Ë ·ªgOãóL—UddlmZddlZddlZddlmZmZmZmZm Z ddl mZddlm Z mZmZmZddlmZddlZddlZddlmZddlmZee«Zd ed <Gd„d«Ze«Zd ed <dd„Zdd„Zdd„Z Gd„dee!e f«Z"Gd„dee!e f«Z#e#«Z$d ed<y)é)ÚannotationsN)Ú ItemsViewÚIteratorÚKeysViewÚMappingÚ ValuesView)Údeepcopy)ÚAnyÚCallableÚFinalÚNoReturn)ÚSignal)Úruntime)Ú get_loggerrÚ_LOGGERcó†—eZdZdZd„Zdd„Zdd„Zdd„Z dd„Z dd„Z dd„Z dd „Zdd „Zdd„Z dd„Zdd „Zdd„Zy)ÚSecretErrorMessagesaSecretErrorMessages stores all error messages we use for secrets to allow customization for different environments. For example Streamlit Cloud can customize the message to be different than the open source. For internal use, may change in future releases without notice. cód—d„|_d„|_d„|_d„|_d„|_d„|_y)Ncó—d|›dS)Nzst.secrets has no attribute "úÛ". Did you forget to add it to secrets.toml, mount it to secret directory, or the app settings on Streamlit Cloud? More info: https://docs.streamlit.io/deploy/streamlit-community-cloud/deploy-your-app/secrets-management©©Ú attr_names úN/var/www/openai/venv/lib/python3.12/site-packages/streamlit/runtime/secrets.pyÚz.SecretErrorMessages.__init__...s€Ø+¨I¨;ð7wñ xócó—d|›dS)Nzst.secrets has no key "rr©Úkeys rrz.SecretErrorMessages.__init__..3s€Ø% c Uð+wñ xrcó*—ddj|«›S)NzQNo secrets found. Valid paths for a secrets.toml file or secret directories are: z, )Újoin)Ú file_pathss rrz.SecretErrorMessages.__init__..8s€Ø_Ð`d×`iÑ`iÐjtÓ`uÐ_vÑwrcó—d|›d|›S)NzError parsing secrets file at z: r)ÚpathÚexs rrz.SecretErrorMessages.__init__..<s€Ð=¸d¸VÀ2ÀbÀTÑJrcó—|›dS)Nzn is not a folder. To use directory based secrets, mount every secret in a subfolder under the secret directoryr)Úsub_folder_paths rrz.SecretErrorMessages.__init__..>s€ØÐð kñ krcó—d|›dS)NzInvalid secrets path: z): path is not a .toml file or a directoryr)r$s rrz.SecretErrorMessages.__init__..Bs€Ø$ T FÐ*SÑTr)Úmissing_attr_messageÚmissing_key_messageÚno_secrets_foundÚerror_parsing_file_at_pathÚsubfolder_path_is_not_a_folderÚinvalid_secret_path©Úselfs rÚ__init__zSecretErrorMessages.__init__-sB€ñ% ˆÔ!ñ $ ˆÔ ñ ! ˆÔñ Kð Ô'ñ/ ˆÔ+ñ$ ˆÕ rcó—||_y)z(Set the missing attribute error message.N©r)©r0Úmessages rÚset_missing_attr_messagez,SecretErrorMessages.set_missing_attr_messageFs €à$+ˆÕ!rcó—||_y)z"Set the missing key error message.N©r*r4s rÚset_missing_key_messagez+SecretErrorMessages.set_missing_key_messageJó €à#*ˆÕ rcó—||_y)z'Set the no secrets found error message.N©r+r4s rÚset_no_secrets_found_messagez0SecretErrorMessages.set_no_secrets_found_messageNs €à 'ˆÕrcó—||_y)z1Set the error parsing file at path error message.N©r,r4s rÚ&set_error_parsing_file_at_path_messagez:SecretErrorMessages.set_error_parsing_file_at_path_messageRs€ð+2ˆÕ'rcó—||_y)z5Set the subfolder path is not a folder error message.N©r-r4s rÚ*set_subfolder_path_is_not_a_folder_messagez>SecretErrorMessages.set_subfolder_path_is_not_a_folder_messageXs€ð/6ˆÕ+rcó—||_y)z*Set the invalid secret path error message.N©r.r4s rÚset_invalid_secret_path_messagez3SecretErrorMessages.set_invalid_secret_path_message^r:rcó$—|j|«S)z(Get the missing attribute error message.r3)r0rs rÚget_missing_attr_messagez,SecretErrorMessages.get_missing_attr_messagebs€à×(Ñ(¨Ó3Ð3rcó$—|j|«S)z"Get the missing key error message.r8©r0rs rÚget_missing_key_messagez+SecretErrorMessages.get_missing_key_messagefs€à×'Ñ'¨Ó,Ð,rcó$—|j|«S)z'Get the no secrets found error message.r<)r0r"s rÚget_no_secrets_found_messagez0SecretErrorMessages.get_no_secrets_found_messagejs€à×$Ñ$ ZÓ0Ð0rcó&—|j||«S)z1Get the error parsing file at path error message.r?)r0r$r%s rÚ&get_error_parsing_file_at_path_messagez:SecretErrorMessages.get_error_parsing_file_at_path_messagens€à×.Ñ.¨t°RÓ8Ð8rcó$—|j|«S)z5Get the subfolder path is not a folder error message.rB)r0r's rÚ*get_subfolder_path_is_not_a_folder_messagez>SecretErrorMessages.get_subfolder_path_is_not_a_folder_messagers€à×2Ñ2°?ÓCÐCrcó$—|j|«S)z*Get the invalid secret path error message.rE)r0r$s rÚget_invalid_secret_path_messagez3SecretErrorMessages.get_invalid_secret_path_messagevs€à×'Ñ'¨Ó-Ð-rN)r5zCallable[[str], str]ÚreturnÚNone)r5zCallable[[list[str]], str]rTrU)r5zCallable[[str, Exception], str]rTrU©rÚstrrTrW©rrWrTrW)r"z list[str]rTrW)r$rWr%Ú ExceptionrTrW)r'rWrTrW)r$rWrTrW)Ú__name__Ú __module__Ú__qualname__Ú__doc__r1r6r9r=r@rCrFrHrKrMrOrQrSrrrrr&si„ñò ó2,ó+ó(ð2Ø6ð2à ó2ð6Ø+ð6à ó6ó+ó4ó-ó1ó9óDô.rrÚsecret_error_messages_singletonc óÖ—t|t«r|j«S|j«Dcic](\}}|t|t«r|j«n|“Œ*c}}Scc}}w)z4Convert Mapping or AttrDict objects to dictionaries.)Ú isinstanceÚAttrDictÚto_dictÚitems)ÚobjÚkÚvs rÚ_convert_to_dictrg~sP€ä#”xÔ Ø{‰{‹}ÐØILÏÉÌÔUÉÁÀÀAˆAœj¨¬HÔ5ˆqy‰yŒ{¸1Ñ<ÈÒUÐUùÓUs´-A%có,—tj|«S©N)r^rHrs rÚ_missing_attr_error_messagerj…s€Ü*×CÑCÀIÓNÐNrcó,—tj|«Sri)r^rKrs rÚ_missing_key_error_messagerl‰s€Ü*×BÑBÀ3ÓGÐGrcóf—eZdZdZd„Zed d„«Zdd„Zdd„Zdd„Z dd„Z d„Zdd „Zdd „Z dd„Zy)razjWe use AttrDict to wrap up dictionary values from secrets to provide dot access to nested secrets có4—t|«|jd<y)NÚ__nested_secrets__)ÚdictÚ__dict__)r0Úvalues rr1zAttrDict.__init__’s€Ü.2°5«kˆ ‰ Ð*Ò+rcó<—t|t«s|St|«Sri)r`rra)rrs rÚ_maybe_wrap_in_attr_dictz!AttrDict._maybe_wrap_in_attr_dict•s€ä˜%¤Ô)ØˆLä˜E“?Ð"rcó,—t|j«Sri)Úlenror/s rÚ__len__zAttrDict.__len__œs€Ü4×*Ñ*Ó+Ð+rcó,—t|j«Sri)Úiterror/s rÚ__iter__zAttrDict.__iter__Ÿó€ÜD×+Ñ+Ó,Ð,rcó†— |j|}|j|«S#t$rtt|««‚wxYwri)rortÚKeyErrorrl©r0rrrs rÚ__getitem__zAttrDict.__getitem__¢sH€ð <Ø×+Ñ+¨CÑ0ˆEØ×0Ñ0°Ó7Ð7øÜò <ÜÔ5°cÓ:Ó;Ð;ð <úó ‚"¢Acó†— |j|}|j|«S#t$rtt |««‚wxYwri)rortr}ÚAttributeErrorrj)r0rrrs rÚ__getattr__zAttrDict.__getattr__©sK€ð IØ×+Ñ+¨IÑ6ˆEØ×0Ñ0°Ó7Ð7øÜò IÜ Ô!<¸YÓ!GÓHÐHð Iúr€có,—t|j«Sri)Úreprror/s rÚ__repr__zAttrDict.__repr__°r{rcó—td«‚)Nz)Secrets does not support item assignment.©Ú TypeErrorr~s rÚ__setitem__zAttrDict.__setitem__³s€ÜÐCÓDÐDrcó—td«‚)Nz.Secrets does not support attribute assignment.rˆr~s rÚ__setattr__zAttrDict.__setattr__¶s€ÜÐHÓIÐIrcó,—t|j«Sri)r ror/s rrbzAttrDict.to_dict¹s€Ü˜×/Ñ/Ó0Ð0rN)rTr ©rTÚint©rTz Iterator[str]©rrWrTr )rrWrTr )rTr ©rTúdict[str, Any])rZr[r\r]r1Ústaticmethodrtrwrzrrƒr†rŠrŒrbrrrrarasK„ñò:ðò#óð#ó,ó-ó<óIò-óEóJô1rracóê—eZdZdZd„Zdd„Z dd„Zdd„Zdd„Zdd„Z dd„Z dd „Zd d „Zd!d„Z ed"d„«Zed"d „«Zdd„Zdd„Zd#d„Zd#d„Zd$d„Zd%d„Zd&d„Zd'd„Zd(d„Zd)d„Zd*d„Zd+d„Zy),ÚSecretsz”A dict-like class that stores secrets. Parses secrets.toml on-demand. Cannot be externally mutated. Safe to use from multiple threads. có‚—d|_tj«|_d|_d|_t d¬«|_y)NFz4Emitted when a `secrets.toml` file has been changed.)Údoc)Ú_secretsÚ threadingÚRLockÚ_lockÚ_file_watchers_installedÚ"_suppress_print_error_on_exceptionrÚfile_change_listenerr/s rr1zSecrets.__init__Äs7€à26ˆŒ Ü—_‘_Ó&ˆŒ Ø(-ˆÔ%Ø27ˆÔ/ä$*ØFô% ˆÕ!rcó —|j} d|_|j« ||_y#t$r Y||_ywxYw#||_wxYw)a'Load secrets.toml files from disk if they exists. If none exist, no exception will be raised. (If a file exists but is malformed, an exception *will* be raised.) Returns True if a secrets.toml file was successfully parsed, False otherwise. Thread-safe. TF)ržÚ_parseÚFileNotFoundError)r0Ú&prev_suppress_print_error_on_exceptions rÚload_if_toml_existszSecrets.load_if_toml_existsÏsg€ð26×1XÑ1XÐ.ð ð7;ˆDÔ3ØK‰KŒMàð7ð Õ3øô !ò àð7ð Õ3ð ûð 7ð Õ3ús Ž.® A·AÁAÁAÁ A có—||_y)zˆSet whether exceptions should be printed when accessing secrets. For internal use, may change in future releases without notice.N)rž)r0Ú!suppress_print_error_on_exceptions rÚ%set_suppress_print_error_on_exceptionz-Secrets.set_suppress_print_error_on_exceptionés €ð 3TˆÕ/rcóZ—|jstjt|««yy)z?Print the given error message if exceptions are not suppressed.N)ržÚstÚerrorrW)r0Ú error_msgs rÚ"_print_exception_if_not_suppressedz*Secrets._print_exception_if_not_suppressedðs €à×6Ò6ÜH‰H”S˜“^Õ$ð7rcóè—|j5|j€ ddd«y|jj«D]\}}|j||«Œd|_ddd«y#1swYyxYw)zyClear the secrets dictionary and remove any secrets that were added to os.environ. Thread-safe. N)rœr™rcÚ"_maybe_delete_environment_variable)r0rerfs rÚ_resetzSecrets._resetõs]€ðZ‹ZØ}‰}Ð$Ø÷ˆZðŸ ™ ×+Ñ+Ö-‘1Ø×7Ñ7¸¸1Õ=ð.à ˆDŒM÷ Z‰ZúsA(¤;A(Á(A1cóv—i}d} t|d¬«5}|j«}ddd«d} ddl}|j |j««||fS#1swYŒ4xYw#t$ridfcYSwxYw#tjf$r-}tj||«}|j|«‚d}~wwxYw)z9Parse a TOML file and return the secrets as a dictionary.Fzutf-8)ÚencodingNTr)ÚopenÚreadr¢ÚtomlÚupdateÚloadsr‰ÚTomlDecodeErrorr^rOr¬) r0r$ÚsecretsÚfound_secrets_fileÚfÚsecrets_file_strr´r%r«s rÚ_parse_toml_filezSecrets._parse_toml_filesÍ€àˆØ"Ðð Üd WÕ-°Ø#$§6¡6£8Ð ÷.ð"&Ðð ÛàN‰N˜4Ÿ:™:Ð&6Ó7Ô8ðÐ*Ð*Ð*÷+.Ð-ûô!ò àu9Òð ûô˜4×/Ñ/Ð0ò ä/×VÑVØ˜"óð ð ×3Ñ3°IÔ>Øûð ús>† A#“A¤ A#¯$A6ÁA ÁA#Á# A3Á2A3Á6B8Â(B3Â3B8cóÖ—i}d}tj|«D]=}tjj||«}tjj |«s1t j |«}|j|«t|«‚i}tj|«D]y}tjj||«} tjj | «rŒCt| «5} | j«j«||<d}ddd«Œ{t|«dk(r$|t|j««d||<Œ9|||<Œ@||fS#1swYŒÃxYw)aÿParse a directory for secrets. Directory style can be used to support Kubernetes secrets that are mounted to folders. Example structure: - top_level_secret_folder - user_pass_secret (folder) - username (file), content: myuser - password (file), content: mypassword - my_plain_secret (folder) - regular_secret (file), content: mysecret See: https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#create-a-pod-that-has-access-to-the-secret-data-through-a-volume And: https://docs.snowflake.com/en/developer-guide/snowpark-container-services/additional-considerations-services-jobs#passing-secrets-in-local-container-files FTNér)ÚosÚlistdirr$r!Úisdirr^rQr¬Ú ValueErrorr²r³ÚstriprvÚlistÚkeys)r0r$r¸r¹Údirnamer'r«Úsub_secretsÚfilenameÚ file_pathrºs rÚ_parse_directoryzSecrets._parse_directory s3€ð#%ˆØ"Ðä—z‘z $×'ˆGÜ Ÿg™gŸl™l¨4°Ó9ˆOÜ—7‘7—=‘= Ô1Ü;×fÑfØ#ó ð×7Ñ7¸ ÔBÜ Ó+Ð+ØˆKäŸJ™J Ö7ÜŸG™GŸL™L¨¸(ÓC ô—7‘7—=‘= Ô+Øä˜)”_¨Ø,-¯F©F«H¯N©NÓ,<K Ñ)Ø)-Ð&÷%_ð8ô;Ó 1Ò$à#.¬t°K×4DÑ4DÓ4FÓ/GÈÑ/JÑ#K˜Ó à#.˜Ó ð3(ð6Ð*Ð*Ð*÷%_úsÃ3$EÅE(có—|jd«r|j|«Stjj |«r|j|«Stj|«}|j|«t|«‚)Nú.toml) Úendswithr¼r¿r$rÁrÊr^rSr¬rÂ)r0r$r«s rÚ_parse_file_pathzSecrets._parse_file_pathNsn€Ø=‰=˜Ô!Ø×(Ñ(¨Ó.Ð.ä 7‰7=‰=˜ÔØ×(Ñ(¨Ó.Ð.ä3×SÑSØó ˆ ð ×/Ñ/° Ô:Ü˜Ó#Ð#rcóR—|j}||S|j5|j|jcddd«Si}tjj d«}d}|D]-}|j|«\}}|xs|}|j |«Œ/|s1tj|«}|j|«t|«‚|j«D]\}} |j|| «Œ||_|j«|jcddd«S#1swYyxYw)aParse our secrets.toml files if they're not already parsed. This function is safe to call from multiple threads. Parameters ---------- print_exceptions : bool If True, then exceptions will be printed with `st.error` before being re-raised. Raises ------ FileNotFoundError Raised if secrets.toml doesn't exist. Nú secrets.filesF)r™rœr©ÚconfigÚ get_optionrÎrµr^rMr¬r¢rcÚ_maybe_set_environment_variableÚ_maybe_install_file_watchers) r0r¸r"r¹r$Úpath_secretsÚfound_secrets_file_in_pathr«rerfs rr¡zSecrets._parse[s€ð$—-‘-ˆØÐØˆNà Z‹ZØ}‰}Ð(Ø—}‘}÷‰ZðˆGäŸ™×-Ñ-¨oÓ>ˆJØ!&ÐÛ"Ø;?×;PÑ;PÐQUÓ;VÑ8Ð8Ø%7Ò%UÐ;UÐ"Ø—‘˜|Õ,ð#ñ &ä3×PÑPØ"óðð ×7Ñ7¸ ÔBÜ'¨ Ó2Ð2àŸ ™ ž‘1Ø×4Ñ4°Q¸Õ:ð(ð$ˆDŒMØ×-Ñ-Ô/à—=‘=÷9ZŠZúsD¿CDÄD&có8—|j«}t|«S)zxConverts the secrets store into a nested dictionary, where nested AttrDict objects are also converted into dictionaries.)r¡rg)r0r¸s rrbzSecrets.to_dicts€à—+‘+“-ˆÜ Ó(Ð(rcóz—t|«}|tttfvrt|«tj |<yy)zdAdd the given key/value pair to os.environ if the value is a string, int, or float. N)ÚtyperWrÚfloatr¿Úenviron©rerfÚ value_types rrÓz'Secrets._maybe_set_environment_variable”s2€ô ˜!“Wˆ Øœ#œs¤EÐ*Ñ*Ü ›FŒBJ‰JqŠMð+rcóª—t|«}|tttfvr5tj j |«|k(rtj |=yyy)ziRemove the given key/value pair from os.environ if the value is a string, int, or float. N)rÙrWrrÚr¿rÛÚgetrÜs rr®z*Secrets._maybe_delete_environment_variablesD€ô ˜!“Wˆ Øœ#œs¤EÐ*Ñ*¬r¯z©z¯~©~¸aÓ/@ÀAÒ/EÜ— ‘ ˜1‘ ð0FÐ*rcóè—|j5|jr ddd«ytjj d«}|D]} |jd«r7tjjj||jd¬«n6tjjj||jd¬«Œƒd|_ddd«y#t$rYŒŸwxYw#1swYyxYw)NrÐrÌÚpoll)Úwatcher_typeT) rœrr©rÑrÒrÍÚ streamlitÚwatcherÚpath_watcherÚ watch_fileÚ_on_secrets_changedÚ watch_dirr¢)r0r"r$s rrÔz$Secrets._maybe_install_file_watchers¦sÝ€Ø Z‹ZØ×,Ò,Ø÷ˆZôŸ™×-Ñ-¨oÓ>ˆJÛ"ðØ—}‘} WÔ-Ü!×)Ñ)×6Ñ6×AÑAØ Ø ×4Ñ4Ø)/ðBõô"×)Ñ)×6Ñ6×@Ñ@Ø Ø ×4Ñ4Ø)/ðAôøð#ð,-1ˆDÔ)÷7ˆZøô&)òñð ú÷'ˆZús5C(¤$C(Á A>CÃ C(Ã C%Ã"C(Ã$C%Ã%C(Ã(C1cóæ—|j5tjd|«|j«|j «ddd«|j j «y#1swYŒ$xYw)Nz!Secret path %s changed, reloading)rœrÚdebugr¯r¡rŸÚsend)r0Úchanged_file_paths rrçzSecrets._on_secrets_changedÄsL€Ø Z‹ZÜM‰MÐ=Ð?PÔQØK‰KŒMØK‰KŒM÷ð ×!Ñ!×&Ñ&Õ(÷ˆZús7A'Á'A0có²— |j«|}t|t«s|St|«S#tt f$rt t|««‚wxYw)z{Return the value with the given key. If no such key exists, raise an AttributeError. Thread-safe. )r¡r`rrar}r¢r‚rjr~s rrƒzSecrets.__getattr__Îs[€ð CØ—K‘K“M #Ñ&ˆEÜ˜e¤WÔ-Øä “Ð&øôÔ+Ð,ò CÜ Ô!<¸SÓ!AÓBÐBð Cús ‚$2§ 2²$Acó¦— |j«|}t|t«s|St|«S#t$rt t|««‚wxYw)ztReturn the value with the given key. If no such key exists, raise a KeyError. Thread-safe. )r¡r`rrar}rlr~s rrzSecrets.__getitem__àsP€ð <Ø—K‘K“M #Ñ&ˆEÜ˜e¤WÔ-Øä “Ð&øÜò <ÜÔ5°cÓ:Ó;Ð;ð <ús ‚$2§ 2²AcóŠ—tj«s|jj›St |j««S)zAA string representation of the contents of the dict. Thread-safe.)rÚexistsÚ __class__rZr…r¡r/s rr†zSecrets.__repr__ïs2€ô~‰~ÔØ—n‘n×-Ñ-Ð.Ð/ÜD—K‘K“MÓ"Ð"rcó4—t|j««S)z/The number of entries in the dict. Thread-safe.)rvr¡r/s rrwzSecrets.__len__ùs€ä4—;‘;“=Ó!Ð!rcó&—||j«vS©z2True if the given key is in the dict. Thread-safe.©r¡)r0res rÚhas_keyzSecrets.has_keyýs€àD—K‘K“MÐ!Ð!rcó>—|j«j«S)z,A view of the keys in the dict. Thread-safe.)r¡rÅr/s rrÅzSecrets.keyss€à{‰{‹}×!Ñ!Ó#Ð#rcó>—|j«j«S)z.A view of the values in the dict. Thread-safe.)r¡Úvaluesr/s rrùzSecrets.valuess€à{‰{‹}×#Ñ#Ó%Ð%rcó>—|j«j«S)z7A view of the key-value items in the dict. Thread-safe.)r¡rcr/s rrcz Secrets.items s€à{‰{‹}×"Ñ"Ó$Ð$rcó&—||j«vSrôrõrJs rÚ__contains__zSecrets.__contains__ s€àd—k‘k“mÐ#Ð#rcó4—t|j««S)z3An iterator over the keys in the dict. Thread-safe.)ryr¡r/s rrzzSecrets.__iter__s€äD—K‘K“MÓ"Ð"rN)rTÚbool)r¦rþrTrU)r«rWrTrU)rTrU)r$rWrTztuple[Mapping[str, Any], bool])rTzMapping[str, Any]r’)rer rfr rTrUr‘)rTrWrŽ)rerWrTrþ)rTz KeysView[str])rTzValuesView[Any])rTzItemsView[str, Any])rr rTrþr)rZr[r\r]r1r¤r§r¬r¯r¼rÊrÎr¡rbr”rÓr®rÔrçrƒrr†rwrörÅrùrcrürzrrrr–r–½s³„ñò óð4TØ15ðTà óTó%ó !ó+ó:,+ó\$ó2!óh)ð ò#óð#ðòóðó1ó<)óCó$ <ó#ó"ó"ó$ó&ó%ó$ô#rr–Úsecrets_singleton)rdzMapping[str, Any] | AttrDictrTr“rVrX)%Ú __future__rr¿ršÚcollections.abcrrrrrÚcopyr Útypingr rrr Úblinkerrrãr©Ústreamlit.watcher.path_watcherrÚstreamlit.loggerrrZrÚ__annotations__rr^rgrjrlrWrar–rÿrrrÚrs¯ðö#ã ÛßNÕNÝ÷óõãÛ%ÝÝ'á˜HÓ%€ˆÓ%÷R.ñR.ñj*=Ó)>Ð Ó>óVóOóHô-1ˆws˜CxÑ ô-1ô`V#ˆgc˜3hÑôV#ñr #›9Ð5Ô$r