AHj*UddlmZddlmZmZmZmZmZmZm Z m Z ddl m Z m Z m Z ddlmZddlmZddlmZddlZddlZddlZddlmZdd lmZd Zd Zd Zd ZdZdZ dZ!ejDjGejDjIddZ%d?dZ&d@dZ'dAdZ(dBdZ)dCdZ*edGddZ+e+dde+dde+d d!d"#e+d$d%d&#e+d'd()e+d*d+d,#e+d-e+d.e+d/d0d1#e+d2d3d4#g Z,d5e-d6<dDdEd7Z.dFd8Z/ dGd9Z0 dH dId:Z1 dHd;dZ2y)K) annotations)AnyCallableDictFinalListOptionalSequenceTuple)datetime timedeltatimezone)Lock)Path) dataclassN)sap_service_key)_get_httpx_clientz /oauth/token AICORE_CONFIG AICORE_HOMEAICORE_PROFILE VCAP_SERVICESaicoreAICORE_SERVICE_KEY~z.aicorec>tjttSN)osgetenvHOME_PATH_ENV_VARDEFAULT_HOME_PATHT/root/tools/cai/cai_env/lib/python3.12/site-packages/litellm/llms/sap/credentials.py _get_homer$s 99&(9 ::r"c~|}|D]5}t|tr||vrtdj|||}7|S)N.) isinstancedictKeyErrorjoin)dpathcurks r# _get_nestedr/sIC #t$ 388D>* *!f Jr"ctjj|}|sy tj|S#tj $rYywxYwr)renvirongetjsonloadsJSONDecodeError)var_nameraws r#_load_json_envr8(sE **.. "C zz#   s9AAc(ttxsiSr)r8VCAP_SERVICES_ENV_VARr!r"r# _load_vcapr;2s / 0 6B6r"ctjD]#}|D]}|jd|k(s|ccS%y)Nlabel)r;valuesr2)r=servicessvcs r#_get_vcap_servicerA6sFL'') Cwww5(   r"T)frozencBeZdZUded<dZded<dZded<dZded <y) CredentialsValuestrnameNzOptional[Tuple[str, ...]]vcap_key Optional[str]defaultzOptional[Callable[[str], str]] transform_fn)__name__ __module__ __qualname____annotations__rGrIrJr!r"r#rDrD>s' I*.H'.!G]!37L07r"rD client_id)clientid client_secret) clientsecretauth_urlurlcd|jd|jtrdzStzSN/rstripendswithAUTH_ENDPOINT_SUFFIXrTs r#r^L.C232"O9M"Or")rJbase_url) serviceurls AI_API_URLcT|jd|jdrdzSdzS)NrXz/v2rY)r[r\rTs r#r^r^Rs+Ce$2"1*/"1r"resource_grouprI)rIcert_url)certurlcd|jd|jtrdzStzSrWrZrTs r#r^r^Yr_r"cert_file_path key_file_pathcert_str) certificatec&|jddSN\n replacess r#r^r^asQYYud=Sr"key_str)keyc&|jddSrmrprrs r#r^r^dsAIIeT4Jr"zFinal[List[CredentialsValue]]CREDENTIAL_VALUESctt}|xs#tjj t }tj t}|r t|n||dvrdnd|dz }|rB|jr2 |jd5}tj|cdddS|s|dvrtd |d |d iS#1swYnxYw'#tj$rt|dwxYw) z Loads config JSON from: 1) $AICORE_CONFIG if set, otherwise 2) $AICORE_HOME/config.json (or config_.json when profile is given/not default) Returns {} when nothing is found. )NrYrIz config.jsonconfig_z.jsonzutf-8)encodingNz, is not valid JSON. Please fix or remove it!z)Unable to locate profile config file at 'z' in AICORE_HOME '')rr$rr1r2PROFILE_ENV_VARrCONFIG_FILE_ENV_VARexistsopenr3loadr5r)FileNotFoundError)profilehomecfg_envcfg_pathfs r# init_confris  D88Gii+,G  W  33wiu-    HOO% V0 $Ayy| $ $ 7"777zASTXSYYZ [   I $ $ $## VhZ'STU U Vs$CC* CCC"C=c(d|jS)NAICORE_)upper)rFs r# _env_namers TZZ\N ##r"c|j|vr||j||jSt|j}||vr ||||S||jfD]}||vs||||cS|r7|jr+ t|d|jz}||S |j S|j S#t$rY|j SwxYw)N) credentials)rFrrGr/r)rI)credkwargsenvconfig service_likeenv_keyruvals r#_resolve_valuers yyFvdii0<dii   "G#~#g,27|# &=VC[4#;    l, Resolution order per key: kwargs > env (AICORE_) > config (AICORE_ or plain ) > service-like source from JSON in $AICORE_SERVICE_KEY (same structure as a VCAP service object) falling back to service entry in $VCAP_SERVICES with label 'aicore' > default N)rrrrrerS)rrr1rr8SERVICE_KEY_ENV_VARrAVCAP_AICORE_SERVICE_NAMErwrrJrFkeyspop) service_keyrrrrroutrvalues r#fetch_credentialsrsw F **CL   ; ;12 ;!!9: C!tFFYef =    %%e,EDII SXXZ''*-J Jr"g>@<)timeoutexpiry_buffer_minutesc   td||d|}|jd |jd |jd|jd |jd|jd |jd r s td d u d uxrd u d uxrd ug}td |Dd k7r td t d d dd fd d fd dfd }||d|dfS)a Creates a callable that fetches and caches an OAuth2 bearer token using credentials from `fetch_credentials()`. The callable: - Automatically loads credentials via fetch_credentials(profile, **overrides) - Fetches a new token only if expired or near expiry - Caches token thread-safely with a configurable refresh buffer Args: profile: Optional AICore profile name timeout: HTTP request timeout in seconds (default 30s) expiry_buffer_minutes: Refresh the token this many minutes before expiry overrides: Any explicit credential overrides (client_id, client_secret, etc.) Returns: Callable[[], str]: function returning a valid "Bearer " string. )rrrSrOrQrjrtrhriz@fetch_credentials did not return valid 'auth_url' or 'client_id'Nc32K|]}t|ywr)bool).0ms r# z$get_token_creator..s "q47 "szuInvalid credentials: provide exactly one of client_secret, (cert_str & key_str), or (cert_file_path & key_file_path).cd d} r |d<t}|j |} |j|j}|d}t |j dd}t jtjt|z}d ||fS#t$r*}t|d t|} td | |d}~wwxYw) Nclient_credentials) grant_typerOrQ)data access_token expires_ini)secondszBearer textzToken request failed: )rpostraise_for_statusr3intr2r nowrutcr ExceptiongetattrrE RuntimeError) cert_pairrclientresppayloadrr expiry_dateemsgrSrOrQs r#_request_tokenz)get_token_creator.._request_tokens2K $1D !"${{8${/ F  ! ! #iikG">2LW[[t<=J",,x||4y7TTK\N+[8 8 F$A/C!7u=>A E FsA6B## C,%CCc. rSrۉ rىjdd} jdd}tj5}tjj |d}tjj |d}t |d5}|j|dddt |d5}|j|ddd||fcdddS fS#1swYNxYw#1swY4xYw#1swY,xYw)Nrnrozcert.pemzkey.pemw)r)rqtempfileTemporaryDirectoryrr,r*rwrite) cert_str_fixed key_str_fixedtmp cert_pathkey_pathrrrhrjrQrirts r# _fetch_tokenz'get_token_creator.._fetch_token-s !# # %--eT:N#OOE48M,,. G#GGLLj9 77<<Y7)S),QGGN+,(C(+AGGM*+%H0EF G G(GHH ,,++  G Gs=A D C3&D :C? D 3C< 8D ?D D  Dc5tjtj}|z t kr \cdddS#1swYyxYw)N)minutes)r rrrr )rrrlocktoken token_expirys r# get_tokenz$get_token_creator..get_token@sZ  ,,x||,C '#% :O(PP&2n#|   s AAAr`rdr!r)returnztuple[str, datetime]rrE)rr2 ValueErrorsumr)rrrr overridesrmodesrrrrSrhrjrOrQrirtrrrs ` @@@@@@@@@@@@r#get_token_creatorrsJ8#4##4=#Kz*H ,IOOO4Mz*Hooi(G __%56NOOO4M 9 N  T!   5'"5 t # A T(A E  "E ""a' I  6DE'+LFF&II&   k*-{;K/L LLr"r)r+Dict[str, Any]r,z Sequence[str]rr)r6rErOptional[Dict[str, Any]])rr)r=rErrr)rrHrr)rFrErrE) rrDrrrDict[str, str]rrrrrrH)NN)rrHrrHrr) rrHrrHrfloatrrrz"Tuple[Callable[[], str], str, str])3 __future__rtypingrrrrrr r r r r r threadingrpathlibr dataclassesrr3rrlitellmr&litellm.llms.custom_httpx.http_handlerrr]r}rr|r:rrr,r* expanduserr r$r/r8r;rArDrwrNrrrrrr!r"r#rs!"NNN22! #D%%!"'#*GGLL!3!3C!8)D;7 $888[-0_&78O %1 %y9O%&_%$3S8*J; 40 F$N$          +  HAE##0=##N"&!oM!# oMoM oM oM  oM(oMr"