gx(UddlmZddlZddlmZmZddlZddlm Z m Z ddl m Z ddl mZddlmZmZerddlmZe eZd ed <dd ZGd d ej0j2ZGddej0j4ZGddej0j4ZGddej0j4ZGddeZgdZGddeZ Gddej0j4Z!y)) annotationsN) TYPE_CHECKINGFinal)config file_util) get_logger)serialize_forward_msg) emit_endpoint_deprecation_noticeis_xsrf_enabled)Sequencer_LOGGERc\tjd xstjdS)aTrue if cross-origin requests are allowed. We only allow cross-origin requests when CORS protection has been disabled with server.enableCORS=False or if using the Node server. When using the Node server, we have a dev and prod port, which count as two origins. zserver.enableCORSglobal.developmentMode)r get_optionP/var/www/openai/venv/lib/python3.12/site-packages/streamlit/web/server/routes.pyallow_cross_origin_requestsr$s0  !45 5 9J9J :rcPeZdZ d dfd ZddZdfd Zd fd ZxZS) StaticFileHandlerc4||_t| ||yN)_reserved_pathssuper initialize)selfpathdefault_filenamereserved_paths __class__s rrzStaticFileHandler.initialize2s . 4!12rct|dk(}|s|jdr|jddy|jddy)zDisable cache for HTML files. Other assets like JS and CSS are suffixed with their hash, so they can be cached indefinitely. rz.html Cache-Controlno-cachepublicN)lenendswith set_header)rr is_index_urls rset_extra_headersz#StaticFileHandler.set_extra_headers<s; 4yA~ 4==1 OOOZ 8 OOOX 6rc8 t|||S#tjj$r}|j dk(r|j tj jdk7r*jtj jdtfd|jDr||j|jxsd|_|j|j|j }t|||cYd}~S|d}~wwxYw)N/c3@K|]}j|ywr)r&).0xurl_paths r z;StaticFileHandler.validate_absolute_path..TsJ5Ix((+5Is index.html)rvalidate_absolute_pathtornadoweb HTTPError status_coderossepreplaceanyrparse_url_pathrget_absolute_pathroot)rr> absolute_pather0r s @rr3z(StaticFileHandler.validate_absolute_pathHs 71$ F F{{$$ }}#9977;;#%'// SAHJT5I5IJJG //0E0E0UV $ 6 6tyy$)) L w5dMJJG! s!DCD DDDc |dk(rDtjjtjd}|j |yt ||fi|y)Nr+r2)r8rjoinrget_static_dirrenderr write_error)rr7kwargs index_filer s rrEzStaticFileHandler.write_error]sF # i&>&>&@,OJ KK # G  6v 6r)Nr)rstrr str | Nonerz Sequence[str])rrHreturnNone)r>rHr?rHrJrI)r7intrJrK)__name__ __module__ __qualname__rr)r3rE __classcell__)r s@rrr1s@(,(* 33%3& 3 7*77rrcDeZdZejj dZy)AddSlashHandlercyrrrs rgetzAddSlashHandler.getf rN)rMrNrOr4r5addslashrUrrrrRrRes [[  rrRcDeZdZejj dZy)RemoveSlashHandlercyrrrTs rrUzRemoveSlashHandler.getlrVrN)rMrNrOr4r5 removeslashrUrrrrYrYks [[  rrYceZdZdZdZdZy)_SpecialRequestHandlerz2Superclass for "special" endpoints, like /healthz.cb|jddtr|jddyy)Nr"r#Access-Control-Allow-Origin*)r'rrTs rset_default_headersz*_SpecialRequestHandler.set_default_headersts* 4 & ( OO93 ? )rcF|jd|jy)a/OPTIONS handler for preflight CORS checks. When a browser is making a CORS request, it may sometimes first send an OPTIONS request, to check whether the server understands the CORS protocol. This is optional, and doesn't happen for every request or in every browser. If an OPTIONS request does get sent, and is not then handled by the server, the browser will fail the underlying request. The proper way to handle this is to send a 204 response ("no content") with the CORS headers attached. (These headers are automatically added to every outgoing response, including OPTIONS responses, via set_default_headers().) See https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request N set_statusfinishrTs roptionsz_SpecialRequestHandler.optionsys"  rN)rMrNrO__doc__rargrrrr]r]qs<@ rr]c$eZdZdZdZdZdZy) HealthHandlerc||_y)zInitialize the handler Parameters ---------- callback : callable A function that returns True if the server is healthy N) _callback)rcallbacks rrzHealthHandler.initializes "rc@K|jd{y7wrhandle_requestrTs rrUzHealthHandler.get!!### c@K|jd{y7wrrorTs rheadzHealthHandler.headrqrrc@K|jjrAd|jjvr)d|jjvrdnd}t|||jd{\}}|r|j ||j dt rU|jjdi}|j|jjdd |jfi|yy|j d |j |y7w) Nz_stcore/zscript-health-checkz/_stcore/script-health-checkz/_stcore/health)new_pathxsrf_cookie_kwargsxsrf_cookie_name_streamlit_xsrfi) requesturir rlwriterer settingsrU set_cookie xsrf_token)rrvokmsg cookie_kwargss rrpzHealthHandler.handle_requests <<   $,,2B2B B)DLL,<,<</&  -TH E((C JJsO OOC  $ 1 12F K MM%%&8:KLOO$! OOC JJsO+)sA+D-D.B/DN)rMrNrOrrUrtrprrrrjrjs "$ $rrj)zhttps://devel.streamlit.testzhttps://*.streamlit.apptestzhttps://*.streamlitapp.testzhttps://*.streamlitapp.comzhttps://share.streamlit.iozhttps://share-demo.streamlit.iozhttps://share-head.streamlit.ioz"https://share-staging.streamlit.iozhttps://*.demo.streamlit.runzhttps://*.head.streamlit.runzhttps://*.staging.streamlit.runzhttps://*.streamlit.runzhttps://*.demo.streamlit.appzhttps://*.head.streamlit.appzhttps://*.staging.streamlit.appzhttps://*.streamlit.appceZdZdZddZy)HostConfigHandlerctj|_tjdr+d|jvr|jj dyyy)Nrzhttp://localhost) _DEFAULT_ALLOWED_MESSAGE_ORIGINScopy_allowed_originsrrappendrTs rrzHostConfigHandler.initializesT @ E E G   6 7"$*?*??  ! ! ( (); <@ 8rcpK|j|jddddd|jdyw)NF)allowedOriginsuseExternalAuthTokenenableCustomParentMessagesenforceDownloadInNewTab metricsUrlrw)r}rrerTs rrUzHostConfigHandler.gets: "&"7"7(-.3+0    s46N)rJrK)rMrNrOrrUrrrrrs  = rrc(eZdZdZdZdZdZdZy)MessageCacheHandlerz)Returns ForwardMsgs from our MessageCachec||_y)zfInitializes the handler. Parameters ---------- cache : MessageCache N)_cache)rcaches rrzMessageCacheHandler.initializes  rc>tr|jddyy)Nr_r`)rr'rTs rraz'MessageCacheHandler.set_default_headerss & ( OO93 ? )rc|jdd}tjds"|jd|j y|Dt j d|jdtjj|jj|}|Dt j d|jdtjjt jdt|}|jdd |j||jd y) Nhashz)global.storeCachedForwardMessagesInMemoryiz>HTTP request for cached message is missing the hash attribute.r+zGHTTP request for cached message could not be fulfilled. No such messagezMessageCache HITz Content-Typezapplication/octet-streamrw) get_argumentrrrerfr errorr4r5Finishr get_messagedebugr r'r})rmsg_hashmessagemsg_strs rrUzMessageCacheHandler.gets$$VT2  !LM OOC KKM    MMP  OOC ++$$& &++))(3 ? MM"  OOC ++$$& & ()'0 (BC 7 rcF|jd|jy)z+/OPTIONS handler for preflight CORS checks.rcNrdrTs rrgzMessageCacheHandler.options$s  rN)rMrNrOrhrrarUrgrrrrrs3@>rr)rJbool)" __future__rr8typingrr tornado.webr4 streamlitrrstreamlit.loggerrstreamlit.runtime.runtime_utilr streamlit.web.server.server_utilr r collections.abcr rMr __annotations__rr5rRequestHandlerrRrYr]rjrrrrrrrs# '''@ (H%% 17 5517h gkk00  33 W[[77:2*2j$ ..43'++443r