jy9XdZddlmZddlmZddlmZmZmZm Z ddl m Z ddl m Z mZmZGdded ZGd d ed ZGd deZGdded ZGddeZGddeZGdded ZGddeZGddeZGddeZGdded ZGdd eZGd!d"eZGd#d$ed ZGd%d&eZe eeeefZGd'd(eZ Gd)d*eZ!Gd+d,ed Z"eZ#Gd-d.eZ$dGd/Z%dHd0Z&dId1Z'dJd2Z(dKd3Z)d4d5d6d d5d5d7 dLd8Z*d5d5d9 dMd:Z+d5d5d5d; dNd<Z,d5d= dOd>Z-dPd?Z.hd@Z/dQdAZ0 dRdBZ1dCdD dSdEZ2 dTdFZ3y5)Uz>Helpers and type definitions for sandbox mount configurations.) annotations)Sequence)AnyLiteral TypedDictUnion)urlsplit)SandboxProxyConfigSandboxProxyRuleSandboxProxySecretc&eZdZUdZded<ded<y)MountCacheConfigzBOptional per-mount cache configuration supported by bucket mounts.intmax_size_byteswriteback_secondsN__name__ __module__ __qualname____doc____annotations__c/var/www/html/Fitness-lenito-AI-main/venv/lib/python3.12/site-packages/langsmith/sandbox/_mounts.pyrrsLrrF)totalc&eZdZUdZded<ded<y)BucketMountSpecBasez8Optional fields applied per bucket-backed sandbox mount.bool read_onlyrcacheNrrrrrrsBO rrc0eZdZUdZded<ded<ded<y)S3MountConfigRequiredz.Required S3 configuration for a sandbox mount.str endpoint_urlregionbucketNrrrrr"r"s8 K Krr"c&eZdZUdZded<ded<y) S3MountConfigz%S3 configuration for a sandbox mount.r#prefixr path_styleNrrrrr(r(&s/ Krr(c:eZdZUdZded<ded<ded<ded<y ) S3MountSpecz&S3-backed sandbox mount specification.r#idz Literal['s3']type mount_pathr(s3Nrrrrr,r,-s0 G Orr,ceZdZUdZded<y)GCSMountConfigRequiredz/Required GCS configuration for a sandbox mount.r#r&Nrrrrr2r26s 9 Krr2ceZdZUdZded<y)GCSMountConfigz&GCS configuration for a sandbox mount.r#r)Nrrrrr4r4<s 0 Krr4c:eZdZUdZded<ded<ded<ded<y ) GCSMountSpecz'GCS-backed sandbox mount specification.r#r-zLiteral['gcs']r.r/r4gcsNrrrrr6r6B1 G O rr6c&eZdZUdZded<ded<y)GitMountRefSpecz%Git ref selected for a sandbox mount.zLiteral['branch', 'tag']r.r#nameNrrrrr:r:Ks/ "" Irr:ceZdZUdZded<y)GitMountConfigRequiredz/Required Git configuration for a sandbox mount.r# remote_urlNrrrrr=r=Rs 9Orr=c&eZdZUdZded<ded<y)GitMountConfigz&Git configuration for a sandbox mount.r:refrrefresh_interval_secondsNrrrrr@r@Xs0 !!rr@c:eZdZUdZded<ded<ded<ded<y ) GitMountSpecz'Git-backed sandbox mount specification.r#r-zLiteral['git']r.r/r@gitNrrrrrDrD_r8rrDceZdZUdZded<y)ContextHubMountConfigRequiredz7Required Context Hub configuration for a sandbox mount.r#repoNrrrrrGrGhs A IrrGceZdZUdZded<y)ContextHubMountConfigz.Context Hub configuration for a sandbox mount.rinitial_pull_onlyNrrrrrJrJns 8rrJc:eZdZUdZded<ded<ded<ded<y ) ContextHubMountSpecz9Read-only Context Hub-backed sandbox mount specification.r#r-zLiteral['contexthub']r.r/rJ contexthubNrrrrrMrMtsC G O%%rrMc&eZdZUdZded<ded<y)AWSMountAuthConfigz>AWS credentials used by the backend to authenticate S3 mounts.r access_key_idsecret_access_keyNrrrrrPrPsH%%))rrPceZdZUdZded<y)GCPMountAuthConfigz?GCP credentials used by the backend to authenticate GCS mounts.r service_account_jsonNrrrrrTrTs I,,rrTc&eZdZUdZded<ded<y)SandboxMountAuthConfigz(Provider auth blocks for sandbox mounts.rPawsrTgcpNrrrrrWrWs2  rrWc&eZdZUdZded<ded<y)SandboxMountConfigz,Public mount config sent to the sandbox API.rWauthlist[SandboxMount]mountsNrrrrr[r[s6  rr[c~t|tr|jst|d|jS)Nz must be a non-empty string) isinstancer#strip ValueError)valuefields r_require_non_empty_stringres3 eS !E7"=>?? ;;=rc:i}d|vr|d|d<d|vr|d|d<|S)Nrrr)r copieds r_copy_cache_configrhs>!F5 #()9#: e#&+,?&@"# Mrc t|tst|d|jd}|dvrt|d|jd}t|tr|j st|d||dS)Nz must be a sandbox secretr.>opaqueworkspace_secretz$ must use workspace_secret or opaquercz!.value must be a non-empty string)r.rc)r`dictrbgetr#ra)secretrd secret_typercs r_copy_mount_secretrps fd #E7";<==**V$K88E7"FGHH JJw E eS !E7"CDEE% 00rct|tr|dk(r td||jk7st d|Dr tdt |}|j dk7s |js td|js |jr td|jr|jdk(r td |js |jr td |S) Nz%remote_url must be a non-empty stringc3JK|]}|jxs|dk(yw)N)isspace).0chars r z*_require_git_remote_url..s&/5?T ($&.(Zs!#z3remote_url must not contain whitespace or NUL byteshttpsz(remote_url must be an absolute HTTPS URLz0remote_url must not include embedded credentials/z)remote_url must include a repository pathz-remote_url must not include query or fragment) r`r#rbraanyr schemenetlocusernamepasswordpathqueryfragment)r>parseds r_require_git_remote_urlrs j# &**:@AAZ%%''3/5?/,NOO j !F }}v}}CDD &//KLL ;;&++,DEE ||vHII rct|ts td|jd}|dvr td|t |jddddS) Nzref must be a dictionaryr.>tagbranchzref.type must be branch or tagr;rrzref.name)r.r;)r`rlrbrmre)rAref_types r _copy_git_refrs\ c4 344wwvH((9::)#''&"*=zJ rz us-east-1Nzhttps://s3.amazonaws.com)r%r)r$r*rr c t|dt|dt|d|d} |t|d| d<t|ddt|d| d } ||| d <|t|| d <| S) z/Build an S3-backed sandbox mount specification.r$r%r&)r$r%r&r*r)r-r0r/)r-r.r/r0rr rerh) r-r/r&r%r)r$r*rr r0mounts rs3_mountrs2,O+FH=+FH= B 0B8 (D1/ LI E &k +E2g Lr)rArBcdt|i}|t||d<||dkr td||d<t|ddt|d|d S) z6Build a public Git-backed sandbox mount specification.r>rAz+refresh_interval_seconds must be at least 1rBr-rEr/)r-r.r/rE)rrrbre)r-r/r>rArBrEs r git_mountrsv -j9C "3'E + #a 'JK K*B &'(D1/ LI  r)r)rr cdt|di}|t|d|d<t|ddt|d|d}|||d<|t||d<|S) z/Build a GCS-backed sandbox mount specification.r&r)r-r7r/)r-r.r/r7rr r)r-r/r&r)rr r7rs r gcs_mountrs~ +FH=C1&(CH (D1/ LI E &k +E2g Lr)rKcfdt|di}|||d<t|ddt|d|d}|S)awBuild a read-only Context Hub-backed sandbox mount specification. The repo's latest commit tree is mirrored into ``mount_path`` and kept in sync for the sandbox's lifetime unless ``initial_pull_only`` is set. The sync is one-way: files written under ``mount_path`` inside the sandbox are never pushed back to the repo, and the next sync overwrites them. rHrKr-rNr/)r-r.r/rN)re)r-r/rHrKrNrs rcontext_hub_mountr4sU )$7)J$*; &'(D1/ LI "E Lrc$t|tst|ts|s tdg}|D][}t|tr|s td|j d}|dvr tdt ||j |]|S)Nz5mounts must be a non-empty list of mount dictionariesr.>r0r7rErNz>mount_config only supports s3, gcs, git, and contexthub mounts)r`rlr#rbrm%_reject_provider_credentials_in_mountappend)r^ normalizedr mount_types r_normalize_mountsrQs&$:fc#:&PQQ%'J%&eTU UYYv& ? ?P  .e4%  r> credential credentials access_tokenrQ refresh_token session_tokenrRrUct|tr7|jD]#\}}|tvr t dt |%yt|t r|D] }t |yy)NzVprovider credentials must be supplied in mount_config.auth, not individual mount specs)r`rlitems"_FORBIDDEN_MOUNT_CREDENTIAL_FIELDSrbrlist)rckeychilds rrrnsh%++-JC88 1 2% 8 ( E4 E 1% 8 !rct|tst|tr tdi}|D] }t|tr|s td|j d}|dvr td||vrtd|d|dk(rg|j d}t|ts tdt |j d d t |j d d d |d<|j d }t|ts td dt |j ddi|d <|S)Nz+auth must be a list of provider auth blocksr.rXrYz2mount_config auth only supports aws and gcp blocksz duplicate z auth rule in mount_configrXz(aws mount auth must include an aws blockrQrR)rQrRrYz'gcp mount auth must include a gcp blockrU)r`rlr#rbrmrp)r\ by_providerblockproviderrXrYs r_normalize_mount_authr|sF$D#!6FGG*,K%&eJK K99V$ > )QR R { "z(3MNO O u ))E"Cc4( !KLL!3GGO,o"&8GG/02E& "K ))E"Cc4( !JKK&(:GG235K)"K 1: rr)r\ct|}t|}|Dchc]}|d }}d|vrd|vr tdd|vrd|vr tdd|vrd|vr tdd|vrd|vr td ||d Scc}w) zBuild a high-level mount config from provider auth and mount specs. The returned value is sent as the public ``mount_config`` field. The backend expands provider auth into runtime proxy rules. r.r0rXz*s3 mounts require aws auth in mount_configr7rYz+gcs mounts require gcp auth in mount_configz7aws auth requires at least one s3 mount in mount_configz8gcp auth requires at least one gcs mount in mount_config)r\r^)rrrb)r^r\normalized_mountsauth_by_providerrmount_providerss r mount_configrs*&1,T22CD2CuV}2COD 50@#@EFF E1A$AFGG   T%@RSS   U/%ASTT!# Es A:c|y|jdi}|jdg}t|ts td|D];}t|ts|jd}|dvs*||vs/t|dy)z@Reject explicit provider proxy rules owned by mount_config auth.Nr\rulesz!proxy_config rules must be a listr.rz> auth cannot be provided in both mount_config and proxy_config)rmr`rrbrl)r proxy_configr\rrule rule_types r"validate_mount_config_proxy_configrs    FB 'D   Wb )E eT "<==$% HHV$  &9+<+00  r)rcr#rdr#returnr#)r rrr)rnrrdr#rr )r>r#rr#)rAr:rr:)r-r#r/r#r&r#r%r#r) str | Noner$r#r*rr bool | Noner MountCacheConfig | Nonerr,) r-r#r/r#r>r#rAzGitMountRefSpec | NonerBz int | NonerrD)r-r#r/r#r&r#r)rrrr rrr6) r-r#r/r#rHr#rKrrrM)r^Sequence[SandboxMount]rr])rcrrNone)r\Sequence[SandboxMountAuth]rrW)r^rr\rrr[)rr[rzSandboxProxyConfig | Nonerr)4r __future__rcollections.abcrtypingrrrr urllib.parser langsmith.sandbox._proxy_configr r r rrr"r(r,r2r4r6r:r=r@rDrGrJrM SandboxMountrPrTrWSandboxMountAuthr[rerhrprrrrrrrrrrrrrrrrsD"$11!y)5I)%Y +5 &iY "+5"9I 9 &)&[, >QQR **-- Ye$  1( "2!%)              #  P#'+/     ) @!%)        #D&*     #   :" &" 9# $##R(* " % :$+ r