ޠjy9TSrSSKJr SSKJr SSKJrJrJrJ r SSK J r SSK J r JrJr "SS\S S 9r"S S \S S 9r"S S\5r"SS\S S 9r"SS\5r"SS\5r"SS\S S 9r"SS\5r"SS\5r"SS\5r"SS\S S 9r"SS \5r"S!S"\5r"S#S$\S S 9r"S%S&\5r\ \\\\4r"S'S(\5r "S)S*\5r!"S+S,\S S 9r"\r#"S-S.\5r$SGS/jr%SHS0jr&SIS1jr'SJS2jr(SKS3jr)S4S5S6S S5S5S7.SLS8jjr*S5S5S9.SMS:jjr+S5S5S5S;.SNS<jjr,S5S=.SOS>jjr-SPS?jr.1S@kr/SQSAjr0SRSBjr1SCSD.SSSEjjr2STSFjr3g5)Uz>Helpers and type definitions for sandbox mount configurations.) annotations)Sequence)AnyLiteral TypedDictUnion)urlsplit)SandboxProxyConfigSandboxProxyRuleSandboxProxySecretc.\rSrSr%SrS\S'S\S'Srg)MountCacheConfigzBOptional per-mount cache configuration supported by bucket mounts.intmax_size_byteswriteback_secondsN__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__rS/var/www/html/gaurav/venv/lib/python3.13/site-packages/langsmith/sandbox/_mounts.pyrrsLrrF)totalc.\rSrSr%SrS\S'S\S'Srg) BucketMountSpecBasez8Optional fields applied per bucket-backed sandbox mount.bool read_onlyrcacherNrrrrr r sBO rr c8\rSrSr%SrS\S'S\S'S\S'Srg) S3MountConfigRequiredz.Required S3 configuration for a sandbox mount.str endpoint_urlregionbucketrNrrrrr&r&s8 K Krr&c.\rSrSr%SrS\S'S\S'Srg) S3MountConfig&z%S3 configuration for a sandbox mount.r(prefixr" path_stylerNrrrrr-r-&s/ Krr-cB\rSrSr%SrS\S'S\S'S\S'S\S 'S rg ) S3MountSpec-z&S3-backed sandbox mount specification.r(idz Literal['s3']type mount_pathr-s3rNrrrrr2r2-s0 G Orr2c$\rSrSr%SrS\S'Srg)GCSMountConfigRequired6z/Required GCS configuration for a sandbox mount.r(r+rNrrrrr9r96s 9 Krr9c$\rSrSr%SrS\S'Srg)GCSMountConfig<z&GCS configuration for a sandbox mount.r(r/rNrrrrr<r<<s 0 Krr<cB\rSrSr%SrS\S'S\S'S\S'S\S 'S rg ) GCSMountSpecBz'GCS-backed sandbox mount specification.r(r4zLiteral['gcs']r5r6r<gcsrNrrrrr?r?B1 G O rr?c.\rSrSr%SrS\S'S\S'Srg) GitMountRefSpecKz%Git ref selected for a sandbox mount.zLiteral['branch', 'tag']r5r(namerNrrrrrDrDKs/ "" IrrDc$\rSrSr%SrS\S'Srg)GitMountConfigRequiredRz/Required Git configuration for a sandbox mount.r( remote_urlrNrrrrrHrHRs 9OrrHc.\rSrSr%SrS\S'S\S'Srg) GitMountConfigXz&Git configuration for a sandbox mount.rDrefrrefresh_interval_secondsrNrrrrrLrLXs0 !!rrLcB\rSrSr%SrS\S'S\S'S\S'S\S 'S rg ) GitMountSpec_z'Git-backed sandbox mount specification.r(r4zLiteral['git']r5r6rLgitrNrrrrrQrQ_rBrrQc$\rSrSr%SrS\S'Srg)ContextHubMountConfigRequiredhz7Required Context Hub configuration for a sandbox mount.r(reporNrrrrrUrUhs A IrrUc$\rSrSr%SrS\S'Srg)ContextHubMountConfignz.Context Hub configuration for a sandbox mount.r"initial_pull_onlyrNrrrrrYrYns 8rrYcB\rSrSr%SrS\S'S\S'S\S'S\S 'S rg ) ContextHubMountSpectz9Read-only Context Hub-backed sandbox mount specification.r(r4zLiteral['contexthub']r5r6rY contexthubrNrrrrr]r]tsC G O%%rr]c.\rSrSr%SrS\S'S\S'Srg)AWSMountAuthConfigz>AWS credentials used by the backend to authenticate S3 mounts.r access_key_idsecret_access_keyrNrrrrrarasH%%))rrac$\rSrSr%SrS\S'Srg)GCPMountAuthConfigz?GCP credentials used by the backend to authenticate GCS mounts.r service_account_jsonrNrrrrrfrfs I,,rrfc.\rSrSr%SrS\S'S\S'Srg) SandboxMountAuthConfigz(Provider auth blocks for sandbox mounts.raawsrfgcprNrrrrrjrjs2  rrjc.\rSrSr%SrS\S'S\S'Srg) SandboxMountConfigz,Public mount config sent to the sandbox API.rjauthlist[SandboxMount]mountsrNrrrrroros6  rroc[U[5(aUR5(d[US35eUR5$)Nz must be a non-empty string) isinstancer(strip ValueError)valuefields r_require_non_empty_stringrzs8 eS ! !E7"=>?? ;;=rcB0nSU;aUSUS'SU;aUSUS'U$)Nrrr)r$copieds r_copy_cache_configr}s>!F5 #()9#: e#&+,?&@"# Mrc,[U[5(d[US35eURS5nUS;a[US35eURS5n[U[5(aUR 5(d[US35eX#S.$)Nz must be a sandbox secretr5>opaqueworkspace_secretz$ must use workspace_secret or opaquerxz!.value must be a non-empty string)r5rx)rudictrwgetr(rv)secretry secret_typerxs r_copy_mount_secretrs fd # #E7";<==**V$K88E7"FGHH JJw E eS ! !E7"CDEE 00rc6[U[5(aUS:Xa [S5eXR5:wd[ SU55(a [S5e[ U5nUR S:wdUR(d [S5eUR(dUR(a [S5eUR(aURS:Xa [S 5eUR(dUR(a [S 5eU$) Nz%remote_url must be a non-empty stringc3V# UH oR5=(d US:Hv M" g7f)N)isspace).0chars r *_require_git_remote_url..s#/5?T ($&.(Zs')z3remote_url must not contain whitespace or NUL byteshttpsz(remote_url must be an absolute HTTPS URLz0remote_url must not include embedded credentials/z)remote_url must include a repository pathz-remote_url must not include query or fragment) rur(rwrvanyr schemenetlocusernamepasswordpathqueryfragment)rJparseds r_require_git_remote_urlrs j# & &**:@AA%%''3/5?/,,NOO j !F }}v}}CDD &//KLL ;;&++,DEE ||vHII rc[U[5(d [S5eURS5nUS;a [S5eU[ URSS5S5S.$) Nzref must be a dictionaryr5>tagbranchzref.type must be branch or tagrFrzref.name)r5rF)rurrwrrz)rNref_types r _copy_git_refrs_ c4 344wwvH((9::)#''&"*=zJ rz us-east-1Nzhttps://s3.amazonaws.com)r*r/r)r0r#r$c [US5[US5[US5US.n Ub[US5U S'[US5S[US5U S .n UbXzS 'Ub[U5U S 'U $) z/Build an S3-backed sandbox mount specification.r)r*r+)r)r*r+r0r/r4r7r6)r4r5r6r7r#r$rzr}) r4r6r+r*r/r)r0r#r$r7mounts rs3_mountrs2,O+FH=+FH= B 0B8 (D1/ LI E &k +E2g Lr)rNrOcS[U50nUb[U5US'UbUS:a [S5eXES'[US5S[US5US .$) z6Build a public Git-backed sandbox mount specification.rJrNz+refresh_interval_seconds must be at least 1rOr4rSr6)r4r5r6rS)rrrwrz)r4r6rJrNrOrSs r git_mountrst -j9C "3'E + #a 'JK K*B &'(D1/ LI  r)r/r#r$cS[US50nUb[US5US'[US5S[US5US.nUbXGS'Ub[U5US'U$) z/Build a GCS-backed sandbox mount specification.r+r/r4rAr6)r4r5r6rAr#r$r)r4r6r+r/r#r$rArs r gcs_mountrs| +FH=C1&(CH (D1/ LI E &k +E2g Lr)r[cfS[US50nUbX4S'[US5S[US5US.nU$)acBuild a read-only Context Hub-backed sandbox mount specification. The repo's latest commit tree is mirrored into ``mount_path`` and kept in sync for the sandbox's lifetime unless ``initial_pull_only`` is set. The sync is one-way: files written under ``mount_path`` inside the sandbox are never pushed back to the repo, and the next sync overwrites them. rWr[r4r_r6)r4r5r6r_)rz)r4r6rWr[r_rs rcontext_hub_mountr4sS )$7)J$*;&'(D1/ LI "E Lrc^[U[5(d[U[5(dU(d [S5e/nUHhn[U[5(aU(d [S5eUR S5nUS;a [S5e[ U5 UR U5 Mj U$)Nz5mounts must be a non-empty list of mount dictionariesr5>r7rArSr_z>mount_config only supports s3, gcs, git, and contexthub mounts)rurr(rwr%_reject_provider_credentials_in_mountappend)rs normalizedr mount_types r_normalize_mountsrQs&$:fc#:#:&PQQ%'J%&&eTU UYYv& ? ?P  .e4%  r> credential credentials access_tokenrc refresh_token session_tokenrdrhc[U[5(a:UR5H%upU[;a [ S5e[ U5 M' g[U[ 5(aUHn[ U5 M gg)NzVprovider credentials must be supplied in mount_config.auth, not individual mount specs)ruritems"_FORBIDDEN_MOUNT_CREDENTIAL_FIELDSrwrlist)rxkeychilds rrrnsl%++-JC88 1 2% 8 ( E4 E 1% 8 !rc[U[5(d[U[5(a [S5e0nUGH%n[U[5(aU(d [S5eUR S5nUS;a [S5eX1;a[SUS35eUS:XamUR S5n[U[5(d [S5e[ UR S 5S 5[ UR S 5S 5S .US'MUR S 5n[U[5(d [S 5eS[ UR S5S50US 'GM( U$)Nz+auth must be a list of provider auth blocksr5rlrmz2mount_config auth only supports aws and gcp blocksz duplicate z auth rule in mount_configrlz(aws mount auth must include an aws blockrcrd)rcrdrmz'gcp mount auth must include a gcp blockrh)rurr(rwrr)rq by_providerblockproviderrlrms r_normalize_mount_authr|sS$D#!6!6FGG*,K%&&eJK K99V$ > )QR R  "z(3MNO O u ))E"Cc4(( !KLL!3GGO,o"&8GG/02E& "K ))E"Cc4(( !JKK&(:GG235K)"K 1: rr)rqc [U5n[U5nUVs1sHoDSiM nnSU;aSU;a [S5eSU;aSU;a [S5eSU;aSU;a [S5eSU;aSU;a [S 5eUUS .$s snf) zBuild a high-level mount config from provider auth and mount specs. The returned value is sent as the public ``mount_config`` field. The backend expands provider auth into runtime proxy rules. r5r7rlz*s3 mounts require aws auth in mount_configrArmz+gcs mounts require gcp auth in mount_configz7aws auth requires at least one s3 mount in mount_configz8gcp auth requires at least one gcs mount in mount_config)rqrs)rrrw)rsrqnormalized_mountsauth_by_providerrmount_providerss r mount_configrs*&1,T22CD2CV}2COD 50@#@EFF E1A$AFGG   T%@RSS   U/%ASTT!# Es B c,UcgURS05nURS/5n[U[5(d [S5eUHFn[U[5(dMURS5nUS;dM3XR;dM:[US35e g)z@Reject explicit provider proxy rules owned by mount_config auth.Nrqrulesz!proxy_config rules must be a listr5rz> auth cannot be provided in both mount_config and proxy_config)rrurrwr)r proxy_configrqrrule rule_types r"validate_mount_config_proxy_configrs    FB 'D   Wb )E eT " "<==$%% HHV$  &9+<+00  r)rxr(ryr(returnr()r$rrr)rrryr(rr )rJr(rr()rNrDrrD)r4r(r6r(r+r(r*r(r/ str | Noner)r(r0r"r# bool | Noner$MountCacheConfig | Nonerr2) r4r(r6r(rJr(rNzGitMountRefSpec | NonerOz int | NonerrQ)r4r(r6r(r+r(r/rr#rr$rrr?) r4r(r6r(rWr(r[rrr])rsSequence[SandboxMount]rrr)rxrrNone)rqSequence[SandboxMountAuth]rrj)rsrrqrrro)rrorzSandboxProxyConfig | Nonerr)4r __future__rcollections.abcrtypingrrrr urllib.parser langsmith.sandbox._proxy_configr r r rr r&r-r2r9r<r?rDrHrLrQrUrYr] SandboxMountrarfrjSandboxMountAuthrorzr}rrrrrrrrrrrrrrrrrsD"$11!y)5I)%Y +5 &iY "+5"9I 9 &)&[, >QQR **-- Ye$  1( "2!%)              #  P#'+/     ) @!%)        #D&*     #   :" &" 9# $##R(* " % :$+ r