ޠj;$SSKJr SSKrSSKJrJr SSKJr SSK J r J r SSK J r SSKJr S S KJr S S KJr S S KJr \ (aSSKJq SSKJq SSKJq SSKJr OSqSqSqSSjrSSjr "SS\\!\!S-45r""SS\5r#SS/r$g)) annotationsN)IteratorMapping)cached_property) TYPE_CHECKINGAny) FieldInfo) SettingsError) SecretVersion) InitState)EnvSettingsSourcedefault CredentialsSecretManagerServiceClient) BaseSettingscSSKJq SSKJq [ R "5 [ R"S[S9 SSK J q SSS5 g!,(df  g=f![an[S5UeSnAff=f)Nrrrignore)categoryrzjGCP Secret Manager dependencies are not installed, run `pip install pydantic-settings[gcp-secret-manager]`) google.authrgoogle_auth_defaultgoogle.auth.credentialsrwarningscatch_warningsfilterwarnings FutureWarninggoogle.cloud.secretmanagerr ImportError)es a/var/www/html/gaurav/venv/lib/python3.13/site-packages/pydantic_settings/sources/providers/gcp.pyimport_gcp_secret_managerr&s\ >7  $ $ &  # #H} E M' & &  x  s4!A A A AAA A8' A33A8cFSSKJn [X5$![a gf=f)Nr)NotFoundF)google.api_core.exceptionsr( isinstancer#)excr(s r%_is_not_found_errorr,-s'7#(( s   c\rSrSr%S\S'S\S'SSjr\SSj5rSSjr\ SS j5r \SS j5r SSS jjr SSS jjr SS jrSSjrSSjrSSjrSrg)GoogleSecretManagerMapping6zdict[str, str | None]_loaded_secretsr_secret_clientc60UlXlX lX0lgN)r0r1 _project_id_case_sensitive)self secret_client project_idcase_sensitives r%__init__#GoogleSecretManagerMapping.__init__:s!+%-cLURRUR5$r3)r1common_project_pathr4r6s r%_gcp_project_path,GoogleSecretManagerMapping._gcp_project_path@s""66t7G7GHHr<c [U5S:XaUS$UR5 USn[R"SUSUSUS3[SS 9 U$) Nrrz)Secret collision: Found multiple secrets z normalizing to 'z '. Using 'z' for case-insensitive lookup.r ) stacklevel)lensortrwarn UserWarning)r6 lower_name candidateswinners r%_select_case_insensitive_secret:GoogleSecretManagerMapping._select_case_insensitive_secretDsi z?a a=  B 7 |CTU_T`aX; =    r<c0n0nURRURS9nUH{nURRUR5R SS5nXQU'UR (aMOUR5nXb;a/X&'X&RU5 M} UR (d,UR5HupgURXg5X'M U$)N)parentsecret) r1 list_secretsr@parse_secret_pathnamegetr5lowerappenditemsrL)r6mappingnormalized_groupssecretsrPrTrIrJs r%_secret_name_map+GoogleSecretManagerMapping._secret_name_mapSs"$24%%22$:P:P2QF&&88EII(TVWD DM'''!ZZ\ 646%1!-44T:##*;*A*A*C& &*&J&J:&b#+Dr<cH[URR55$r3)listr\keysr?s r% _secret_names(GoogleSecretManagerMapping._secret_namesjsD))..011r<cNURRURX5$r3)r1secret_version_pathr4)r6keyversions r%_secret_version_path/GoogleSecretManagerMapping._secret_version_pathns!""66t7G7GVVr<cURRURX5S9RRR S5$![ a gf=fN)rTzUTF-8)r1access_secret_versionrgpayloaddatadecode Exception)r6gcp_secret_namerfs r%_get_secret_value,GoogleSecretManagerMapping._get_secret_valueqsX &&<<..H=gdd66'? +  sA A AAcURRURU5S9RRR S5$![ a&n[U5(a [U5UeSnAgSnAff=frj) r1rkrgrlrmrnror,KeyError)r6rpr$s r%_get_secret_value_or_raise5GoogleSecretManagerMapping._get_secret_value_or_raiseysq &&<<..?=gdd66'? + "1%%/Q6 sA A A=A88A=cXR;aURU$UR(a-URU5URU'URU$URR U5nUc)URR UR 55nU(aUR U5URU'O [U5eURU$r3)r0r5rur\rUrVrqrt)r6rerps r% __getitem__&GoogleSecretManagerMapping.__getitem__s && &'', ,   (,(G(G(LD  %'', ,//33C8  ""3377 DO (,(>(>(OD  %3- ##C((r<c,[UR5$r3)rErar?s r%__len__"GoogleSecretManagerMapping.__len__s4%%&&r<c,[UR5$r3)iterrar?s r%__iter__#GoogleSecretManagerMapping.__iter__sD&&''r<)r5r0r4r1N)r7rr8strr9boolreturnNonerr)rIrrJ list[str]rr)rzdict[str, str])rr)latest)rerrfrrr)rprrfrr str | None)rprrr)rerrr)rint)rz Iterator[str])__name__ __module__ __qualname____firstlineno____annotations__r:propertyr@rLrr\rargrqrurxr{r__static_attributes__r<r%r.r.6su**... II ,22W)&'(r<r.c^\rSrSr%S\S'S\S'S\S'S\S'SSU4S jjjrSU4S jjrSS jrSS jrSU4S jjr SSjr Sr U=r $)!GoogleSecretManagerSettingsSourceCredentials | None _credentials!SecretManagerServiceClient | Noner1rr4_explicit_project_idc >[b[b[c [5 X0lSUlX lXplXlSUl [T U]-UUUSUUU S9 SUl g)a)Settings source that reads secrets from Google Cloud Secret Manager. Args: project_id: The GCP project to read secrets from. If not provided, it is resolved lazily (see below). project_id_field: The key, populated by a previous (higher priority) settings source, to use as the ``project_id`` when one is not passed explicitly. This must match the key used in ``current_state`` by the previous source (typically the field name or its preferred alias). For example, with ``some_field: str = Field(alias='GCP_PROJECT')``, previous env sources will expose the value under ``'GCP_PROJECT'``. Defaults to ``'project_id'``. The ``project_id`` is resolved lazily in :meth:`__call__` rather than at construction time so that it can be sourced from settings resolved by previous sources (only available via ``current_state`` once the source is called). Resolution order is: 1. the explicit ``project_id`` argument 2. the ``project_id_field`` value from previous settings sources 3. ``google.auth.default()`` NF)r9 env_prefixenv_ignore_emptyenv_parse_none_strenv_parse_enums _init_stateT) rrrr&rr4rr1_project_id_field_env_vars_loadedsuperr:) r6 settings_cls credentialsr8rrrr7r9project_id_fieldr __class__s r%r:*GoogleSecretManagerSettingsSource.__init__sxH & -1DH[Hc % ' %/!'+!1 %  )!"1+#  !%r<c>[SUR5S5nU(Ga [UR[5(aUR X5HupEnUR (aUnO[URRRU5nUc3URRRUR55nU(dM~URRXs5nUcMURRRS5(aXU4s $XU4s $ SUS4$[T U]9X5upn URRRS5(aU bXU 4$XU 4$)aOverride get_field_value to get the secret value from GCP Secret Manager. Look for a SecretVersion metadata field to specify a particular SecretVersion. Args: field: The field to get the value for field_name: The declared name of the field Returns: A tuple of (value, key, value_is_complex), where `key` is the identifier used to populate the model (either the field name or an alias, depending on configuration). c3f# UH(n[U[5(dMURv M* g7fr3)r*r rf).0ms r% DGoogleSecretManagerSettingsSource.get_field_value..s a.QJqR_D`yqyy.s11Npopulate_by_nameF)nextmetadatar*env_varsr._extract_field_infor9r\rUrVrqr model_configrget_field_value) r6field field_namesecret_version field_keyenv_namevalue_is_complexrpenv_valvalre is_complexrs r%r1GoogleSecretManagerSettingsSource.get_field_valuesRa%..acgh j8RSS9=9Q9QRW9d5 %5&&2:O&*mm&D&D&H&H&RO&.*.--*H*H*L*LX^^M]*^"?"mm==o^G* ,,99==>PQQ#*8H#HH&3CCC:e&U* *$w6uI*    ) ) - -.@ A AcoJ. .##r<c URbgURnURnUc<URR UR 5n[ U[5(aUnURSL=(a USLnUSLnU(dU(a3[5upgU(aUnU(a[ U[5(aUnUc [S5eX lXlURc[URS9Ulgg)aResolve the credentials, project_id and Secret Manager client. ``project_id`` is resolved, in order of precedence, from: the explicit ``project_id`` argument, the ``project_id_field`` value from previous settings sources (``current_state``), and finally ``google.auth.default()``. Nzproject_id is required to be specified either as an argument, via a previous settings source, or from google.auth.default. See https://google-auth.readthedocs.io/en/master/reference/google.auth.html#google.auth.default)r) r4rr current_staterUrr*rr1rAttributeErrorr)r6r8rstate_project_idneed_credentials need_project_credsr4s r%_resolve_gcp_project6GoogleSecretManagerSettingsSource._resolve_gcp_projects    ' .. ''   #1155d6L6LM *C00-  ..$6N;$;N!T) |"5"7 F$  ; < <(   n  (%    &"<IZIZ"[D  'r<cUR(d0$UR5 URb URc [ S5e[ URURUR S9$)NzGoogleSecretManagerSettingsSource: could not determine GCP project_id or initialize the Secret Manager client. Pass project_id explicitly or ensure it is available via application default credentials or a previous settings source.)r8r9)rrr4r1r r.r9r?s r%_load_env_vars0GoogleSecretManagerSettingsSource._load_env_vars=sp$$I !!#    #t':':'BJ *   D,<,SUlUR5Ul[TU]5$)NT)rrrr__call__)r6rs r%r*GoogleSecretManagerSettingsSource.__call__Ms+!%++- w!!r<cURb URO URnURRSU<SUR<S3$)Nz (project_id=z, env_nested_delimiter=))r4rrrenv_nested_delimiter)r6r8s r%__repr__*GoogleSecretManagerSettingsSource.__repr__TsR*.)9)9)ET%%4KdKd ~~&&'|J>AXY]YrYrXuuv w r<)rrrr4rr1r) NNNNNNTr8N)rztype[BaseSettings]rrr8rrrrrr bool | Noner7rr9rrrrzInitState | Nonerr)rr rrrztuple[Any, str, bool]rr)rzMapping[str, str | None])rzdict[str, Any]r) rrrrrr:rrrrrr __classcell__)rs@r%rrs$$55$$ +/!%!%)-'+;?&* ,(,;%(;%(;% ;%  ;% ' ;%%;%9;%$;%;%&;% ;%;%z/$b*\X "  r<rr)r+rorr)% __future__r _annotationsrcollections.abcrr functoolsrtypingrrpydantic.fieldsr exceptionsr typesr utilsrenvrrrrrrr"rpydantic_settings.mainrr&r,rr.r__all__rr<r%rs2-%%%'!":3E3K!%$d(cDj!9d(N} (9} @ ()L Mr<