:vjЯdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z mZmZddlmZddlmZmZmZddlmZddlZddlmZdd lmZdd lmZdd lm Z dd l!m"Z"ddl#Z#dd l#m$Z$ddl%m&Z&ddl'm(Z(ddl)m*Z*m+Z+ddl,m-Z-ddl.m/Z/ddl0m1Z1ddl2m3Z3m4Z4m5Z5m6Z6m7Z7m8Z8m9Z9erHddl:m;Z;ddlm?Z?ddl@mAZAddlBmCZCddlDmEZEddl,mFZFddlGmHZHddlImJZJddlKmLZLddlMmNZNdd lOmPZPdaQd!ZRdCd"ZSGd#d$ejZUGd%d&eUZVGd'd(eVZWGd)d*eVZXGd+d,eVejZZdDd-Z[ejZ\Gd.d/eVejZ]Gd0d1eWZ^Gd2d3ejZ_Gd4d5eVZ`Gd6d7eVZaGd8d9ejZbGd:d;eVZcGd<d=ejZdd>Zed?e_fd@e^fdAedfdBecfgZfy)Ez-Base Tornado handlers for the Jupyter server.) annotationsN) Awaitable CoroutineSequence) responses) TYPE_CHECKINGAnycast)urlparse)TemplateNotFound) is_hidden)web)app_log) Application) CallContext) get_sys_info)utcnow)allow_unauthenticated authorized)User)combine_translations)csp_report_uri) ensure_asyncfilefindorigin_matches_pat url_escapeurl_is_absolute url_path_joinurldecode_unix_socket_path)Logger)KernelSpecManager) EventLogger)TerminalManager)Future) AuthorizerIdentityProvider) ServerApp) ConfigManager)ContentsManager)AsyncMappingKernelManager)SessionManagercTttjtatS)zGet sys info as json.)_sys_info_cachejsondumpsrm/workspace/moltex-experiments/.pixi/envs/default/lib/python3.12/site-packages/jupyter_server/base/handlers.py json_sys_infor4Es **\^4 r2ctjr(tdtjjSt S)zGet the application log.r )r initializedr instancelogrr1r2r3r8r8Ms/ Hk2248899r2ceZdZdZeddZeddZddZeddZdddZ ddZ dd Z dd Z edd Z edd Zedd ZeddZeddZeddZeddZy)AuthenticatedHandlerz,A RequestHandler with an authenticated user.cNtd|jjddS)Nstrbase_url/r settingsgetselfs r3r=zAuthenticatedHandler.base_urlXs E4==,,Z=>>r2c d|jjdivrtd|jddSdjdd|jjdt |j t zgS)zThe default Content-Security-Policy header Can be overridden by defining Content-Security-Policy in settings['headers'] Content-Security-Policyheadersr<; zframe-ancestors 'self'z report-uri r)r@rAr joinrr=rrBs r3content_security_policyz,AuthenticatedHandler.content_security_policy\s| % (9(9)R(H Ht}}Y78QRS Syy(--##$4mDMMSa6bcd   r2c@i}d|d<|j|jjdi|j|d<|j D]\}} |j ||y#t $r&}|jjd|Yd}~Fd}~wwxYw)zSet the default headers.nosniffzX-Content-Type-OptionsrFrEz!Could not set default headers: %sN) updater@rArIitems set_header Exceptionr8 exception)rCrF header_namevaluees r3set_default_headersz(AuthenticatedHandler.set_default_headersos,5()t}}((B78-1-I-I)*#*--/ K  U3#2 ""7  sA.. B7BBcptjdtd|jj |S)NqJupyterHandler.login_handler is deprecated in 2.0, use JupyterHandler.identity_provider.  stacklevel)warningswarnDeprecationWarningidentity_providerget_cookie_namerBs r3 cookie_namez AuthenticatedHandler.cookie_names4     %%55d;;r2Ncztjdtd|jj ||||y)zForce a cookie clear.rVrWrX)pathdomainN)rZr[r\r]_force_clear_cookie)rCnamerarbs r3force_clear_cookiez'AuthenticatedHandler.force_clear_cookies;      224DQW2Xr2crtjdtd|jj |y)zClear a login cookie.rVrWrXN)rZr[r\r]clear_login_cookierBs r3rgz'AuthenticatedHandler.clear_login_cookies1      11$7r2c|jj}d|d}t|dr2tj|t dt d|jSt|)zGet the current user.z Calling `z{.get_current_user()` directly is deprecated in jupyter-server 2.0. Use `self.current_user` instead (works in all versions)._jupyter_current_userrWrXr<) __class____name__hasattrrZr[r\r ri RuntimeError)rCclsnamemsgs r3get_current_userz%AuthenticatedHandler.get_current_usersk..))y!H H  40 1 MM"  t99: :3r2cn|jjdk(ry|jj| S)zAsk my login_handler if I should skip the origin_check For example: in the default LoginHandler, if a request is token-authenticated, origin checking should be skipped. OPTIONST)requestmethodr]should_check_originrBs r3skip_check_originz&AuthenticatedHandler.skip_check_origins3 <<  ) +))==dCCCr2c8|jj|S)z'Have I been authenticated with a token?)r]is_token_authenticatedrBs r3token_authenticatedz(AuthenticatedHandler.token_authenticateds%%<|j}t|xr|dk7S)zIs a user currently logged in? anonymous) current_userbool)rCusers r3 logged_inzAuthenticatedHandler.logged_ins$  D0T[011r2cftjdtd|jjS)z6Return the login handler for this application, if any.rVrWrX)rZr[r\r]login_handler_classrBs r3 login_handlerz"AuthenticatedHandler.login_handlers1      %%999r2c.|jjS)z4Return the login token for this application, if any.)r]tokenrBs r3rzAuthenticatedHandler.tokens%%+++r2cBtd|jjS)zMay a user proceed to log in? This returns True if login capability is available, irrespective of whether the user is already logged in or not. r})r r]login_availablerBs r3rz$AuthenticatedHandler.login_availablesFD22BBCCr2cd|jvrXtjddddlm}||jj dd|j |jd<td |jj dS) N authorizeraThe Tornado web application does not have an 'authorizer' defined in its settings. In future releases of jupyter_server, this will be a required key for all subclasses of `JupyterHandler`. For an example, see the jupyter_server source code for how to add an authorizer to the tornado settings: https://github.com/jupyter-server/jupyter_server/blob/653740cbad7ce0c8a8752ce83e4d3c2c754b13cb/jupyter_server/serverapp.py#L234-L256rWrXr)AllowAllAuthorizerconfig)rr]r%)r@rZr[jupyter_server.authrrAr]r )rCrs r3rzAuthenticatedHandler.authorizersw t}} , MM  ?*<}}((48"&"8"8+DMM, ' L$--"3"3L"ABBr2cd|jvrMtjddddlm}||jj dd|jd<t d |jdS) Nr]aThe Tornado web application does not have an 'identity_provider' defined in its settings. In future releases of jupyter_server, this will be a required key for all subclasses of `JupyterHandler`. For an example, see the jupyter_server source code for how to add an identity provider to the tornado settings: https://github.com/jupyter-server/jupyter_server/blob/v2.0.0/jupyter_server/serverapp.py#L242rWrXrr&r)rr')r@rZr[rr'rAr )rCr's r3r]z&AuthenticatedHandler.identity_providersn dmm 3 MM3  =2B}}((482DMM- .& 6I(JKKr2returnr<rNone)r>N)rdr<rar<rb str | Nonerrrr})rr rr)rr%)rr')rk __module__ __qualname____doc__propertyr=rIrTr_rergrprvryrrrrrr]r1r2r3r:r:Us6 ??  $(<< Y 8 $ DCC22  : :,,DDCC,LLr2r:c eZdZdZed&dZed'dZed(dZed)dZed*dZ ed*dZ ed*dZ ed*d Z ed*d Z ed*d Zed+d Zed,d Zed-dZed.dZed/dZed0dZed1dZed*dZed2dZed3dZd4fd Zd4dZd5dZd2dZd6d7dZd3dZd4fd Zd3dZ ddd8fd Z!d!Z"d"Z#ed(d#Z$d&d$Z%d9d%Z&xZ'S):JupyterHandlerzwJupyter-specific extensions to authenticated handling Mostly property shortcuts to Jupyter-specific settings. cNtd|jjddS)Ndict[str, Any] | Nonerr?rBs r3rzJupyterHandler.configs!+T]]->->x-NOOr2ctS)z@use the Jupyter log by default, falling back on tornado's logger)r8rBs r3r8zJupyterHandler.logs u r2cNtd|jjdiS)z2User-supplied values to supply to jinja templates.dict[str, Any]jinja_template_varsr?rBs r3rz"JupyterHandler.jinja_template_vars#s$$dmm&7&78Mr&RSSr2c4td|jdS)NServerApp | None serverappr r@rBs r3rzJupyterHandler.serverapp(s& k(BCCr2cNtd|jjddS)z8The version hash to use for cache hints for static filesr< version_hashr?rBs r3rzJupyterHandler.version_hash0"E4==,,^R@AAr2ctd|jjdd}|r t|r|St |j |S)Nr< mathjax_urlr)r r@rArrr=)rCurls r3rzJupyterHandler.mathjax_url5s?5$--++M2>?oc*JT]]C00r2cNtd|jjddS)Nr<mathjax_configzTeX-AMS-MML_HTMLorMML-full,Safer?rBs r3rzJupyterHandler.mathjax_config<s"E4==,,-=?`abbr2cNtd|jjddS)Nr< default_urlrr?rBs r3rzJupyterHandler.default_url@s E4==,,]B?@@r2cNtd|jjddS)Nr< websocket_urlrr?rBs r3ws_urlzJupyterHandler.ws_urlDs E4==,,_bABBr2c|jjd|jjddt d|jjddS)NzUsing contents: %scontents_js_sourcezservices/contentsr<)r8debugr@rAr rBs r3rz!JupyterHandler.contents_js_sourceHsM  MM  24G H E4==,,-ACVWXXr2c4td|jdS)Nr+kernel_managerrrBs r3rzJupyterHandler.kernel_managerTs/?O1PQQr2c4td|jdS)Nr*contents_managerrrBs r3rzJupyterHandler.contents_managerX%t}}5G'HIIr2c4td|jdS)Nr,session_managerrrBs r3rzJupyterHandler.session_manager\s$dmm4E&FGGr2c4td|jdS)Nr#terminal_managerrrBs r3rzJupyterHandler.terminal_manager`rr2c4td|jdS)Nr!kernel_spec_managerrrBs r3rz"JupyterHandler.kernel_spec_managerds'7L)MNNr2c4td|jdS)Nr)config_managerrrBs r3rzJupyterHandler.config_managerhsOT]]3C%DEEr2c4td|jdS)Nr" event_loggerrrBs r3rzJupyterHandler.event_loggerlsM4==#@AAr2cNtd|jjddS)z"Normal Access-Control-Allow-Originr< allow_originrr?rBs r3rzJupyterHandler.allow_origintrr2cNtd|jjddS)z*Regular expression version of allow_originrallow_origin_patNr?rBs r3rzJupyterHandler.allow_origin_patys#L$--"3"34F"MNNr2cNtd|jjddS)z/Whether to set Access-Control-Allow-Credentialsr}allow_credentialsFr?rBs r3rz JupyterHandler.allow_credentials~s#FDMM--.A5IJJr2c"t|y)zAdd CORS headers, if definedN)superrTrCrjs r3rTz"JupyterHandler.set_default_headerss #%r2c|jr|jd|jn|jr;|j}|rt |j|rs|jd|n`|j rTd|j jdivr6|jd|jjjdd|jr|jddyy)zAdd CORS headers, if defined Now that current_user is async (jupyter-server 2.0), must be called at the end of prepare(), instead of in set_default_headers. Access-Control-Allow-OriginrFOriginrz Access-Control-Allow-CredentialstrueN) rrNr get_originrryr@rArsrFrrCorigins r3set_cors_headerszJupyterHandler.set_cors_headerss    OO94;L;L M  " "__&F,T-B-BFK =vF  % %*Gt}}O`O` rP + OO94<<;O;O;S;ST\^`;a b  ! ! OO> G "r2cDt|}|jdd|y)zpSet Content-Disposition: attachment header As a method to ensure handling of filename encoding zContent-Dispositionzattachment; filename*=utf-8''N)rrN)rCfilenameescaped_filenames r3set_attachment_headerz$JupyterHandler.set_attachment_headers* &h/  !+,<+= > r2cd|jjvr'|jjjd}|S|jjjdd}|S)NrzSec-Websocket-Origin)rsrFrArs r3rzJupyterHandler.get_origins[ t||++ +\\))--h7F \\))--.DdKF r2c6|jdk(s|jry|jjj d}|jjj d}||y|j }t |j}||k(ry|jrt|j|k(}n%|jrt|j|}nd}|s2|jjd|jj|||S)zCheck Origin for cross-site API requests, including websockets Copied from WebSocket with changes: - allow unspecified host/origin (e.g. scripts) - allow token-authenticated requests *THostrFz?Blocking Cross Origin API request for %s. Origin: %s, Host: %s)rrvrsrFrAlowerr netlocr}rrr8warningra)rCorigin_to_satisfy_tornadohostr origin_hostallows r3 check_originzJupyterHandler.check_origins    #t'='='?||##''/%%))(3 >T\v&--  $    **f45E  " "&t'<'?   %%/E  " "&t'<'GETHEADrz#Blocking Cross Origin request from .z$Blocking request from unknown origin) rlryr@rArr HTTPErrorrcheck_xsrf_cookiersrtrrF)rCrSrrorjs r3rz JupyterHandler.check_xsrf_cookiest45  # #t}}'8'89Mu'U $$&mmC((7,. .}} ||""o5))+"ll2266yAG CG9AND--S1q8, s2A,,C9?A0C44C9c|jjddrytjd|jj }|J|j d}|jdr|jdr|dd}t|}|jd r"tjj|rd}n" tj|}|j}|s1|j"j%d ||jj |S#t $r"||jjd d gv}Y_wxYw) zCheck the host header if remote access disallowed. Returns True if the request should continue, False otherwise. allow_remote_accessFTz^(.*?)(:\d+)?$[]r>local_hostnames localhostzBlocking request with non-local 'Host' %s (%s). If the server should be accessible at that name, set ServerApp.allow_remote_access to disable the check.)r@rArematchrsrgroup startswithendswithrosraexists ipaddress ip_address is_loopback ValueErrorr8r)rCrr check_hostraddrs r3rzJupyterHandler.check_host,s+ ==  2E :*DLL,=,=>   {{1~ ??3 DMM#$6":D05   %"''..*DE ) ++D1 (( HH  N !!  ! T 1 12Ck] SS TsD(EET)_redirect_to_logincKtjtj||js#dx|_|_t jdddlm }tj|j}|Jd}t|j|urI|jtk7r6t!j"dt$dt'|j}n7|jj)|}t+|t,r |d{}|}|x|_|_|j/|j0j2dvr|j5|j6j9d d s|j0j2s tdt;||j0j2j=}t;|d d sv|rt j>fd |S|j}|H|j@jCd |jDjdt jdtF|S7Iw)zPrepare a response.Nrrr&znOverriding JupyterHandler.get_current_user is deprecated in jupyter-server 2.0. Use an IdentityProvider class.rrX>rrrrallow_unauthenticated_accessF__allow_unauthenticatedc t|SN)rprepare)_rjs r3z(JupyterHandler.prepare..s uw7Hr2zCouldn't authenticate z connection)%rsetJUPYTER_HANDLERrr|rirrrr'inspect getmodulerptyper]rkrZr[r\rget_user isinstancerrrsrtrr@rAgetattrr authenticatedr8rrjrr)rCr r'mod_objr~_userrtrjs r3rzJupyterHandler.prepareVs  33T: =A AD  :--$ $8##D$9$9:"""  && '+; ;@P@PT\@\ MM2"   --/0D**33D9E%+# D :>=D6  <<  &@ @  " " $}}  !?G<<&&n$T4<<#6#6#<#<#>?F6#|jdj|S)z1Return the jinja template object for a given name jinja2_env)r@ get_template)rCrds r3r zJupyterHandler.get_templates}}\*77==r2c ~|j|j|j|}|jdi|S)zRender a template by name.r1)rLtemplate_namespacer render)rCrdnstemplates r3render_templatezJupyterHandler.render_templates8 $))*$$T*x$$$r2c tdid|jd|jd|jd|jdt |j ddd|j jd|j jd t|jd |jd td |jd |jd|jd|jd|j j#ddt%j&t)|j*j,j/dd|j0S)Nr=rrrallow_password_changeF auth_enabledrtoken_available static_urlsys_inforrxsrf_form_htmlr xsrf_tokenutf8nbjs_translationszAccept-Languagerr1)dictr=rrrrr]r)rr}rr+r4rrr-r.decoder/r0rrsrFrArrBs r3r"z!JupyterHandler.template_namespacesO ]] (( ;; nn  #*$*@*@BY[`"a  //<<  !22BB !,  #_  $66 **  .. ** --f5 #jj$T\\%9%9%=%=>OQS%TU&&'  r2c|jjsy|jjjjd} t j |}td |S#t $rU}|jjd||jjddtjdd|d}~wwxYw) z,Return the body of the request as JSON data.Nzutf-8z Bad JSON: %rzCouldn't parse JSONT)exc_infoizInvalid JSON in body of requestr) rsbodystripr2r/loadsrOr8rerrorrrr )rCr5modelrSs r3 get_json_bodyzJupyterHandler.get_json_bodys||  ||  &&(//8 OJJt$E $e,,  O HHNN>4 0 HHNN04N @--%FGQ N Os A-- C 6ACC c |jd}d}tj|d}|r1|d} |j|jz}t |dd}|r|}nd}||||d}|j dd  |jd |zfi|} |j| y #t$rYawxYw#t$r|jd i|} Y>wxYw) zrender custom error pagesr4rUnknown HTTP Errorrreasonz (unknown)) status_codestatus_messagemessagerP Content-Typez text/htmlz%s.htmlN)z error.html) rAr log_messageargsrOrrNr&r write) rCr>kwargsr4r@r?rPr=r$htmls r3 write_errorzJupyterHandler.write_errors::j)"{4HI   I #//)..@ Y"5F!'#I',"    4 <'4'' K(?F2FD 43  ,  <'4'';;D intrEr rr)(rkrrrrrr8rrrrrrrrrrrrrrrrrrrTrrrrrrrrr r&r"r:rG __classcell__rjs@r3rrs PPTTDDBB11 ccAACCYYRRJJHHJJOOFFBBBBOOKK&H,   -^,\4(T37<!D>%   . -$r2rcxeZdZdZd fd Zd dZd fd Zed fd ZdZ d dZ d fd Z e dd Z xZS) APIHandlerzBase class for API handlerscKt|d{|jstjdy7*w)zPrepare an API response.Nr)rrrrrrs r3rzAPIHandler.prepares<go  "--$ $# sAA+Ac |jddtj|d}d|i}|jd}|rG|d}t|tr#|j xs||d<|j |d<nd|d<d |d<d |d <|jjd |d|jtj|y ) z+APIHandler errors are JSON, not human pagesrAapplication/jsonr<r@r4rr=zUnhandled errorNr tracebackzwrote error: %r) rNrrArrrBr=r8rfinishr/r0)rCr>rEr@replyr4rSs r3rGzAPIHandler.write_errors (:;-- -AB w! ::j)  A!Y'#$==#;Gi "#((h#4i "&h&(k" *E),<= DJJu%&r2cb|jstjdt|S)zGet the login url.r)r|rrr get_login_urlrs r3rWzAPIHandler.get_login_urls+   --$ $w$&&r2c>djt|dg}|S)NrGzdefault-src 'none')rHrrI)rCcsprjs r3rIz"APIHandler.content_security_policys(ii/$    r2Tc|jr9t|ddr+|jddt|jd<yyyy)z$Update last_activity of API requestsriNno_track_activityapi_last_activity)_track_activityr get_argumentrr@rBs r3update_api_activityzAPIHandler.update_api_activity$sO  5t<!!"5t<D17DMM- .E= !r2c|j|jdd}|jd|t||i|S)zFinish an API response.set_content_typerRrA)r_poprNrrT)rCrCrErarjs r3rTzAPIHandler.finish.sE   "!::&8:LM (89w~t.v..r2cXd|jjdivr#|jd|jddn|jdd|jdd|jjjddj d}|rt d |Dr{|jrn|js*|jsd |jjdivr7|jd |jjjd dy y y y y ) zGet the options.zAccess-Control-Allow-HeadersrFz0accept, content-type, authorization, x-xsrftokenzAccess-Control-Allow-Methodsz&GET, PUT, POST, PATCH, DELETE, OPTIONSzAccess-Control-Request-Headersr,c3^K|]%}|jjdk('yw) authorizationN)r6r).0hs r3 z%APIHandler.options..Ps%TBSQAGGIOO%8BSs+-rrN) r@rArNrsrFsplitanyrrr)rCrCrErequested_headerss r3optionszAPIHandler.options6s  *T]]->->y"-M M OO. i()GH  OO.B  68`a!LL00445UWYZ``   TBSTT$$!!((0DMM4E4EiQS4TT OO94<<;O;O;S;ST\^`;a bU % U r2rrJr)rCr rEr rz Future[Any])rCr rEr rr)rkrrrrrGrWrrIr]r_rTrrmrLrMs@r3rOrOsP%% ','O:/%c%cr2rOc$eZdZdZdfd ZxZS) Template404zRender our 404 templatecfKt|d{tjd7w)zPrepare a 404 response.Nr)rrrrrs r3rzTemplate404.preparebs+gommC   s 1/1r)rkrrrrrLrMs@r3roro_s!!!r2roceZdZdZdZed fd Zeje d fd Z eje d dZ d fd Z d fd Z ddZdfd ZxZS)AuthenticatedFileHandlerz5static files should only be accessible when logged incontentsct|dzS)Nz; sandbox allow-scripts)rrIrs r3rIz0AuthenticatedFileHandler.content_security_policymsw.1JJJr2cB|jt| |S)z!Get the head response for a path.)rrheadrCrarjs r3rvzAuthenticatedFileHandler.headss   w|D!!r2c |jtjj|ddk(s|j ddr&|j ddd}|j |tjj||fi|S)zGet a file by path.r.ipynbdownloadNr>r) rrrasplitextr^rsplitrrStaticFileHandlerrA)rCrarErds r3rAzAuthenticatedFileHandler.getzs}  77  D !! $ 0D4E4EjRV4W;;sA&r*D  & &t ,$$((t>v>>r2c |jJ|jjd}d|vr|jdd\}}n|}|jdryt j |d}|dk(ryt |S)zGet the content type.r>rryzapplication/x-ipynb+jsonrz text/plainztext/plain; charset=UTF-8) absolute_pathr6r|r mimetypes guess_typerget_content_type)rCrarrdcur_mimerjs r3rz)AuthenticatedFileHandler.get_content_types!!---!!'', $;kk#q)GAtD == "- ++D1!4H<'2w/11r2cxt|d|jjvr|j ddyy)Set the headers.v Cache-Controlno-cacheN)r set_headersrs arguments add_headerrs r3rz$AuthenticatedFileHandler.set_headerss3  dll,, , OOOZ 8 -r2cyzCompute the etag.Nr1rBs r3 compute_etagz%AuthenticatedFileHandler.compute_etagr2ct|||}tjj |}|J|j j s