tPjϚUddlZddlZddlZddlmZmZddlmZmZddl m Z ddl Z ddl Z ddl mZddlmZddlmZmZmZmZddlmZdd lmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$dd l%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/d d l0m1Z1m2Z2m3Z3m4Z4d d l5m6Z6m7Z7m8Z8m9Z9m:Z:m;Z;mGddeZ?GddedZ@GddeZAGddeZBdZCeeDd<dZEeeDd<d ZFeeDd!<d"ZGeeDd#<d$e*d%eHfd&ZId'e$d%eHfd(ZJd)e jd%e$fd*ZLed+d'e$d%eeHeMfdzfd,ZNed+d-e=d'e$d%e*fd.ZOd'e$d%ee=gdffd/ZPd'e$d%egeeHeMfdzffd0ZQ dzed+d1eHdzd'e$d%eHdzfd2ZRd3eHd%dfd4ZSd5eTd%eHfd6ZUd7eVe>d%dfd8ZWd9ZXd{d7eVeYeHefd:eZd%dfd;Z[d7eVeYeHefd%eYeHefdzfd<Z\d7eVeYeHefd%eYeHefdzfd=Z]d>e jd%eHdzfd?Z_d>e jd%eHfd@Z`dAeZd%eTfdBZaddCdDdEddEddEdEdEdF dGeHdHeYeHeHfdzdIeZdJeZdKeZdLeHdzdMeZdNeHdzdOeZdPeZdQeZd%e@dzfdRZbd7eMdSeMd%eVe>fdTZcdUeHd%eAfdVZddWeHd%eYeHeHffdXZedUeHdYeHdWeHd%eBdzfdZZfdUeHdYeHdWeHd7eVe>d%eHdzf d[Zgd7eVe>d%eHdzfd\ZhdUeHd%dfd]ZidUeHd^eHd_eTd`e*d%df daZjd-e=dbe6d'e$d%e*fdcZkdUeHd_eTd'e$d%dfddZle jdefe jdgdhddije jdkdhddlje jd)e jd_eTdmeTd%dfdnZpe jdofe jd)e jfdpZqe jdqfe jd)e jfdrZre jdsfe jd)e jfdtZsduetd5eTd%eHfdvZue jdwfdxZwewjergdyZyy)|N)CallableMapping)AnyFinal) urlencode)Console)Table) NotRequiredReadOnly TypedDict assert_never)CLI_JWT_EXPIRATION_HOURS) DISABLE_KEYRING_ENV_VARSYSTEM_KEYRINGKeyringDisabledKeyringDiscardsWritesKeyringNotInstalledKeyringUnreachable SecretErased SecretFound SecretMissing SecretStoredSecretStranded SecretVault) CliTokenRecordCredentialNotClearedCredentialNotRecordedCredentialNotSaved SecretSaveclear_cli_tokenget_cli_token_file_pathis_cli_token_freshload_cli_tokensave_cli_token)CLAUDE_SETTINGS_PATHSETTINGS_FILE_OWNERSClaudeSettingsErrorwrite_claude_settings)Http PkceFailureRevocationUnavailable fresh_api_keypkce_token_recordrevoke_stored_credentialrun_pkce_loginceZdZUeed<eed<eed<eed<eed<eed<eed<eed<eeeed <eeeed <eeeed <eeeed <eeeed <eeeed<eeedzed<y) CliTokenDatabase_urlkeyuser_id user_email user_roleauth_header_name jwt_token timestamp expires_at refresh_token client_idtoken_endpointrevocation_endpointresourceNteam_id)__name__ __module__ __qualname__str__annotations__floatr r k/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/client/cli/commands/auth.pyr2r2;sM H LONNU+,,K,-- C())[-..!+c"233{3'(( k#*- ..rIr2cNeZdZUedzed<edzed<eeed<edzed<y)CliTeamNrA team_aliasmodels max_budget)rBrCrDrErFlistrGrHrIrJrLrLMs* 4Zd  I rIrLF)totalcpeZdZUeed<eeed<eeeed<eeedzed<eeeed<y) CliContextObjr3base_url_explicit secret_vaultNapi_keyapi_key_from_token_file) rBrCrDrErFr boolr rrHrIrJrSrSTsFM"4((h{344 k#*- ..%k$&788rIrScZeZdZUeed<eed<eed<eeed<eed<eed<eed<y) CliPollDatastatusr4r5teams team_detailsrequires_team_selectionrAN)rBrCrDrErFrPobjectrXrHrIrJrZrZ\s, K H L 9!! LrIrZc,eZdZUeed<eed<eed<y)CliSsoStartDatalogin_id poll_secret user_codeN)rBrCrDrErFrHrIrJrarafsMNrIracHeZdZUeed<edzed<eeed<edzed<y) CliAuthResultrVNr5r\rA)rBrCrDrErFrPrHrIrJrfrfls% L 4Z 9 4ZrIrfzpip install 'litellm[cli]'KEYRING_INSTALL_HINTz2keyring --enable (or unset PYTHON_KEYRING_BACKEND)KEYRING_ENABLE_HINTz]Logged out locally, but your credential is still in the OS keychain and could not be removed.STRANDED_CREDENTIAL_MESSAGEzLogged out locally, but your OS keychain could not be checked, so a credential stored there by an earlier login may still be usable.UNCHECKED_KEYCHAIN_MESSAGEoutcomereturncRt}|xtdx\yxtdx\d|dtSxtdx\dt d|dSxt dx \d |dSxtdx\d |d tSxtd x \}d |d|dStdx\d|dSy)z[Tell the user where the credential ended up, and how to get keychain storage if it did not.rHNz&Credential stored in your OS keychain.zCredential stored in zJ (owner-only). For OS keychain storage, install the keyring package with: zKeychain storage is off (z). Credential stored in z (owner-only).z/No OS keychain available. Credential stored in zPYour keyring backend keeps nothing it is given, so the credential was stored in z5 (owner-only) instead. For OS keychain storage, run: detailz4Signed in, but the credential could not be saved to : z. Any login you already had is untouched. Run 'lite login' again once that path is writable, or 'lite logout' to clear whatever is stored now.z:Signed in, and the credential is in your OS keychain, but z could not be replaced, so it still describes your previous login and may still hold its credential. Run 'lite login' again once that path is writable, or 'lite logout' to clear both.) r!rrrgrrrrrhrr)rkpathros rJstorage_noticerrs)+D  \^; " "'v.NNbMce # _ ./F.GG_`d_eest t !  !DTF.Y Y" $ " $bcgbhiGGZF[] % /  .FtfBvhWNN / # $LTFS!! %rIvaultc|jxtdx \dtdSxtdx \dtdSxt dx\ yxt dx\yxtdx\yy) zSExplain why the secret half of a stored login cannot be produced, and what fixes itrHNzuYour credential is in your OS keychain, which this install cannot read without the keyring package. Install it with: z$, or run 'lite login' to start over.z.Your credential is in your OS keychain, which z: is blocking. Unset it, or run 'lite login' to start over.znYour credential is in your OS keychain, which could not be read. Unlock it, or run 'lite login' to start over.zXYour credential could not be read from your OS keychain. Run 'lite login' to start over.)readrrgrrrrrrss rJkeychain_unreadable_noticerws **, " "55I4JJnp # _ @AX@YZ??  "  !. " [] ,m_]_ ,m- ,rIctxc\|j}|tS|jdxstS)z\Where this invocation reads and writes secret material; injectable through ctx.obj for testsrU)objrget)rxctx_objs rJcontext_secret_vaultr}s*+.77G ;;~ & 8.8rIrvcFt|}|dS|jdS)zThe stored credential as a plain mapping, with the secret resolved out of the vault. The PKCE renewal and revocation helpers read records by field name, so this is the shape they get; the keychain split lives underneath, in `load_cli_token`. rvNT) exclude_none)r# model_dump)rsrecords rJ load_tokenrs+ #/F>4Kv'8'8d'8'KKrIrc.ttdi||S)zTStore a credential the PKCE layer produced, secret in the vault and the rest on diskrvrH)r$r)rrss rJ save_tokenrs .262% @@rIc$dtddffd }|S)aPersist a silently renewed credential, and say on stderr when no store would keep it. A renewal rotates the refresh token, so a rotation that is never stored logs this machine out on the next command; the user hears about it rather than guessing. rrlNcvt|}t|ttfrt t |yyNrv)r isinstancerr_warnrr)rrkrss rJsavez_renewal_saver..saves3#F%8 g 24IJ K .) * LrI)r2)rsrs` rJ_renewal_saverrs+\+d+ KrIc@dtttfdzffd }|S)zTRe-read the record mid-renewal, so a rotation a sibling `lite` process saved is seenrlNctSr)rrvsrJreloadz_renewal_reader..reloads&&rI)rrEr_)rsrs` rJ_renewal_readerrs$'GCK(4/' MrIexpected_base_urlct|}|y|$|jd|jdk7ryt|t |t j t|tS)aIGet the stored API key. If expected_base_url is provided, the key is only returned when it was originally issued for that URL. This prevents credential leakage when the CLI is pointed at a different (possibly malicious) server. A key obtained by ``lite login --pkce`` is refreshed here once it nears expiry. rvNr3/rwarn) rr{rstripr-rrequestsSessionrr)rrs token_datas rJget_stored_api_keyrsl#/J$ )CGXG_G_`cGd)d uu%   rImessagec2tj|dy)NTerr)clickecho)rs rJrrs JJwD!rIrenewsc|rdSdS)Nzlite login --pkcez lite loginrHrs rJ_login_commandrs"( :l:rIr\ct}|s|jdytd}|jddd|jd d |jd d |jdd |jdd t |D]\}}|j dxsd}|j dd}|j dg}|j d}|rHt |dkDr(dj|dddt |dz dz} ndj|} nd} |rd|nd} |jt|dz||| | |j|y)z"Display teams in a formatted tablezNo teams found for your user.NAvailable TeamstitleIndexcyanTstyleno_wrapz Team AliasmagentarTeam IDgreenModelsyellowz Max BudgetbluerMN/ArArNrO,  (+ more) All models$ Unlimitedr%) rprintr add_column enumerater{lenjoinadd_rowrE) r\consoletableiteamrMrArNrO models_str budget_strs rJdisplay_teams_tabler smYG  5601E WFD9 \3 Yg. XX. \0U#O4XXl+4u ((9e,(B'XXl+  6{Q!YYvbqz2s3v;?:K65RR !YYv. %J*4q %  c!a%j*gz:N%O( MM%rIc$ tjdk(rIddl}|j}|dk(r|j}|dk(ry|dk(ryy|d k(ry |d k(ry |d k(ryyddl}ddl}tj j}|j|} |jtj jtj jd}|dk(r|tj jdz }|dk(r |j||j|y|dk(r |j||j|y|dk(rl |j||j|y |dk(s|dk(r |j||j|y |dk(r |j||j|y |j||j|y#|j||j|wxYw#t$rYywxYw)z5Get a single key input from the user (cross-platform)win32rNHupPdown enterescapeqquitr%zz  q)sysplatformmsvcrtgetchtermiosttystdinfileno tcgetattrsetrawru tcsetattr TCSADRAIN ImportError)rr4rrfd old_settingss rJ get_key_inputr2s- <<7 " ,,.Cg~lln$;D[!    ((*B")"3"3B"7L G 399++-.iinnQ'&=399>>!,,Ch#!!"g&7&7F%!!"g&7&7F'!!"g&7&7F D[C4K" !!"g&7&7F CZ!!!"g&7&7F!!"g&7&7F!!"g&7&7F sAHH HHH7HA8G!H-G!3HG!H5 G!HG!$HH!HH HHselected_indexct}|j|jdt|D]/\}}|j dxsd}|j dd}|j dg}|j d}|rHt |dkDr(dj |d dd t |dz d z} ndj |} nd } |rd |nd} ||k(rC|jd|d|d|jd| d|jd| d|jd|d|d|jd| d|jd| d2y )z0Display teams with one highlighted for selectionzBSelect a Team (Use up/down arrows, Enter to select, 'q' to skip): rMrrArNrOrrNrrrrrz > [bold cyan]z[/bold cyan] ()z Models: [yellow]z [/yellow]z Budget: [blue]z[/blue] z [dim]z[/dim] (z Models: [dim]z[/dim]z Budget: [dim]z[/dim] )rclearrrr{rr) r\rrrrrMrArNrOrrs rJ"display_interactive_team_selectionrdstYG MMO MMWXU#C4XXl+4u ((9e, HHXr2XXl+  6{Q!YYvbqz2s3v;?:K65RR !YYv. %J*4q %    MMM*^G9AN O MM/ |9E F MM-j\C D MMGJ->|U-S,TTVWdWhWhirWsVttuvw$$#/!)  455e<<14 )  01 5-e445s/(DB%D9D DD8E.E.-E.c$|sy tjdt}|j}|j dk(ryt |dz }d|cxkrt |krEnnB||}tjd|jdd d |jd d |Stjd t | #t$rtjdY!t$rtjdYywxYw)z8Fallback team selection for non-interactive environmentsNzR Select a team by entering the index number (or 'skip' to continue without a team)typeskipr%r Selected team: rMrrrAr7Invalid selection. Please enter a number between 1 and .Invalid input. Please enter a number or 'skip'r) rpromptrEstriplowerintrrr{ ValueErrorr)r\prompt_responsechoiceindexrs rJrrs    #(<<e$O%**,F||~'K!OEE&CJ& %e  ' (9(9,(N'OrR_RcRcdmRnQoopq%$ TUXY^U_T`ab' ( I JJG H   JJ4 5 s$>CA&C,!CD/DDresponsec |j}t|tr|j dnd}t|t r|r|Sy#t$rYywxYw)Nro)jsonrrdictr{rE)rbodyros rJ_response_error_detailr sXZbZgZgZi+5T4*@DHHX&dF&#6  sA AAc^t|}|rd|jd|Sd|jS)NzPolling error: HTTP rp)r  status_code)rros rJ_polling_error_messagers=*84F %h&:&:%;2fXFF !("6"6!7 88rIrc0d|cxkxrdkncxr|dk7S)NiiirH)rs rJ_is_permanent_polling_errorrs + # # : s(::rIi,r ) headers total_timeout poll_intervalrequest_timeoutpending_messagepending_log_everyother_status_messageother_status_log_everyhttp_error_log_everyconnection_error_log_everyurlrrrrrrrrrrc t||zD]0} tj|||} | jdk(ry| j } | jd}|dk(r| cS|dk(r%|r|dkDr| |zdk(rt j |n|r|dkDr| |zdk(rt j |nwt| jr7t| }td| j|r d|zd |d z| dkDr&| | zdk(rt j t| tj|3y#tj$r/}| dkDr | | zdk(rt j d |Yd}~Vd}~wwxYw) N)rtimeoutr[readypendingrz/The proxy rejected the login session with HTTP rpz and no error detail (from rzConnection error (will retry): )rangerr{rr rrrr rrRequestExceptiontimesleep)rrrrrrrrrrrattemptrdatar[roes rJ_poll_for_ready_datar+s-78" B||C/RH##s*$,MMO(+W$KY&&+|jjdd}td|d|d|jdd wxYw)Nz/sso/cli/startr)r zCould not reach the proxy at rpzC. Check that the proxy is running and that --base-url points at it.)iizPOST z returned HTTP z. Either --base-url is wrong, or the proxy is older than this CLI and does not support the CLI SSO login flow; upgrade the proxy or use a CLI version that matches it.r!z Starting CLI login failed: HTTP z from z content-typeunknownz,The proxy returned a non-JSON response from z (content-type: zv). A proxy, load balancer, or auth gateway in front of LiteLLM may be intercepting the request. Response starts with: )rbrcrdc3bK|]&}tj|tr#|(ywN)rr{rE).0fieldr)s rJ z&_start_cli_sso_flow..Xs(!mEJW[W_W_`eWfhkLl%!ms$//zThe response from z is missing required field(s): rzG. The proxy version may not match this CLI; upgrade whichever is older.) rpostr%rrr r rr{texttupler) r3 start_urlrr*ro content_typerequired_fieldsmissing_fieldsr)s @rJ_start_cli_sso_flowr?6s">2I"-- 2>z)I;oh.B.B-CD^ ^  s".x8.x/C/C.DF9+ V &F8} 0  ,. 0   '/}}/WO!!m_!mmN  +J499UcKdJefT T   KI  $ $+I;b9M :9+EUVbUcd%%-]]4C%8$; =   s$CDD-DDAErcc d|iS)Nzx-litellm-cli-poll-secretrH)rcs rJ_get_cli_sso_poll_headersrAas ' 55rIkey_idc`|d|}t|t|d}|sy|jdr|jdg}|jd}|jd}t||}|st j d yt |||| } | r| ||dd St j d y|jd } |jd}|jdg}|jd} | r&t|dk(rt j d| | r| ||| d Sy)z Poll the server for authentication completion and handle team selection. Returns: Dictionary with authentication data if successful, None otherwise /sso/cli/poll/z#Still waiting for authentication...)rrNr^r\r]r5z*Warning: No teams available for selection.)r3rBrcr\)rVr5r\rAz2Team selection cancelled or JWT generation failed.r4rAr%z! Automatically assigned to team: )r+rAr{r/rr%_handle_team_selection_during_pollingr) r3rBrcpoll_urlr)r\r]r5normalized_teams jwt_with_teamrVrAs rJ_poll_for_authenticationrIesO" .9H&)+6=D  xx)*"%"hh~6 ((9%1A%1V JJC D E#"   ("    GHXXe_Ghhy!G HHWb !EXXi(G3u:? 7yAB    rIc|stjdytjdtjdt|}|stjdytjd||d|d|}t|t |d d d }|sy|j d }|rtjd||Sy)z Handle team selection and re-poll with selected team_id. Args: teams: List of team IDs (strings) Returns: The JWT token with the selected team, or None if selection was skipped zENo teams found. You can create or join teams using the web interface.N= ============================================================z%Select a team for your CLI session...zNo team selected.z Generating JWT for team: rDz ?team_id=z(Still waiting for team authentication...z.Waiting for team authentication to complete...r)rrrrr4z%Successfully generated JWT for team: )rr%_render_and_prompt_for_team_selectionr+rAr{)r3rBrcr\rArFr)r9s rJrErEs  Z[ JJ JJ67:5AG  &' JJ,WI67! . 'KH&)+6BM D xxI :7)DE rIct}td}|jddd|jdd |jd d t|D]S\}}t |j d }|j d xs|}|j t |dz||U|j| tjdt}|j}|jdk(r"|r|d} t | j d Syt|dz } d| cxkrt|krUnnR|| } t | j d }| j d xs|}tjd|d|d|Stjdt|#t$rtjdY!t $rtjdYywxYw)zRender teams table and prompt user for a team selection. Returns the selected team_id as a string, or None if selection was cancelled or skipped without any teams available. rrrrTrz Team NamerrrrrArMr%zI Select a team by entering the index number (or 'skip' to use first team)rrrNrrrrrr)rr rrrEr{rrrrrrrrrrr) r\rrrrrArMrr first_teamrrs rJrLrLsYG01E WFD9 [ 2 Yg.U#74dhhy)*XXl+6w  c!a%j*g67  MM%  #(<<\$O%**,F||~'!&qJz~~i899K!OEE&CJ& %e m// :;*..|<G  .zl"WIQGH JJPQTUZQ[P\] ^1 2 I JJG H   JJ4 5 s&AF>%A6F>!F>>G>G>=G>c  t|ttt j dtd|jddt j dy#t$r}t j d|d}~wwxYw)zBPoint Claude Code at base_url by patching ~/.claude/settings.json.z0Logged in, but could not configure Claude Code: Nz Configured Claude Code: z now routes through r.zYYour other Claude Code settings were left untouched. Restart Claude Code to pick this up.)r)r&r'r(rClickExceptionrr)r3r*s rJ_configure_claude_coderR s[h(<>RS JJ+,@+AAUV^VeVefiVjUkklmn JJjk [""%UVWUX#YZZ[sA B%A==BrV config_claudestoredcXddlm}tjdtjd|dddtjt |t |t tfrytjd|r t|tjd|y) Nr) show_commandsz Login successful!z JWT Token: z...z4You can now use the CLI without specifying --api-keyrK) "litellm.proxy.client.cli.interfacerVrrrrrrrrR)r3rVrSrTrVs rJ _finish_loginrYs{@ JJ$% JJWSb\N#./ JJ~f%&&-/DEF JJEFx( JJOrIhttpct|}t||}|t|tr|St ||}|#t j d|jd|S)NrvzBCould not revoke the previous login's refresh token on the proxy (); it expires on its own.)rrrrr/rrreason)rrZrspreviousrT revocations rJ_replace_stored_tokenr`"sl u-HvU3F:f.@A 04@J PQ[QbQbPcd% %  MrIc(tj}t||tj}t |t r#tjd|jytt||||}t||j||y)N)rAuthentication failed: ) rrr0rrrr+r]r`r.rY access_token)r3rSrsrZ credentialrTs rJ _pkce_loginre0sv""$D&xEJJGJ*k* ,Z->->,?@A)*;Hj*QSWY^_F(J33]FKrIlogin)namez--config-claudeTz|After logging in, update ~/.claude/settings.json so Claude Code routes through this proxy. Unrelated settings are preserved.)is_flagdefaulthelpz--pkcezSign in with OAuth authorization code + PKCE through your system browser (loopback redirect), with a refresh token that renews the key automatically. Requires a proxy that serves /.well-known/litellm-cli-auth.pkcec ddlm}|j}|d} |rt||t |yt |}|d}|d}|d} |d t ||d z} tjd | tjd tjd | tjd|tj| tjdt|||} | ro| d} | d} t|jd| | xsdddddtjdtj t |}t#|| ||ytjdtjdy#t$$rtjdYytj&$rt($r"}tjd|Yd}~yd}~wwxYw)z/Login to LiteLLM proxy using SSO authenticationr)LITELLM_CLI_SOURCE_IDENTIFIERr3N)r3rbrcrdz/sso/key/generate?)sourcer4zOpening browser to: z9Please complete the SSO authentication in your browser...zVerification code: z Session ID: zWaiting for authentication...)r3rBrcrVr5rzcli-userr2cli Authorizationr1)r3r4r5r6r7r8r9r:z+Authentication timed out. Please try again.zThe proxy never reported the browser sign-in as finished. If you did complete it, check the proxy logs for /sso/callback errors and confirm SSO is configured on the proxy.z" Authentication cancelled by user.rb)litellm.constantsrmrzrer}r?rrr webbrowseropenrIr`rr&rrrYrrQr)rxrSrkrmr|r3 cli_sso_flowrBrcrdsso_url auth_resultrVr5rTr*s rJrfrf:s.@$'GGGj)H@  -1Ec1J K 18D $Z0)-8 ' 4 J01IIfou>v4ww )'34 NO ( 45 \&*+    235xPVdop (3G(3G2 ( 4"&4*"+!&(7!#!%   "$S) F (G]F C  JJD E JJl    89      ,QC01s)FD4F'*FG/2G/ G**G/logoutc.t|}t|}|t|tjnd}|xt dx\}t jd|dxtdx\}t jd|dnn t|t}t|xtdx\t jd yxtd x6\}t jd |d |d t jdyxtdx2\t jt t jdyxt"dx:\t jt$t jdt&dyxt(dx:\t jt$t jdt*dyt,dx1\t jt$t jdyy)z&Logout and clear stored authenticationrvN)r]z+The proxy could not record the revocation (z8). Nothing was cleared; run `lite logout` again shortly.z1Could not revoke the refresh token on the proxy (r\rHz6Logged out successfully. Authentication token cleared.rnzYour credential is still in z, which could not be removed: rPzMDelete that file, or make the directory writable and run 'lite logout' again.z=Unlock your keychain and run 'lite logout' again to clear it.z"Install the keyring package with: z, then run 'lite logout' again.zUnset z) and run 'lite logout' again to clear it.)r}rr/rrr,rrQr+rr r!r rrrrirrjrgrrr)rxrsrr_r]rqros rJrwrws(,E"/JT^Tj0X=M=M=OPptJ  1 " 1&&=fXF33 2 ([ ' JJJ6(Rkl m(     $)+D  & \^ JJO P 0 ! 0 JJ5dV;YZ`Yaabc d JJf g1^  JJ2 3 JJV W# " JJ1 2 JJ;'++jZ\B]BdBdehBi$i{{&'0F ItT  #z1F j )& ;F  ~~e$ -e4$?   "gkk2K&L  I   5 !    "5)     'v(>'?xHdS   JJwrIwhoamict|}t|}|stjdy|j ddu}tj|rdndtjd|j dxsd tjd |j d xsd tjd |j d xsd |j d}|rtjd||j d}t j t |ttfr|ndz dz }tjd|dd|stjt||j d}t |ttfr#tjt|d|vy|tkDrtjdtdyy)z"Show current authentication statusrvz4Not authenticated. Run 'lite login' to authenticate.Nr4 Authenticatedz,Signed in, but the credential cannot be readz User Email: r6Unknownz User ID: r5z User Role: r7rAz Team ID: r:gz Token age: .1f hoursr;r<rzWarning: Token is more than z hours old and may have expired.) r}rrrr{r&rrrGrw_key_expiry_liner)rxrsr key_readablerAstamped age_hoursr;s rJr~r~s(,E"/J  IJ$../t;L JJ,4bc JJjnn\:GiHIJ JJ:>>)4A BCD JJZ^^K8EIFGH^^I.G Ywi()^^K0G *WsEl2SwY\]aeeI JJYsO623  -e45"|4J*sEl+ #J*7TUV - - 12J1KKklm .rIr;c~|tjz dz }|dkrdt|dSd|dd}|r|dS|S) Nrrrzz' againzKey expires in: rrz, renewed on next use)r&r)r;rremaining_hoursr[s rJrrsZ(499;6$>O!#N6$:#;7CC&s&;6BF/5fX* +A6ArIauthcy)z6Manage CLI authentication (apiKeyHelper support, etc.)NrHrHrIrJ auth_groupr#srI)rrfrwr}rr~r4)r)zrr&rrcollections.abcrrtypingrr urllib.parserrr rich.consoler rich.tabler typing_extensionsr r r r rqr&litellm.litellm_core_utils.cli_keyringrrrrrrrrrrrr*litellm.litellm_core_utils.cli_token_utilsrrrrrr r!r"r#r$claude_settingsr&r'r(r) pkce_loginr*r+r,r-r.r/r0r2rLrSrZrarfrgrFrhrirjrErrrwContextr}r_rrrrrrrXrrPrrr rrrrResponser rrr+r/r?rArIrErLrRrYr`recommandoption pass_contextrfrwr}r~rGrgroupr add_command__all__rHrIrJrs -"  LL6        /9/$iu9I9)5i I;e:QUQdU ,E J 3 Fnkncn,9emm9 9(6LL'#v+:NQU:UL>LA|A{APZA + (L>43G*H ;8BV 8Lt8S4S+T%)(Tz  4Z 4"3"4";4;C; #tG}##L/d#Cd4S>.B#CTW#C`d#CL.5d38n!5.5$sCx.4:O.5b S#X  #s(^dDX%6%63:9X%6%6939;S;T;&*"&'+"$ "&(' '#s(^d "' '  '  '4Z''*' ''!$'4'TF&T']0(#(/(V6364S>6>s>C>c>m^bNb>B***-0*9=g*4Z*Z3g33:3llSlTl C # d J [_  , d ; S] L#LdL;L4LG    ,    ) Gu}}GTGG$G *GTH$X $X$XNM"2U]]2#2jHn nn@BBBB &AA {# ^rI