcgc])}t|tr|jddk(r(|+}}|r&i||d}|jddt |S|j Dcic]\}}|t |c}}St|t r|Dcgc] }t |c}S|Scc}wcc}}wcc}w)uResolve Pydantic v2 ``Optional[T]`` → ``anyOf`` patterns. Pydantic v2 emits ``{"anyOf": [{"type": "T"}, {"type": "null"}]}`` for ``Optional[T]``. OCI models don't understand ``anyOf``, so we pick the first non-null branch and merge top-level metadata into it. anyOfrnullrN)rarBrrresolve_oci_schema_anyofrr)rtnon_nullrrrrs rrrs#t c>fC/*-g,pQz!T?RWXW\W\]cWdhnWnqpHp"8S"8HQK"8 Wd+/99;>99;G41a+A..GG#t;>?4(.?? Jq H?s)C C C9Cct|tr|Dcgc] }t|c}St|ts|Si}|j D]c\}}|dk(r |dk(r||dk(r=|dk(rd||<$t|tr"|Dcgc] }|dk7s | }}|r|dnd||<Vt|||<e|j dd k(r d |vrddi|d <|j d }|j d }d |vr`t|tr;t|tr+|D cgc]} t| t s| |vs| c} |d <|St|tsg|d <|Scc}wcc}wcc} w) zRecursively remove OCI-incompatible fields from a JSON schema. Strips ``title`` keys, removes ``None``-valued ``default`` entries, normalises ``type: [T, "null"]`` list types, and ensures arrays carry an ``items`` definition. titledefaultrrrrrrrrrequired properties)rarsanitize_oci_schemarBrrr() rr sanitizedrdrYrrrrrps rrrs&$6<=d#D)== fd # ')Illn 4 U '>  )   &=~!) #%&',=%ds#E E E E%3E%8E% description param_schemac|r|gng}d|vr|jd|dd|vr|jd|dd|vsd|vr[g}d|vr|jd|dd|vr|jd|d|jd d j|d |vr|jd |d |rd j|SdS)aMEmbed schema constraints into a Cohere parameter description. ``CohereParameterDefinition`` only has ``type``, ``description``, and ``isRequired``. Rich constraints (``enum``, ``format``, ``minimum``, ``maximum``, ``pattern``) are appended to the description string so the model can still see and respect them. enumzAllowed values: formatzFormat: minimummaximumzmin=zmax=zRange: rpatternz Pattern: z. r<)rUrV)rrparts range_partss renrich_cohere_param_descriptionr s%0K=RE  ' V(<'=>?< x X 6789L I$=  $   l9&=%>? @  $   l9&=%>? @ wtyy5678L  yi!8 9:;$499U ,",r)rNr#)NNNN)BrKrHrrre dataclassesr email.utilsrtypingrrr urllib.parserr))litellm.llms.base_llm.chat.transformationr cryptography.hazmat.primitivesr r )cryptography.hazmat.primitives.asymmetricr r rrlitellm._versionrrrrArrr-r6rCr(rNrBrrZrerrrtrvrxrzr|r~rrcompilerrrtuplerrr4rrrrrrr rrrrs  !"''! F$DF"< $#     &     JJ J( - -# -3cDRV[^ss .# .# .(&%! u!/e/'%')5) e!55Td(# #DEE'RZZ1_,==P(QRURJdJcDjJCJ4% %%% %  4; %Pn nnn n  4; nl#Z ZZZ Z 4Z Z : Z 4KZZ 4;Z8 4Z <  3%S#X/DcNtCH~<##('''T--DcN-WZ-a$#$ s#GGGGG*)G*