ޠj6SrSSKJr SSKJrJr SSKJrJrJ r "SS\ 5r \ \ \4r \ \ \4rSSjrSSjrSS jrSS jrSS jrSS jrSS jrSSSS.SSjjrSSSS.S SjjrSSSSS.S!Sjjrg)"z2Helpers for building sandbox proxy configurations.) annotations)MappingSequence)AnyLiteral TypedDictc.\rSrSr%SrS\S'S\S'Srg) SandboxProxySecret z7A secret value that can be used by sandbox proxy rules.z%Literal['workspace_secret', 'opaque']typestrvalueN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__rY/var/www/html/gaurav/venv/lib/python3.13/site-packages/langsmith/sandbox/_proxy_config.pyr r sA // Jrr c[U[5(aUR5(d[US35eUR5$)Nz must be a non-empty string) isinstancer strip ValueError)rfields r_require_non_empty_stringrs8 eS ! !E7"=>?? ;;=rc[U[5(dU(d[US35eUVs/sHn[X!5PM nnU$s snf)Nz$ must be a non-empty list of strings)rr rr)valuesrr normalizeds r_require_non_empty_string_listr"sJ&#fE7"FGHHGMNve+E9vJN OsAc[U[5(aU(d [S5e0nUR5H#up#[ USUS35 X1[ US5'M% U$)Nz7env_vars must be a non-empty mapping of names to valuesz env_vars[]z env_vars name)rrritemsr)env_varsresolvednamers r_require_env_varsr)!s_ h ( (RSS!H~~' !%9TF!)<=EJ*4AB( Orc[US5nURS5nURS5nX#:wa [S5eU(a#USSR 5(d [S5eU(aUOSUS3nSUS .$) a Create a LangSmith workspace secret reference for a proxy configuration. Args: name: Workspace secret name, with or without surrounding braces. Returns: A proxy secret reference such as ``{"type": "workspace_secret", "value": "{AWS_ACCESS_KEY_ID}"}``. r({}z5workspace secret must be a name or a {NAME} referencez.workspace secret reference must contain a nameworkspace_secretr r)r startswithendswithrr)r(r!startsendsrs rr/r/,s+48J  " "3 'F   s #D ~PQQ j2&,,..IJJ J:,b&9E& 77rc S[US5S.$)zProvide a write-only secret value for a proxy configuration. The value is sent when creating or updating the sandbox proxy config, but LangSmith stores it as an opaque secret and does not return it from the API. opaquerr0)r)rs r opaque_secretr7As '@'P QQrcUc/$[U[5(d[U[5(a [S5e/nUHFn[U[5(aU(d [S5e[ U5 UR U5 MH U$)Nz/rules must be a list of proxy rule dictionaries)rdictr r_validate_proxy_provider_ruleappend)rulesr!rules r_normalize_proxy_rulesr>Js{ } %*UC"8"8JKK)+J$%%TNO O%d+$  rcURS5S:wagURS5n[U[5(aSU;a [S5e[ USS5 g)Nr gcpscopesz#gcp proxy auth rules require scopes)getrr9rr")r=r@s rr:r:ZsQ xx5  ((5/C c4 HC$7>??"3x=(;rN)r<no_proxyaccess_controlcS[U50nUb[US5US'Ub.[U[5(d [ S5e[U5US'U$)zBuild a sandbox proxy config from one or more proxy rules. Use provider-specific rule helpers such as ``aws_auth`` and ``gcp_auth`` when a sandbox needs multiple auth flows. r<rCz#access_control must be a dictionaryrD)r>r"rr9r)r<rCrDconfigs r proxy_configrGcs_#*+A%+H!IF;HjQz!.$//BC C#'#7 MrawsT)r(enabledr&cT[US5nUSUUUS.S.nUb[U5US'U$)aaBuild a sandbox proxy rule that signs AWS HTTPS requests. The sandbox proxy keeps the real AWS credentials outside the sandbox and signs supported AWS requests with SigV4 on the sandbox's behalf. AWS credentials must be supplied as ``workspace_secret`` or ``opaque`` values; plaintext AWS credentials are intentionally not supported. Args: env_vars: Plaintext environment variables set for every command in the sandbox while this rule is enabled, for tools that refuse to run unless a credential variable is present even though the proxy injects the real credential on the wire. r(rH) access_key_idsecret_access_key)r(r rIrHr&)rr))rKrLr(rIr& rule_namer=s raws_authrNxsG**$7I*!2 D,X6Z Krr@)rAr(rIr&cz[US5nSU0nUb[US5US'USUUS.nUb[U5US'U$)avBuild a sandbox proxy rule that injects GCP OAuth bearer auth. The sandbox proxy keeps the service account JSON outside the sandbox and injects OAuth bearer tokens for built-in Google API host matching. ``service_account_json`` must be supplied as a ``workspace_secret`` or ``opaque`` value; plaintext service account JSON is intentionally not supported. Args: env_vars: Plaintext environment variables set for every command in the sandbox while this rule is enabled, for tools that refuse to run unless a credential variable is present even though the proxy injects the real credential on the wire. r(service_account_jsonrAr@)r(r rIr@r&)rr"r))rPrAr(rIr&rM gcp_configr=s rgcp_authrRse,*$7I 4"J=fhO 8 D ,X6Z Kr)rr rr returnr )r z Sequence[str]rr rSz list[str])r&zMapping[str, str]rSzdict[str, str])r(r rSr )rr rSr )r<!Sequence[SandboxProxyRule] | NonerSzlist[SandboxProxyRule])r=SandboxProxyRulerSNone)r<rTrCSequence[str] | NonerDzdict[str, Any] | NonerSSandboxProxyConfig) rKr rLr r(r rIboolr&Mapping[str, str] | NonerSrU) rPr rArWr(r rIrYr&rZrSrU)r __future__rcollections.abcrrtypingrrrr r9r rUrXrr"r)r/r7r>r:rGrNrRrrrr^s@8"-**S>#s(^ 8*R  ,   <04%),0  ,#*   2)- !%!*!  !  ! ' !!N$()- $,$ !$  $  $ ' $$r