3jh/%SrSSKrSSKrSSKrSSKrSSKrSSKrSSKJr SSK J r SSK J r SSK Jr SSKJr S S KJrJr S rS rS \S\SS4SjrSq\ "5rSq\S-\S'\R8"\5rS\S-4SjrS\S-4Sjr S\S-4Sjr!S\S-4Sjr""SS\ 5r#\ "5r$Sq%\#S-\S'Sr&S\S-4Sjr'S\(\\44Sjr)S\(\\4SS4Sjr*S\S\S-4S jr+S!\S\SS4S"jr,S!\S-S\S-4S#jr-g)$zVContains a helper to get the token from machine (env variable, secret or config file).N)Path)Lock) TypedDict) constants) OIDCError)is_colab_enterpriseis_google_colabiipathcontentreturncURRSS[S9 [R"[ U5[R [R-[R-[5n[R"US5nURU5 SSS5 UR[5 URR[5 g!,(df  ND=f![[4a gf=f)ziWrite content to file, restricting both the file and its parent directory to owner-only on POSIX systems.T)parentsexist_okmodewN)parentmkdir_SECRET_DIR_MODEosopenstrO_WRONLYO_CREATO_TRUNC_SECRET_FILE_MODEfdopenwritechmodOSErrorNotImplementedError)r r fdfs U/home/wildlama/miniconda3/lib/python3.13/site-packages/huggingface_hub/utils/_auth.py _write_secretr&#sKKdT8HI TBKK"**4rzzACT UB 2s q    $% *+   ( )   s C'4C- C*-D?DF_GOOGLE_COLAB_SECRETc|[5=(d, [5=(d [5=(d [5$)am Get token if user is logged in. Note: in most cases, you should use [`huggingface_hub.utils.build_hf_headers`] instead. This method is only useful if you want to retrieve the token for other purposes than sending an HTTP request. If `HF_OIDC_RESOURCE` is set (Trusted Publishers, typically in CI), a short-lived token obtained via OIDC token exchange takes precedence. Otherwise the token is retrieved from the `HF_TOKEN` environment variable, then from the token file in the Hugging Face home folder. Returns None if user is not logged in. To log in, use [`login`] or `hf auth login`. Note: if `HF_OIDC_RESOURCE` is set but the OIDC token exchange fails, this raises instead of returning `None`, opting into OIDC is explicit, so a failure surfaces as a clear error rather than a silent fallback. Returns: `str` or `None`: The token, `None` if it doesn't exist. )_get_token_from_oidc_get_token_from_environment_get_token_from_file_get_token_from_google_colabr% get_tokenr/8s2&  * & ( *  ! * ( ) r.c^[5(a[5(ag[ [(a[sSSS5 $SSKJn SSKJn URS5n[U5qS q[sSSS5 $![a SSS5 gf=f!URa [R"S5 SqNSURa [R"S5 SqN|Ua/n[R"S[!U5S 35 SqSnANSnAff=f!,(df  g=f) zGet token from Google Colab secrets vault using `google.colab.userdata.get(...)`. Token is read from the vault only once per session and then stored in a global variable to avoid re-requesting access to the vault. Nr)userdata)ErrorHF_TOKENz Access to the secret `HF_TOKEN` has not been granted on this notebook. You will not be requested again. Please restart the session if you want to be prompted again.a The secret `HF_TOKEN` does not exist in your Colab secrets. To authenticate with the Hugging Face Hub, create a token in your settings tab (https://huggingface.co/settings/tokens), set it as secret in your Google Colab and restart your session. You will be able to reuse this secret in all of your notebooks. Please note that authentication is recommended but still optional to access public models or datasets.z@ Error while fetching `HF_TOKEN` secret value from your vault: 'z'. You are not authenticated with the Hugging Face Hub in this notebook. If the error persists, please let us know by opening an issue on GitHub (https://github.com/huggingface/huggingface_hub/issues/new).T)r r _GOOGLE_COLAB_SECRET_LOCK_IS_GOOGLE_COLAB_CHECKEDr' google.colabr1google.colab.errorsr2 ImportErrorget _clean_tokenNotebookAccessErrorwarningswarnSecretNotFoundErrorr)r1 ColabErrortokenes r%r,r,Rs'    3 5 5 # $ #' # "  - ? (LL,E#/#6 <$( #] # "  # "  ++ ( MMQ  $( ++ ( MM{ $(  ( MMSTWXYTZS[\OO  $(  (G # "skD A<B+D< BDBD(D<D>'D%D'D,%DDDD D,c[[RRS5=(d [RRS55$)Nr3HUGGING_FACE_HUB_TOKEN)r:renvironr9r-r.r%r*r*s-  z2^bjjnnE]6^ __r.c[[[R5R 55$![ a gf=f)N)r:rr HF_TOKEN_PATH read_textFileNotFoundErrorr-r.r%r+r+s8D!8!89CCEFF s /2 ??c4\rSrSr%\\S'\\S'\\S'Srg)_OidcTokenCacheresourcer@ expires_atr-N)__name__ __module__ __qualname____firstlineno__r__annotations__float__static_attributes__r-r.r%rJrJsM Jr.rJ_OIDC_TOKEN_CACHEi,c>[RRS5nU(dgSSKJnJn [  [R"5n[b,[SU:XaU[S:a[SsSSS5 $[RRS5=(d SnUcU"5c [S 5eU"XS 9nUS n[URS S 55nUbSO[nUUU[Xx- S5-S.q UsSSS5 $!,(df  g=f)aGet a short-lived OIDC token in CI (Trusted Publishers). Enabled by setting `HF_OIDC_RESOURCE`, which scopes the token to a repo or user. The ID token is read from `HF_OIDC_ID_TOKEN` if available, or minted from a supported CI provider (e.g. GitHub Actions). Returns `None` when OIDC is not enabled. If enabled, any failure is raised explicitly rather than falling back silently. See `huggingface_hub._oidc` and https://huggingface.co/docs/hub/trusted-publishers. HF_OIDC_RESOURCENr)detect_provider oidc_loginrLrMr@HF_OIDC_ID_TOKENzHF_OIDC_RESOURCE is set but no OIDC id token is available: not running in a supported CI provider (github) and HF_OIDC_ID_TOKEN is not set. Set HF_OIDC_ID_TOKEN to the id token minted by your CI provider, or unset HF_OIDC_RESOURCE.)rL subject_token access_token expires_inir)rLr@rM)rrDr9_oidcrXrY_OIDC_TOKEN_LOCKtime monotonicrUrint_OIDC_REFRESH_MARGINmax) rLrXrYnowr[resultr@r]margins r%r)r)szz~~01H 3 nn  )!*-9' 55$W-   '9:Bd  _%6%>O  XK~&L$78 $/5I J$7 ;;  =   s?D?BD Dc[[R5nUR5(d0n[R "5nUR U5 UR5Vs0sHo3URUS5_M nnU$s snf![Ra%n[RSU35 0nSnAU$SnAff=f)a) Returns the parsed INI file containing the access tokens. The file is located at `HF_STORED_TOKENS_PATH`, defaulting to `~/.cache/huggingface/stored_tokens`. If the file does not exist, an empty dictionary is returned. Returns: `dict[str, str]` Key is the token name and value is the token. hf_tokenz"Error parsing stored tokens file: N) rrHF_STORED_TOKENS_PATHexists configparser ConfigParserreadsectionsr9r2loggererror) tokens_path stored_tokensconfig token_namerAs r%get_stored_tokensrvsy667K       & & (F K Z`ZiZiZklZkJVZZ J%GGZk l  m    9!=> s*#B*B B BC#CCrscj[[R5n[R"5n[ UR 55H)nURU5 URUSX5 M+ [R"5nURU5 [XR55 g)z Saves the given configuration to the stored tokens file. Args: stored_tokens (`dict[str, str]`): The stored tokens to save. Key is the token name and value is the token. riN)rrrjrlrmsortedkeys add_sectionsetioStringIOrr&getvalue)rsstored_tokens_pathrtrubufs r%_save_stored_tokensrsi==> & & (F]//12 :& :z=+DE3 ++-C LL$lln5r.ruc<[5nX;ag[X5$)z Get the token by name. Args: token_name (`str`): The name of the token to get. Returns: `str` or `None`: The token, `None` if it doesn't exist. N)rvr:)rurss r%_get_token_by_namer s#&'M&  1 22r.r@c[[R5n[5nXU'[ U5 [ R SUSU35 g)z Save the given token. If the stored tokens file does not exist, it will be created. Args: token (`str`): The token to save. token_name (`str`): The name of the token. z The token `z` has been saved to N)rrrjrvrrpinfo)r@rurrrss r% _save_tokenrsFy667K%'M %* & KK+j\)=k]KLr.c|UcgURSS5RSS5R5=(d S$)zmClean token by removing trailing and leading spaces and newlines. If token is an empty string, return None. N  )replacestrip)r@s r%r:r:-s8  } ==r " * *4 4 : : < DDr.).__doc__rlr|loggingrr`r<pathlibr threadingrtypingrrrerrorsr_runtimer r rrrr&r5r4r'rR getLoggerrNrpr/r,r*r+rJr_rUrcr)dictrvrrrr:r-r.r%rs]  :    s  t  ! F#'cDj'   8 $3:4=$cDj=$@`S4Z` cDji6,0?T)00cDj0f4S>,6tCH~6$6*3333:3$MsMMM$Ed EsTzEr.