tPjM$ &UddlZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z ddl mZddlmZmZddlZddlmZmZmZddlmZdd lmZdd lmZd d lmZmZm Z d d l!m"Z"m#Z#m$Z$m%Z%m&Z&d dl'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-Gdde*Z.e ddGddZ/ee/Z0ee1d<ejdde deee3fdZ4d/de/de dzddfdZ5d/de dzde/dzfdZ6d0de dzde dzde/dzfdZ7de3dzd ede8fd!Z9d"e"d#e3d ede3dzfd$Z:d ede8fd%Z;d&ejxddfd'Z=d1d(Z>ej~d)*ejd&ejxddfd+ZAej~d,*d1d-ZBgd.ZCy)2N)Iterator) dataclass)Path) FrameType)IOFinal) JsonValue TypeAdapterValidationError) SecretVault)is_cli_token_fresh)ensure_private_dir) AgentRunErrorresolve_api_keyverify_proxy_key) CliContextObjcontext_secret_vaultget_stored_api_key load_tokenlogin) BACKUP_PATHCLAUDE_SETTINGS_PATHClaudeSettingsErrorload_json_or_emptymerge_claude_settingsresolve_api_key_helperceZdZdZy)UpErrorzLRaised for any user-actionable failure while starting/stopping interception.N)__name__ __module__ __qualname____doc__i/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/proxy/client/cli/commands/up.pyrr!sVr%rT)frozenslotsc6eZdZUdZeed<eeefdzed<y) BackupRecordzLSnapshot of ~/.claude/settings.json taken right before `lite up` patches it.existedNcontent) r r!r"r#bool__annotations__dictstrr r$r%r&r*r*%sV M #y. !D ((r%r*_BACKUP_RECORD_ADAPTERpathreturnc#FKtj|tjtjztjzd}tj |dtj |d} ||jy#|jwxYww)aOpen path for writing with mode 0600 fixed up before any content is written. A plain `open(path, "w")` creates a *new* file at the umask-derived default (commonly 0644) and leaves it world- or group-readable until a later `chmod` call catches up -- a real window in which a file holding a credential is readable by another local account. Passing the mode to `os.open` closes that window for a brand-new file, but `O_CREAT`'s mode argument is only applied on creation: if the file already exists its old, broader permissions carry over untouched. `os.fchmod` right after opening -- before a single byte of the new content is written -- covers both cases. iwN)osopenO_WRONLYO_CREATO_TRUNCfchmodfdopenclose)r2fdfs r& secure_creater@0sjbkkBJJ6CUKBIIb% "c*A   sA4B!7B ;B! BB!record backup_pathc||nt}t|jt|5}t j |j |jd|ddddy#1swYyxYw)Nr+r,indent)rrparentr@jsondumpr+r,)rArBr2r?s r& write_backuprKEs[!,!8+kDt{{# t W fnnH!TUVWWWs 0A$$A-c||nt}|jsyt|d5}|j}ddd tj S#1swYxYw#t $rt|dwxYw)NrzD contains invalid or unexpected JSON; cannot restore from it safely.)rexistsr7readr1 validate_jsonr r)rBr2r?r,s r& read_backuprQLs!,!8+kD ;;= dC"A"e%33G<<"" ebcddesAA#A #A; settings_pathc||nt}||nt}t|}|y|jra|jU|j j ddt|d5}tj|j|ddddn |jr|j|j|S#1swYxYw)zRestore settings_path from the backup at backup_path, then delete the backup. Returns the restored record, or None if there was nothing to restore. NT)parentsexist_okr5rErF) rrrQr+r,rHmkdirr7rIrJrNunlink)rRrBresolved_settings_pathresolved_backup_pathrAr?s r&restore_claude_settingsrZXs 6C5NMTh1<1H+k 45F ~ ~~&..4%%++D4+H (# . 3! IIfnna 2 3 3  & & (%%'! M  3 3s $#CC api_keyvaultcB|yt|}|duxr t|S)NFr\)rr )r[r\ token_datas r& _usable_loginr`ls*"/J T ! D&8&DDr%ctx_objbase_urlc`|jdr|jdSt||S)Napi_key_from_token_filer[expected_base_urlr\)getr)rarbr\s r&_key_resolved_on_the_way_inrhss+{{,-{{9%%  FFr%cLt|}|duxr|jdduS)Nr^ refresh_token)rrg)r\r_s r&_stored_login_is_pkcerkys*"/J T ! Qjnn_&ET&QQr%ctxc|j}|djd}t|}tt ||||ryt |}|rdnd}t jjstd|dtjd|jt|tt|| |s td y) Nrb/zlite login --pkcez lite loginz2No fresh LiteLLM login found for this proxy. Run `zE` first (apiKeyHelper reads this token on every Claude Code request).z>No fresh LiteLLM login found for this proxy; starting login...)pkcerez=Login did not produce a usable token; cannot start `lite up`.)objrstriprr`rhrksysstdinisattyrclickechoinvokerr)rlrarbr\ro login_commands r&_ensure_fresh_loginry~s$'GGGj)005H',E0(EJER'.D26.LM 99   @P> >   JJOPJJu4J +heTV[ \UVV ]r%ct}|tjdy|jrtjdtdytjdtdy)NzNothing to restore.z Restored z to its original contents.zRemoved z% (it did not exist before `lite up`).)rZrurvr+r)rAs r&_restore_and_reportr{sV+-F ~ () ~~ Y344NOP X233XYZr%up)namecp |jd} t|t|}t||t j rt tdt|}tj }tt}tt||r|ndtjjdt|||}ttd5}t!j"||d dddt)j.d |j1d t)j.d t3j4 t3j6 d t8dt:dzddf fd } d fd } t=j<t<j>| t=j<t<j@| tCjD|  jG| y#1swYxYw#t$t&f$r#}t)j*t-|d}~wwxYw)aRoute every Claude Code session through your LiteLLM proxy until stopped. Patches ~/.claude/settings.json so Claude Code picks up the proxy on its own next startup, from any terminal -- no need to launch it through `lite`. Press Ctrl-C to stop and restore your original settings. Assumes the proxy is already running (this does not start one for you). Cursor is not supported: it has no equivalent file-based config to patch. rbzq already exists -- `lite up` looks like it's already running (or crashed without cleanup). Run `lite down` first.NrDT)rUr5rErFz.litellm: routing Claude Code through proxy at rnz8Press Ctrl-C to stop and restore your original settings._signum_framer3c&jyN)set)rr stop_events r&_handle_signalzup.._handle_signals r%cjdsy ty#t$r*}tjt |dYd}~yd}~wwxYw)NF)blockingT)err)acquirer{rrurvr0)erestoreds r& _restore_oncezup.._restore_oncesI/  )  !" ) JJs1v4 ( (  )s ! A AAr3N)$rpryrrrrNrrrrrKr*rHrVrr7rIrJrrruClickExceptionr0rvrq threadingEventLockintrsignalSIGINTSIGTERMatexitregisterwait) rlrbr[api_key_helperoriginal_existedoriginal_settingsmergedr?rrrrrs @@r&r|r|sggj)H+C (-7+    - OO  !7x @"6"="="?#56J#K (-=)4   ##))4)8-.?>Z & , + IIfa * +  JJ?PS@T?UVW JJIJ!)Jnn&HY-=$ ) MM&--0 MM&...1 OOM"OOO= + + . /+""3q6**+s0C H G79H7H<HH5H00H5downcx ty#t$r#}tjt |d}~wwxYw)zRestore ~/.claude/settings.json if a `lite up` session left it patched. Use this after a `lite up` process was killed uncleanly (e.g. `kill -9`) instead of stopped with Ctrl-C. N)r{rrurr0)rs r&rrs2+ +""3q6**+s 949) rrr*rrrrrrQrrZr|rKr)NNr)Dr contextlibrIr6rrrrcollections.abcr dataclassesrpathlibrtypesrtypingrrrupydanticr r r &litellm.litellm_core_utils.cli_keyringr *litellm.litellm_core_utils.cli_token_utilsr 'litellm.litellm_core_utils.private_jsonragentsrrrauthrrrrrclaude_settingsrrrrrrrr*r1r.contextmanagerr0r@rKrQrZr-r`rhrkContextryr{command pass_contextr|r__all__r$r%r&rs  $! <<>IFDD\\W!W $d#))$)!,L 99 "S'!2(WWD4KW4W eTD[ eL44G e4$;DSWKcorvcv(E3:EkEdEGG#GkG^adh^hG RRR WU]]WtW*[D@EMM@d@@FF + + r%