yj̈́UdZddlmZddlZddlmZddlmZmZm Z m Z m Z ddl m Z mZejeZedGd d Zid ed d dded ddded dddeddddeddddedddd !d"ed dd#d$!d%ed d&d'd(d)*d+edd,d-d.!d/ed d01d2ed3d41d5ed d6d78d9ed d:;d<ed d=d>d?@dAed3dB;dCed3ddDdEed3dF;idGed dH;dIed dJ;dKed dL;dMed dNdOed ddPdQed ddRdSed ddTdUed ddVdWed ddXdYeddd dZed d[d\d]ed d^;d_ed d`;daed dbdcdded dedfdg@dhed didjkdleddmdndo@ed dpdqdr@ed dsdted du;edvdwxed dyxdzZd{ed|<eGd}d~Zidddd5dd5dd5dd5ddYddYddYddddddddddZddZddZddZdd9idd9dd9dd9dd<dd<ddEddEdd2dd2dd/dd/dd+ddMddMddMddOddOiddQddQddSddSddSddGddIddIddIddIddKddKddKddUddUddUddWiddWdd]dd]dd_dd_dd_dd_ddddddddddaddaddddddddhddhddldldld%d%d%ddddddƜ Zded<id dɓddʓdd˓d+d̓d.api.openai.com``) — those serve the same API surface with the same transport requirements and the same access-scoped ``/v1/models`` listing. Hostname-parsed matching only — never substring — so lookalike hosts (``api.openai.com.attacker.test``) and path-segment spoofs (``proxy.test/api.openai.com/v1``) are rejected. A genuine ``*.api.openai.com`` subdomain requires control of openai.com DNS, so the dot-suffix match does not reopen the #32243 spoofing hole. Delegates to ``utils.base_url_host_matches``, which owns the exact-or-dot-suffix hostname contract (userinfo/port stripped, lowercased, trailing dot removed) — one implementation, not two. zapi.openai.com)r )rts r"is_official_openai_hostrQs$ !+; < <!!i9&<&<##&&&)*<*<\*J*J&## x((!  -.."3HSb3c3c"!! 4r!modelct|pddrdSdS)uResolve the wire protocol for a Nous Portal model. Portal serves its ``anthropic/*`` catalog on a native Anthropic Messages route (``/v1/messages``) alongside the OpenAI-compatible ``/v1/chat/completions`` used by every other model it proxies. Claude traffic goes to the native route so it gets Anthropic's own request shape (inner-block ``cache_control`` breakpoints, thinking blocks) instead of the OpenAI-wire translation. When *model* is empty/unknown, defaults to ``chat_completions`` — the historical Nous transport — so callers that don't yet know the model stay on the safer OpenAI-compatible path. rz anthropic/r6r)rrrr)rs r" nous_api_modersJ 5;B%%''22<@@$##  r!ct|}||S|pd}|dvrt|St |}| t |jdS|dkrdSdS)uDetermine the API mode (wire protocol) for a provider/endpoint. Resolution order: 1. Host-mandated mode (special endpoints that only accept one protocol). 2. Nous Portal dual-wire (model-derived; overlay alone is openai_chat). 3. Known provider → transport → TRANSPORT_TO_API_MODE. 4. Direct provider checks (bedrock). 5. Default: 'chat_completions'. *model* is optional but required for dual-wire providers (Nous) whose transport depends on the catalog id, not just the provider/host. Nr> nous-portalr' nousresearchrrmrh)rrrrrrrr)rrtrmandatedrrs r"determine_api_moders&h//H ^**,,2244M???U###  ! !D $((9KLLL9!!  r! user_configDict[str, Any]c |rt|tsdS||}t|tsdS|ddp|}|ddp-|ddp|ddpd}|ddpd}|dd pd }g}|r||t |||t ||d d d S)zResolve a provider from the user's config.yaml ``providers:`` section. Args: name: Provider name as given by the user. user_config: The ``providers:`` dict from config.yaml. Returns: ProviderDef if found, else None. Nrrrrurlrtkey_envrrFr user-configrqrrrrsrtrrrv) isinstancedictrrrpr)rrrentry display_nameapi_urlrrrs r"resolve_user_providerrs( jd;;t OOD ! !E eT " "t99VR((0DLiir""]eiir&:&:]eii TV>W>W][]Gii 2&&,"G +}55FIH!     x    r!r provider_keyct|pdp"t|pd}|dd}|dr|nd|S)a0Build the stable ``custom:`` identity for a configured provider. Keyed ``providers:`` entries keep their config key as the durable identity even when their display name changes. Legacy ``custom_providers:`` entries have no key, so their normalized display name remains the identity. r -r)rrrreplacer)rridentity normalizeds r"custom_provider_slugrs<%2&&,,..Q#l6Hb2I2I2O2O2Q2QH!!))#s33J#..y99 U::?U?U?UUr!ct}||fD]}t|pd}|s:|dd}|||t |h|dr8|ddd}|r||d|ht|S)zCReturn every current and legacy identity accepted for one endpoint.rrrr:) setrrrrupdaterrsplit frozenset)rraliasesvaluerawrsuffixs r"custom_provider_aliasesrs G - A A%+2$$&&,,..  [[c** Z)=j)I)IJKKK   + + A%%c1--a0F A(>*(>(>?@@@ W  r!custom_providersOptional[List[Dict[str, Any]]]c |rt|tsdS|pd}|sdS|dk}d}|D]s}t|ts|dpd}|ddp-|ddp|ddpd}|r|s|dpd}|d pd} g} |r| ||!||t| t|| f}t|| } |t|| vrOt| |d t| |d d d cS|r |r|\} } }} t| | d || d d d SdS)zIResolve a provider from the user's config.yaml ``custom_providers`` list.NrrrrrtrrrrrFrrr) rrrrrrrrrrrp)rrr requestedbare_custom_fallback first_validrrrrrrslugdnameaurldenvs r"resolve_custom_providerr s^ :.>#E#Et""$$**,,I t %0CGK!* * %&&   &))/R6688 IIj" % % yy## yy##  %''   7  99Y''-24466 .117R>>@@    % OOG $ $ $  h$\<@@ K$L,?? 3L,OO O O #"8__        "-tT4#!      4r!user_providersOptional[Dict[str, Any]]c t| |}|rt||}||S |kr ddlm}||}|[ fd|D}t|dkr:t|j |j dt|j pd|j pdd Sn#t$rYnwxYwt }||S|r(t |}||St||}||St!||} | | S dd lm} | } | $t | j d| j| jd Sn#t$rYnwxYwdS) uFull resolution chain: built-in → models.dev → user config. This is the main entry point for --provider flag resolution. Args: name: Provider name or alias. user_providers: The ``providers:`` dict from config.yaml (optional). custom_providers: The ``custom_providers:`` list from config.yaml (optional). Returns: ProviderDef if found, else None. Nr)PROVIDER_REGISTRYc:g|]}t|k|Sr)r).0_ridrs r" z)resolve_provider_full..s6''')$//9<<<<>   C  T T T T T T+//44E '''' 7'''# *++a//& 8"Z"/).u/E/K)L)L!&!9!?R5     D   " "D  ))^DD   )#~>>   *$0@AAK  HHHHHH"N9--  ^'!*"#   !       4s%A7C CC/6E'' E43E4)rrrrr)rrrrrrr)rrrr)rrrr)rtrrr)r)rtrrr)rrrr)rr)rrrtrrrrr)rrrrrrr)rrrrrr)rrrrrr)rrrrrrr)NN)rrrrrrrrr))r __future__rlogging dataclassesrtypingrrrrr utilsr r getLoggerrloggerrrnr rprrrrrrrrrrrrrrrrrrr rr!r"r(sY&#"""""!!!!!!33333333333333::::::::  8 $ $  $J- =='   J- --. J- MM%E   J- MM#"A!J-*--#5*+J-4#"/' 5J-@--"5/ AJ-L &4& MJ-Z==#$)/ [J-fmm;gJ-n&EoJ-v ==E'   wJ-@}}(AJ-H}}+?+ IJ-T}}&+UJ-\]]&"<]J-f--&.gJ-J-n ,oJ-v}}-wJ-~==7J-F mmGJ-N 0OJ-X==/YJ-b MM,   cJ-l==&mJ-v mm*wJ-@ ==#/'   AJ-J mm?*KJ-T mm*UJ-\ ,]J-d ]]7)eJ-n ==':'    oJ-z-A{J-D mm#<5* EJ-J-P}+5+  "M1*#]1}$mMJ-J-J-JJJJ`          &D lD  5 D  E D ED UD ED ED ED+DD +!D"k#D( 8)D*(+D,H-D./D4 5DD6$7D8'9D:!;D@ IADB9CDH\IDJ,KDP kQDR;SDXYDZ [D\-]Db(cDdeDfgDlJmDn :oDDDt -uDv}wD|}D~D@FADFGDLMDN iODP IQDRYSDT+UDV+WDX0YD^ -_D`MaDb}cDhiDDDjkDp HqDr8sDx!yDz"{D|'}D~%DD 9EDF9GDHiIDJ iKDPQDRwSDXYDZ[D`KaDb +cDDh   GDDDDDDDV$ $ M$N$' $ " $  m $ ;$$ $*$ $ $}$  $N$ 8!$.&.(* ))!!!!6:IIIIIIX    $1111&-6I7--(((($====*#####L&!!!!!L$$$$N V V V V V&LLLLb047;dddddddr!