i |dZddlmZddlZddlmZdZedGdd ZddZddZ dS)z:Helpers for reporting Vercel Sandbox authentication state.) annotationsN) dataclass) VERCEL_TOKENVERCEL_PROJECT_IDVERCEL_TEAM_IDT)frozenc.eZdZUded<ded<ded<dS)VercelAuthStatusboolokstrlabelztuple[str, ...] detail_linesN)__name__ __module__ __qualname____annotations__;/home/ubuntu/.hermes/hermes-agent/hermes_cli/vercel_auth.pyr r s0 HHHJJJ!!!!!!rr namer returnr cDttj|SN)r osgetenv)rs r_presentrs  $  rc td}dtD}td|D}td|D}|rOgd}|r+|dd|t dd t|S|st dd d S|rXt d d d|dddd|dd|dfSt d ddS)z9Return Vercel auth status without exposing secret values.VERCEL_OIDC_TOKENc.i|]}|t|Sr)r).0rs r z(describe_vercel_auth..s GGGTD(4..GGGrc3$K|] \}}||V dSrrr!rpresents r z'describe_vercel_auth..s,YY gQXYtYYYYYYrc3$K|] \}}||V dSrrr$s rr&z'describe_vercel_auth..s,]] gU\]t]]]]]]r)z mode: OIDCzactive env: VERCEL_OIDC_TOKENzhnote: OIDC tokens are development-only; use access-token auth for deployments and long-running processeszalso present: z, Tz OIDC token via VERCEL_OIDC_TOKENzOaccess token + project/team via VERCEL_TOKEN, VERCEL_PROJECT_ID, VERCEL_TEAM_ID)zmode: access tokenz;active env: VERCEL_TOKEN, VERCEL_PROJECT_ID, VERCEL_TEAM_IDFz#partial access-token auth (missing )zmode: incomplete access tokenz present env: z missing env: zMrecommended: set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_ID togetherznot configured)zDrecommended: set VERCEL_TOKEN, VERCEL_PROJECT_ID, and VERCEL_TEAM_IDz3development-only alternative: set VERCEL_OIDC_TOKEN)r_TOKEN_TUPLE_VARStupleitemsappendjoinr )has_oidc token_statespresent_token_varsmissing_token_varsdetailss rdescribe_vercel_authr3s+,,HGG5FGGGLYY9K9K9M9MYYYYY]]9K9K9M9M]]]]]Z     M NNKDII6H,I,IKK L L L&H%PW..YYY    ]        R$))r7s@@"""""" !!!!!!L $"""""""" !!!!//////r