Ei_UddlmZddlZddlZddlmZmZmZmZm Z m Z ddl m Z ddl mZmZmZddlmZddlZddlmZmZddlmZmZdd lmZeeZd ed <ee ze!ze"ze#ed fzZ$e%ee e!e"hZ&d ed<dddZ'GddZ(e(Z)d ed<ddZ*ddZ+ddZ,Gdde eefZ-Gdde eefZ.e.Z/d ed<y) ) annotationsN)Callable ItemsViewIteratorKeysViewMapping ValuesView)deepcopy)AnyFinalNoReturn)Signal)configruntime)StreamlitMaxRetriesErrorStreamlitSecretNotFoundError) get_loggerr _LOGGER SecretsValuezFinal[frozenset[type]]_ALLOWED_SCALAR_TYPESct|tro|jD][\}}t|ts/|rd|dnd}t dt |j d|d|r|d|n|}t||]y t |tvr1t |j }|rd|dnd}t d |d|d y ) aValidate that a secrets value has an allowed type. Parameters ---------- value The value to validate. path The dotted path to this value (for error messages). Raises ------ TypeError If the value has an unsupported type. zin ''z at top levelz0Dictionary keys in secrets must be strings, got  .z at 'zUnsupported type 'zH in secrets. Allowed types are: str, int, float, bool, and nested dicts.N) isinstancedictitemsstr TypeErrortype__name___validate_secrets_valuer)valuepathkey nested_valuekey_path nested_path type_name path_infos [/var/www/pod-logistic/pod-ai/venv/lib/python3.12/site-packages/streamlit/runtime/secrets.pyr#r#,s%!& ? Cc3'-1T$q>~9--0(1>.2TF!C5/sK #L+ > ? e1 1K(( '+eD6O   1YK8J K   2ceZdZdZddZddZddZddZ ddZ ddZ ddZ dd Z dd Z dd Z dd Zdd ZddZy)SecretErrorMessagesa"SecretErrorMessages stores all error messages we use for secrets to allow customization for different environments. For example Streamlit Cloud can customize the message to be different than the open source. For internal use, may change in future releases without notice. cdd|_d|_d|_d|_d|_d|_y)Ncd|dS)Nzst.secrets has no attribute "". Did you forget to add it to secrets.toml, mount it to secret directory, or the app settings on Streamlit Cloud? More info: https://docs.streamlit.io/deploy/streamlit-community-cloud/deploy-your-app/secrets-management attr_names r,z.SecretErrorMessages.__init__..Zs+I;7l lr-cd|dS)Nzst.secrets has no key "r2r3r&s r,r6z.SecretErrorMessages.__init__..`s%cU+l lr-c*ddj|S)NzQNo secrets found. Valid paths for a secrets.toml file or secret directories are: z, )join) file_pathss r,r6z.SecretErrorMessages.__init__..fs_`d`i`ijt`u_v wr-cd|d|S)NzError parsing secrets file at z: r3)r%exs r,r6z.SecretErrorMessages.__init__..js=dV2bTJr-c |dS)Nzn is not a folder. To use directory based secrets, mount every secret in a subfolder under the secret directoryr3)sub_folder_paths r,r6z.SecretErrorMessages.__init__..ms"#$oor-cd|dS)NzInvalid secrets path: z): path is not a .toml file or a directoryr3)r%s r,r6z.SecretErrorMessages.__init__..rs$TF*S Tr-)missing_attr_messagemissing_key_messageno_secrets_founderror_parsing_file_at_pathsubfolder_path_is_not_a_folderinvalid_secret_pathselfs r,__init__zSecretErrorMessages.__init__YsE; ! :  =  K '  + :  r-c||_y)z(Set the missing attribute error message.NrArHmessages r,set_missing_attr_messagez,SecretErrorMessages.set_missing_attr_messagevs $+!r-c||_y)z"Set the missing key error message.NrBrLs r,set_missing_key_messagez+SecretErrorMessages.set_missing_key_messagez #* r-c||_y)z'Set the no secrets found error message.NrCrLs r,set_no_secrets_found_messagez0SecretErrorMessages.set_no_secrets_found_message~s 'r-c||_y)z1Set the error parsing file at path error message.NrDrLs r,&set_error_parsing_file_at_path_messagez:SecretErrorMessages.set_error_parsing_file_at_path_messages +2'r-c||_y)z5Set the subfolder path is not a folder error message.NrErLs r,*set_subfolder_path_is_not_a_folder_messagez>SecretErrorMessages.set_subfolder_path_is_not_a_folder_messages /6+r-c||_y)z*Set the invalid secret path error message.NrFrLs r,set_invalid_secret_path_messagez3SecretErrorMessages.set_invalid_secret_path_messagerRr-c$|j|S)z(Get the missing attribute error message.rK)rHr5s r,get_missing_attr_messagez,SecretErrorMessages.get_missing_attr_messages((33r-c$|j|S)z"Get the missing key error message.rPrHr&s r,get_missing_key_messagez+SecretErrorMessages.get_missing_key_messages'',,r-c$|j|S)z'Get the no secrets found error message.rT)rHr;s r,get_no_secrets_found_messagez0SecretErrorMessages.get_no_secrets_found_messages$$Z00r-c&|j||S)z1Get the error parsing file at path error message.rW)rHr%r=s r,&get_error_parsing_file_at_path_messagez:SecretErrorMessages.get_error_parsing_file_at_path_messages..tR88r-c$|j|S)z5Get the subfolder path is not a folder error message.rZ)rHr?s r,*get_subfolder_path_is_not_a_folder_messagez>SecretErrorMessages.get_subfolder_path_is_not_a_folder_messages22?CCr-c$|j|S)z*Get the invalid secret path error message.r])rHr%s r,get_invalid_secret_path_messagez3SecretErrorMessages.get_invalid_secret_path_messages''--r-NreturnNone)rMzCallable[[str], str]rmrn)rMzCallable[[list[str]], str]rmrn)rMzCallable[[str, Exception], str]rmrnr5rrmrr&rrmr)r;z list[str]rmr)r%rr= Exceptionrmr)r?rrmr)r%rrmr)r" __module__ __qualname____doc__rIrNrQrUrXr[r^r`rcrergrirkr3r-r,r/r/Psi :,+(262 2 6+6 6 +4-19D.r-r/secret_error_messages_singletonc t|tr|jS|jDcic](\}}|t|tr|jn|*c}}Scc}}w)z4Convert Mapping or AttrDict objects to dictionaries.)rAttrDictto_dictr)objkvs r,_convert_to_dictr|sL#x {{}IL UAAjH5qyy{1 < UU Us-A%c,tj|SN)rur`r4s r,_missing_attr_error_messagers * C CI NNr-c,tj|Sr~)rurcr8s r,_missing_key_error_messagers * B B3 GGr-cjeZdZdZd dZeddZddZddZddZ ddZ ddZ dd Z dd Z dd Zy )rwzkWe use AttrDict to wrap up dictionary values from secrets to provide dot access to nested secrets. c4t||jd<y)N__nested_secrets__)r__dict__)rHr$s r,rIzAttrDict.__init__s.25k *+r-c<t|ts|St|Sr~)rrrw)r$s r,_maybe_wrap_in_attr_dictz!AttrDict._maybe_wrap_in_attr_dicts%)Lr-c,t|jSr~)lenrrGs r,__len__zAttrDict.__len__s4**++r-c,t|jSr~)iterrrGs r,__iter__zAttrDict.__iter__D++,,r-c |j|}|j|S#t$rtt|wxYwr~)rrKeyErrorrrHr&r$s r, __getitem__zAttrDict.__getitem__sH <++C0E007 7 <5c:; ; < "Ac |j|}|j|S#t$rtt |wxYwr~)rrrAttributeErrorr)rHr5r$s r, __getattr__zAttrDict.__getattr__sK I++I6E007 7 I !1771= > DM  ! ! !sA(;A((A1cji}d} t|d5}|j}dddd}ddl} |j |j ||fS#1swY4xYw#t$ridfcYSwxYw#t |jf$r'}tj||}t||d}~wwxYw)z9Parse a TOML file and return the secrets as a dictionary.Futf-8encodingNTr) openreadFileNotFoundErrortomlupdateloadsr TomlDecodeErrorrurgr) rHr%secretsfound_secrets_filefsecrets_file_strrr=msgs r,_parse_toml_filezSecrets._parse_toml_file%s" dW- ,#$668  ,"&   < NN4::&67 8***) , ,! u9  4//0 </VV"  /s3 ;  A#A A# A6A A## A32A36B2 "B--B2ci}d}tj|D]4}tjj||}tjj |s t j |}t|i}tj|D]{}tjj||} tjj | rCt| d5} | jj||<d}ddd}t|dk(r*|tt|j||<0|||<7||fS#1swYxYw)aParse a directory for secrets. Directory style can be used to support Kubernetes secrets that are mounted to folders. Example structure: - top_level_secret_folder - user_pass_secret (folder) - username (file), content: myuser - password (file), content: mypassword - my_plain_secret (folder) - regular_secret (file), content: mysecret See: https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#create-a-pod-that-has-access-to-the-secret-data-through-a-volume And: https://docs.snowflake.com/en/developer-guide/snowpark-container-services/additional-considerations-services-jobs#passing-secrets-in-local-container-files FrrTN)oslistdirr%r:isdirrurirrrstriprnextrkeys) rHr%rrdirnamer? error_msg sub_secretsfilename file_pathrs r,_parse_directoryzSecrets._parse_directoryAs=#%"zz$' /G ggll49O77==1;ff# 39==KJJ7 .GGLL(C 77==+)g6.!,-FFHNN,\}}||vr|j|||t |||<|j ||@||_y)a7Apply programmatic secrets to the secrets store. This is an internal helper that merges the given programmatic secrets into `self._secrets`. It does NOT store them in `_programmatic_secrets` (that is the caller's responsibility). Must be called with `self._lock` held. N)rrrrr r)rHrcurrent_secretsr&r$s r,rz#Secrets._apply_programmatic_secretss$(==#tj j |t|k(rtj |=yyy)ziRemove the given key/value pair from os.environ if the value is a string, int, or float. N)r!rrrrrgetrs r,rz*Secrets._maybe_delete_environment_variablesH !W #sE* *rzz~~a/@CF/J 1 0K *r-c|j5|jr dddytjd}|D]} |j dr7t j jj||jdn6t j jj||jdd|_dddy#ttf$rYwxYw#1swYyxYw)Nrrpoll) watcher_typeT) rrrrr streamlitwatcher path_watcher watch_file_on_secrets_changed watch_dirrr)rHr;r%s r,rz$Secrets._maybe_install_file_watcherss ZZ 1,, 1 1 **?;J" }}W-!))66AA  44)/B "))66@@  44)/A ,-1D )7 1 1&12CD ' 1 1s4C$C$A>C= C$C!C$ C!!C$$C-c4|j5tjd||j|j |j r|j |j ddd|jjy#1swY$xYw)Nz!Secret path %s changed, reloading) rrdebugrrrrrsend)rHchanged_file_paths r,rzSecrets._on_secrets_changed!su ZZ M MM=?P Q KKM KKM))001K1KL  M !!&&( M Ms ABBc |j|}t|ts|St|S#tt f$rt t|wxYw)z{Return the value with the given key. If no such key exists, raise an AttributeError. Thread-safe. )rrrrwrrrrrs r,rzSecrets.__getattr__.s[  CKKM#&EeW- E? "+, C !sP  <KKM#&EeW- E? " <5c:; ; rrrrrr"_suppress_print_error_on_exceptionr)superrr )rHr&r$ __class__s r,rzSecrets.__setattr__Ls-    G U +LM Mr-ctjs|jjSt |j S)zAA string representation of the contents of the dict. Thread-safe.)rexistsrr"rrrGs r,rzSecrets.__repr__[s2 ~~nn--. /DKKM""r-c4t|jS)z/The number of entries in the dict. Thread-safe.)rrrGs r,rzSecrets.__len__es4;;=!!r-c&||jvSz2True if the given key is in the dict. Thread-safe.r)rHrzs r,has_keyzSecrets.has_keyisDKKM!!r-c>|jjS)z,A view of the keys in the dict. Thread-safe.)rrrGs r,rz Secrets.keysms{{}!!##r-c>|jjS)z.A view of the values in the dict. Thread-safe.)rvaluesrGs r,rzSecrets.valuesqs{{}##%%r-c>|jjS)z7A view of the key-value items in the dict. Thread-safe.)rrrGs r,rz Secrets.itemsus{{}""$$r-c&||jvSr rrbs r, __contains__zSecrets.__contains__ysdkkm##r-c4t|jS)z3An iterator over the keys in the dict. Thread-safe.)rrrGs r,rzSecrets.__iter__}sDKKM""r-rl)rmbool)rrrmrn)r%rrmztuple[Mapping[str, Any], bool])rmrr)rzMapping[str, SecretsValue]rmrn)rzr r{r rmrn)rrrmrnr)r&rr$r rmrnrr)rzrrmr)rmz KeysView[str])rmzValuesView[Any])rmzItemsView[str, Any])r&r rmrr) r"rrrsrtrIrrrrrrrrxrrrrrrrrrrrrrrrrrr __classcell__)rs@r,rrs  " 15   !+8,+\ 6+!Z)!C$>!C !CF($>( (<##1< )C < N#""$&%$#r-rsecrets_singleton)r)r$r r%rrmrn)ryzMapping[str, Any] | AttrDictrmrrorp)0 __future__rrrcollections.abcrrrrrr copyr typingr r r blinkerrstreamlit.watcher.path_watcherrrrstreamlit.errorsrrstreamlit.loggerrr"r__annotations__rrrrrr frozensetrr#r/rur|rrrwrrr3r-r,r$s# XX %%S'H%%Sy5 4'$sN/B*CC 1:3UD:Q0R-R! HX.X.v*=)>>VOH,1wsCx ,1^S#gc3hS#l #95$r-