hK<%SSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK r SSK J r SSK J r SSK JrJrJrJrJrJr SSKrSSKJrJr SSKJr \(a#SSKJr \R8S :aSS K Jr OSS KJr SS KJ r \!\"\#\#4\\$4r%S \&S '\\/\%4S4r'S \&S'"SS\5r("SS\RR5r*"SS\*\RR5r+"SS\+5r,"SS\+5r-"SS\+5r."SS\+5r/"SS\*5r0S Sjr1g)!) annotationsN)datetime)partial) TYPE_CHECKINGAnyCallableOptional TypedDictUnion)eprintverbose)NoPickleOption)boto3) ) TypeAlias)issue_unstable_warningr CredentialProviderFunctionReturnCredentialProviderCredentialProviderFunctionc\rSrSr%SrS\S'S\S'S\S'S\S'S \S 'S\S 'S \S 'S\S'S\S'S\S'S\S'S\S'Srg)AWSAssumeRoleKWArgs,zParameters for [STS.Client.assume_role()](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/sts/client/assume_role.html#STS.Client.assume_role).strRoleArnRoleSessionNamezlist[dict[str, str]] PolicyArnsPolicyintDurationSecondsTagsz list[str]TransitiveTagKeys ExternalId SerialNumber TokenCodeSourceIdentityProvidedContextsN)__name__ __module__ __qualname____firstlineno____doc____annotations____static_attributes__r(h/home/james-whalen/.local/lib/python3.13/site-packages/polars/io/cloud/credential_provider/_providers.pyrr,sLt L$$ K   ON**r0rc@\rSrSrSr\R SSj5rSrg)r=z Base class for credential providers. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. cg)zFetches the credentials.Nr(selfs r1__call__CredentialProvider.__call__Fsr0r(Nreturnr) r)r*r+r,r-abcabstractmethodr7r/r(r0r1rr=s! ''r0ch\rSrSrSrS SjrS Sjr\RS Sj5r S Sjr S Sjr Sr g ) CachingCredentialProviderKz Base class for credential providers that has built-in caching. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. c0[5UlSUlg)NF)r_cached_credentials_has_logged_use_cacher5s r1__init__"CachingCredentialProvider.__init__Ts    &+"r0cT[R"S5S:Xa+URRS5 UR 5$URR 5nUb8US=nbcU[ [R"5R55::a3UR 5nURRU5 SUl OR[5(aCUR(d2USn[S[RU5SU<S35 SUl Uup20UEU4$) N(POLARS_DISABLE_PYTHON_CREDENTIAL_CACHING1F[z&]: Using cached credentials (expiry = )T)osgetenvrAsetretrieve_credentials_implgetrrnow timestamprBr r r>__repr__)r6 credentialsexpirycredss r1r7"CachingCredentialProvider.__call__Zs  99? @C G  $ $ ( ( .113 3..224  "1~ %V 2#hlln6689988:K  $ $ ( ( 5).D & YYt99 ^F -66t<=>7-3Kq: *.D &# %y&  r0cgNr(r5s r1rN3CachingCredentialProvider.retrieve_credentials_implvsMPr0c:URRS5 grX)rArMr5s r1clear_cached_credentials2CachingCredentialProvider.clear_cached_credentialsys   $$T*r0c^S[U5RS[[U55S3$)NzCachingCredentialProvider[z @ ])typer)hexidr5s r1rR"CachingCredentialProvider.__repr__|s++DJ,?,?+@C4M?RSTTr0)rArBNr:Noner9r:r) r)r*r+r,r-rCr7r;r<rNr[rRr/r(r0r1r>r>Ks2+ !8 PP+Ur0r>cL^\rSrSrSrSU4SjjrSSjrS SjrSrU=r $) CachedCredentialProviderz Wrapper that adds caching on top of a credential provider. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. c.>Xl[TU] 5 grX) _providersuperrC)r6provider __class__s r1rC!CachedCredentialProvider.__init__s" r0c"UR5$rXrjr5s r1rN2CachedCredentialProvider.retrieve_credentials_impls~~r0c$SUR<S3$)NzCachedCredentialProvider[r^rpr5s r1rR!CachedCredentialProvider.__repr__s*4>>*>r0rp)rlz/CredentialProvider | CredentialProviderFunctionr:rdr9re) r)r*r+r,r-rCrNrRr/ __classcell__rms@r1rgrgs,G  ??r0rgc^\rSrSrSrSSSSSS.SU4SjjjrSSjrSSjrSS jrSS jr SS jr \ SS j5r "S S\ 5rSrU=r$)CredentialProviderAWSz AWS Credential Provider. Using this requires the `boto3` Python package to be installed. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. NF) profile_name region_name assume_role_auto_init_unhandled_key!_storage_options_has_endpoint_urlc>Sn[U5 UR5 XlX lX0lX@lXPl[TU]!5 g)a Initialize a credential provider for AWS. Parameters ---------- profile_name : str Profile name to use from credentials file. assume_role : AWSAssumeRoleKWArgs | None Configure a role to assume. These are passed as kwarg parameters to [STS.client.assume_role()](https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/sts/client/assume_role.html#STS.Client.assume_role) z<`CredentialProviderAWS` functionality is considered unstableN) r_ensure_module_availabilityryrzr{r|r}rkrC)r6ryrzr{r|r}msgrms r1rCCredentialProviderAWS.__init__sH(Ms# ((*(&&(@%1R. r0cUR(aeUR5nURbURU5$UR 5nUcSnUR U5e[ [USS5=n[5(a[UR55OSnURURS.URbSUR0EU4$0EU4$)z6Fetch the credentials for the configured profile name.NzDdid not receive any credentials from boto3.Session.get_credentials() _expiry_time)aws_access_key_idaws_secret_access_keyaws_session_token)r|_sessionr{_finish_assume_roleget_credentialsEmptyCredentialError isinstancegetattrrrrQ access_key secret_keytoken)r6sessionrUrrTs r1rN/CredentialProviderAWS.retrieve_credentials_impls0000--/    '++G4 4'') =XC++C0 0GE>4$HH&(SS   " # "'!1!1%*%5%5 6;[[5L#U[[1    SU    r0cURS5nUR"S 0URD6nUSnUSnURc Sn[U5eUSUSUSS.[ UR 554$) Nsts Credentials ExpirationzDexpiration time in STS response did not contain timezone information AccessKeyIdSecretAccessKey SessionToken)rrrr()clientr{tzinfo ValueErrorrrQ)r6rr sts_responserUrTrs r1r)CredentialProviderAWS._finish_assume_roles&))=D,<,<= ]+|$ == XCS/ !"'}!5%*+<%=!&~!6  v! " # #r0cUR(a0$UR5RR5nUR S5=n(a![ 5(a[ SU35 SU0$0$![a 0s$f=f)N endpoint_urlz.[CredentialProviderAWS]: Loaded endpoint_url: )r}rget_scoped_config ImportErrorrOr r )r6configrs r1_storage_update_options-CredentialProviderAWS._storage_update_optionss  1 1I ]]_--??AF"::n5 5< 5yyG ~VW"L1 1  I s(A88 BBcUR(a)[5(a[SURS35 gU"5 g![acnUR(aHSURS[ U5R SU3n[RRU5UeSnAgSnAfURa [5(a [S5 gf=f) Nz\[CredentialProviderAWS]: Will not be used as a provider: unhandled key in storage_options: ''Fz#cannot load requested aws_profile 'z': z: z5[CredentialProviderAWS]: Did not find any credentialsT) r|r r rryr_r)polars exceptions ComputeErrorr)r6ers r1_can_use_as_provider*CredentialProviderAWS._can_use_as_providers  ( (yy::>:W:W9XXY[   F$!   ))*#d1g.>.>-?r!F''44S9q@(( yyNO  sA CAB,,-CCcTSSKnUR"URURS9$)Nr)ryrz)rSessionryrz)r6rs r1rCredentialProviderAWS._session"s(}}**((  r0c^[RRS5c Sn[U5eg)Nrz6boto3 must be installed to use `CredentialProviderAWS` importlibutil find_specrclsrs r1r1CredentialProviderAWS._ensure_module_availability+s, >> # #G , 4JCc" " 5r0c\rSrSrSrSrg)*CredentialProviderAWS.EmptyCredentialErrori1z Raised when boto3 returns empty credentials. This generally indicates that no credentials could be found in the environment. r(N)r)r*r+r,r-r/r(r0r1rr1s r0r)r|r}r{ryrz) ry str | Nonerzrr{zAWSAssumeRoleKWArgs | Noner|rr}boolr:rdr9)rrr:r)r:zdict[str, str])r:r)r:z boto3.Sessionrc)r)r*r+r,r-rCrNrrrr classmethodr Exceptionrr/rtrus@r1rwrws$("&26/327!  0  #- ,0 B6#&$> ##  y  r0rwc^\rSrSrSrSSSSS.SU4SjjjrSSjrSSjr\SSj5r \ SS j5r \SS j5r \SS j5r \ SS j5rS rU=r$)CredentialProviderAzurei:z Azure Credential Provider. Using this requires the `azure-identity` Python package to be installed. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. N)scopes tenant_id credential_storage_accountc >Sn[U5 X@lUbUOS/UlX lX0lUb$[ US5(dSU<S3n[ U5eO!UR5cUR5 [5(a6[SUR<SUR<S UR<S 35 [TU]15 g) a Initialize a credential provider for Microsoft Azure. By default, this uses `azure.identity.DefaultAzureCredential()`. Parameters ---------- scopes Scopes to pass to `get_token` tenant_id Azure tenant ID. credential Optionally pass an instantiated Azure credential class to use (e.g. `azure.identity.DefaultAzureCredential`). The credential class must have a `get_token()` method. z>`CredentialProviderAzure` functionality is considered unstableNz"https://storage.azure.com/.default get_tokenz!the provided `credential` object z& does not have a `get_token()` method./[CredentialProviderAzure]: self.account_name = z self.tenant_id = z self.scopes =  ) r account_namerrrhasattrr6_try_get_azure_storage_account_credential_if_permittedrr r rkrC)r6rrrrrrms r1rC CredentialProviderAzure.__init__Es0Os#,(F/S.T #$  !:{337 ~F77!o% 4 H H J R  , , . 99 ($$()%>>%&";;"!%  r0cUR5=nbU$SSKnUR=(d URR 5nUR "UR SUR06nSUR0UR4$)Fetch the credentials.Nrr bearer_token) razure.identityridentityDefaultAzureCredentialrrrr expires_on)r6vazurerrs r1rN1CredentialProviderAzure.retrieve_credentials_implsLLN NA H__O(M(M(O $$dkkLT^^L EKK    r0c[R"S5n[RRR 5nU(a[ SUR<SU<35 URb:US:Xa4SURUR50nU(a [ S5 US4$g![anU(a[ SU35 SnAgSnAff=f)N)POLARS_AUTO_USE_AZURE_STORAGE_ACCOUNT_KEYrz- POLARS_AUTO_USE_AZURE_STORAGE_ACCOUNT_KEY = rG account_keyz?[CredentialProviderAzure]: Retrieved account key from Azure CLIzJ[CredentialProviderAzure]: Could not retrieve account key from Azure CLI: ) rKrLr_utilsloggingr r r%_get_azure_storage_account_key_az_clir)r6rr rUrs r1rNCredentialProviderAzure._try_get_azure_storage_account_credential_if_permitteds57II 75 1--''//1  ($$()@<@B     )9S@ #!4#M#M))$ Yd{" defdgh  s7/B++ C5CCc^[RRS5c Sn[U5eg)Nzazure.identityzAazure-identity must be installed to use `CredentialProviderAzure`rrs r1r3CredentialProviderAzure._ensure_module_availabilitys- >> # #$4 5 =UCc" " >r0cURSS5SRSS5SRSS5SRSS5S$![a gf=f)Nz://rH/r@z.dfs.core.windows.net)split IndexError)uris r1!_extract_adls_uri_storage_account9CredentialProviderAzure._extract_adls_uri_storage_accountsm  %#A&sAq"sAq".216   sA A AAc f[R"URSSSSSSSU55SS $) Nstorageaccountkeyslistz--outputjsonz--account-namervalue)rloads_azcli)rrs r1r=CredentialProviderAzure._get_azure_storage_account_key_az_clisM"zz JJ         r0ct[R"URS55S$![a gf=f)Nversionz azure-cli)rrrr)rs r1_azcli_version&CredentialProviderAzure._azcli_versions6 ::cjj34[A A  s '* 77cr[R"[RS:wa S/UQ5$SSS/UQ5$)Nwin32azcmdz/C) subprocess check_outputsysplatform)argss r1rCredentialProviderAzure._azclisB&& \\W4TMDM  ;@$:Tt:T  r0)rrrr) rzlist[str] | Nonerrr Any | Nonerrr:rdr9)r:z'CredentialProviderFunctionReturn | Nonerc)rrr:r)rrr:r)r:r)rrr:bytes)r)r*r+r,r-rCrNrrr staticmethodrrrrr/rtrus@r1rr:s$( $!%'+ 9!9 9  9 % 9 99v ' 0'R##   :   r0rcn^\rSrSrSrSSSSS.S U4SjjjrS Sjr\S Sj5rSr U=r $) CredentialProviderGCPiz GCP Credential Provider. Using this requires the `google-auth` Python package to be installed. .. warning:: This functionality is considered **unstable**. It may be changed at any point without it being considered a breaking change. Nrrequestquota_project_iddefault_scopesc>Sn[U5 UR5 SSKn[URR UbUOS/UUUS9Ul[TU]!5 g)z Initialize a credential provider for Google Cloud (GCP). Parameters ---------- Parameters are passed to `google.auth.default()` z<`CredentialProviderGCP` functionality is considered unstablerNz.https://www.googleapis.com/auth/cloud-platformr) rr google.authrauthdefault _init_credsrkrC)r6rrrrrgooglerms r1rCCredentialProviderGCP.__init__seMs# ((*" KK  %FG-)   r0czSSKnUR5up#URURRR R 55 SUR0UR=nbJ[URc#UR[R"S5S9OUR554$S4$)rrNrUTC)r)google.auth.transport.requestsr refreshr  transportrequestsRequestrrTrrreplacezoneinfoZoneInforQ)r6r rU _project_idrTs r1rN/CredentialProviderGCP.retrieve_credentials_impl)s-!--/ fkk++44<<>? , ,,&3 }},NN(*;*;E*BNC)+      r0c^[RRS5c Sn[U5eg)Nz google.authz> # #M 2 :PCc" " ;r0)r ) rrrrrrrrr:rdr9rc) r)r*r+r,r-rCrNrrr/rtrus@r1rrsl""'+%) "" " % " # " ""H &##r0rc,\rSrSrSrSSjrSSjrSrg) UserProvidedGCPTokeniCz+User-provided GCP token in storage_options.cXlgrXr)r6rs r1rCUserProvidedGCPToken.__init__Fs r0c"SUR0S4$)Nrr r5s r1r7UserProvidedGCPToken.__call__Is +T11r0r N)rrr:rdr9)r)r*r+r,r-rCr7r/r(r0r1rrCs52r0rc[U[5(aUR5(dgU"5upUbmU[[R "5R 55- =nS:a8SSKJn [5(a[SUS35 U"SU-5 U"5up[U[5(aUR5=n(a0UEUEnU$)Nr)sleepz waiting for z" seconds for refreshed credentialsrH) rrwrrrrPrQtimer&r r r)credential_providerrU opt_expiry expires_inr&_rs r1+_get_credentials_from_provider_expiry_awarer,Ms &(=>>#88::+-E %HLLN,D,D,F(GG GZ1 L 99 \*-OP Q a*n&(%'<== 8 8 :::5A Lr0)r(rr:zdict[str, str] | None)2 __future__rr;importlib.utilrrrKrrrr functoolsrtypingrrrr r r polars._utils.loggingrr r polars.io.cloud._utilsrpolars._dependenciesr version_infortyping_extensionspolars._utils.unstablertupledictrrrr.rrABCrr>rgrwrrrr,r(r0r1r:s/"   11* 7"$/9/4DcNHSM4Q.R )R(- R1 124HH)I +)+" ' '2U 2CGG2Uj?8?.` 5` F} 7} @F#5F#R2-23r0