i$ddlmZddlZddlZddlZddlZddlmZddlm Z ddl m Z ddl m Z ddlmZddlZGdd ZeZd7d Zd8dZGddeZe dGddZejddZejddeZdZdedZdZdZdZ e j!dz Z"d9d!Z#ed"Z$d:d$Z%d;d)Z&dd3Z)d8d4Z*d?d5Z+d@d6Z,dS)A) annotationsN)contextmanager) dataclass)Path)Lock)OptionalceZdZdZdS)GoogleColabStatecHd|_t|_d|_dS)NF) is_checkedrlocksecretselfs V/home/ubuntu/.hermes/hermes-agent/venv/lib/python3.11/site-packages/fal_client/auth.py__init__zGoogleColabState.__init__sFF %) N)__name__ __module__ __qualname__rrrr r s#*****rr returnboolc| ddlm}dt|vS#t$rYdSt$rYdSwxYw)Nr get_ipythonz google.colabF)IPythonrstrModuleNotFoundError NameErrorrs ris_google_colabr!sm''''''[[]]!3!333 uu uus! ; ;; Optional[str]ctsdStj5tjrtjcdddS ddlm}n#t$rYddddSwxYw |d}| t_n#t$rdt_YnwxYwdt_tjcdddS#1swxYwYdS)Nr)userdataFAL_KEYT) r! _colab_stater r r google.colabr$ ImportErrorgetstrip Exception)r$tokens rget_colab_tokenr-%s}   t  ##  " '&########  - - - - - - -   ########   'LL++E"'++--L   ' ' '"&L    '#' "!##################sYCA  C A#C"A##C'3BCB41C3B44CC"CceZdZdS)MissingCredentialsErrorN)rrrrrrr/r/;sDrr/T)frozencHeZdZUdZded<ded<ed dZd dZd S) AuthCredentialsz)Represents an authorization header value.rschemer,rc$|jd|jS)N )r3r,rs r header_valuezAuthCredentials.header_valueFs+,, ,,,rdict[str, str]cd|jiS)N Authorization)r6rs r as_headerszAuthCredentials.as_headersJs!233rNrr)rr7)rrr__doc____annotations__propertyr6r:rrrr2r2?s`33KKKJJJ ---X-444444rr2 FAL_RUN_HOSTzfal.runFAL_QUEUE_RUN_HOSTzqueue.z auth.fal.aizhttps://z /oauth/token TwXR51Vz8JbY8GUUMy6EyuVR0fTO7N4N auth0_tokenz .portalockz.falrcttjdttS)N FAL_HOME_DIR)rosgetenvrDEFAULT_FAL_HOME expanduserrrr_get_fal_home_dirrIYs1  .#.>*?*?@@ A A L L N NNrc#2K ddl}n#t$rdVYdSwxYwttz }|jdd|jt|dd5dVddddS#1swxYwYdS)z%Best effort lock shared with fal-cli.rNTparentsexist_okF)fail_when_lockedtimeout) portalockerr+rIAUTH_LOCK_FILENAMEparentmkdirutilsTemporaryFileLockr)rQ lock_files r _token_lockrX]s  "##&88I 4$777   , , I -   s :B  BB#tuple[Optional[str], Optional[str]]cttz }|sdSd|D}|sdS|d}d}t |dkr|d}|pd|pdfS)N)NNc^g|]*}||+Sr)r*).0lines r z%_read_auth_tokens..ts- T T Tdtzz|| TTZZ\\ T T Trr)rIAUTH_TOKEN_FILENAMEexists read_text splitlineslen)pathlines refresh_token access_tokens r_read_auth_tokensrios   !4 4D ;;==z T Tdnn&6&6&A&A&C&C T T TE z!HM"&L 5zzA~~Qx  D,"6$ 66rrgrrhNonecttz }|jdd|g}|r|||d|dS)NTrK )rIr`rSrTappend write_textjoin)rgrhrecontentss r_write_auth_tokensrqss   !4 4DKdT222H& %%%OODIIh''(((((rr, Optional[int]cH |dd}dt| dzz}tj||z}t j|d}t|dS#t$rYdSwxYw)z?Returns exp claim in seconds since epoch or None if unreadable..r_=zutf-8expN) splitrdbase64urlsafe_b64decodejsonloadsdecodeintr)r+)r,payload_segmentpaddingpayloadclaimss r_decode_jwt_exprs++c**1-#o...23*?W+DEEGNN733446::e$$%%% ttsBB B! B!i,)leeway_secondsrr~c\t|}|dStj|z|kS)NT)rtime)r,rrws r_is_access_token_expiredrs/ % C {t 9;; '3 ..rdictctjtdt|dd} |}n#t $ri}YnwxYw|jdksd|vrtd|S)Nrg) grant_type client_idrg)datarPrhzDFailed to refresh fal auth token. Please run `fal auth login` again.)httpxpostAUTH0_TOKEN_URLAUTH0_CLIENT_IDr{r+ status_coder/)rgresponse token_datas r_refresh_access_tokenrsz)(*  H]]__  s""nJ&F&F% R    s< A  A cht5t\}}dddn #1swxYwY|sdS|rt|s|St|}|d|}|d}t5t ||dddn #1swxYwY|S)z Try to reuse tokens created by `fal auth login`. We share the same file layout as fal-cli: - refresh token on first line - optional cached access token on second line Nrgrh)rXrirrr)rq)rgrhr new_refresh new_accesss r_load_bearer_token_from_loginrsA ::&7&9&9# |::::::::::::::: t4\BB&}55J..-@@KN+J 44; 333444444444444444 s-11 B''B+.B+ctjddk}|stjdx}rt d|Stjdx}r+tjdx}rt d|d|St x}rt d|St x}rt d|Std ) z Return credentials using this priority: 1) FAL_KEY / FAL_KEY_ID+FAL_KEY_SECRET / Colab secret (unless FAL_FORCE_AUTH_BY_USER=1) 2) Tokens saved by `fal auth login` FAL_FORCE_AUTH_BY_USER1r%Key FAL_KEY_IDFAL_KEY_SECRET:Bearerz_No credentials found. Set FAL_KEY (or FAL_KEY_ID/FAL_KEY_SECRET) or login via `fal auth login`.)rEenvironr)rFr2r-rr/)force_user_authkeykey_idfal_key_secret colab_tokenbearers rfetch_auth_credentialsrsjnn%=>>#EO 7)I&& &3 7"5#.. . ,///f 7 i(899 9N 7#5V*F*Fn*F*FGG G+-- -[ 7"5+66 6.000v1x000 !i  rct}|jdkrtd|jS)z Legacy helper kept for backwards compatibility. It only returns Key-based credentials; user-based auth (Bearer) will raise MissingCredentialsError so callers don't accidentally send it as a key. rzFKey credentials not found. Set FAL_KEY (or FAL_KEY_ID/FAL_KEY_SECRET).)rr3lowerr/r,)auths rfetch_credentialsrsG " # #D {e##% T    :r)rr)rr")rr)rrY)rgrrhr"rrj)r,rrrr)r,rrr~rr)rgrrr)rr2r;)- __future__rryr{rEr contextlibr dataclassesrpathlibr threadingrtypingrrr r&r!r-r+r/r2rr)r?r@ AUTH0_DOMAINrrr`rRhomerGrIrXrirqrrrrrrrrrrs"""""" %%%%%%!!!!!! ******** !! ####,     i    $ 4 4 4 4 4 4 4 4z~~ni88 Z^^$8:Q<:Q:QRR 7\7774#!49;;'OOOO"7777"))))    CF//////086r