+ j<@Rt^RIt^RIt^RIt^RIt^RIt^RIt^RIHtH t H t ^RI H t ^RI HtHt^RIHt^RIHtHt]P*!]4t^tRtR6tRtR ] 2tR tR7tR tR t ]PB!R 4t"]PB!R4t#RRlt$] !RR7!RR44t%] !RR44t&] !RR44t'RRlt(RRlt)RRlt*RR lt+R!R/R"R#llt,R8R$R%llt-R&R'lt.R(R)lt/R*^R+]/R,R-llt0R.R/lt1R0R1/R2R3llt2R4R5lt3R#)9z?Best-effort local cache for SandboxPool hosts (host/pool mode).N)asdict dataclassfieldPath)AnyList) constants) WeakFileLockloggingg@izhf-sandbox-pool-cache/vi@Bl(\iz^[A-Za-z0-9._-]{1,128}$z^[0-9a-fA-F]{16,128}$c0V^8dQhR\R\/#)partsreturnstr)formats"_/home/luca/screen-checking/.venv/lib/python3.14/site-packages/huggingface_hub/_sandbox_cache.py __annotate__rDs99C9C9cRP\.VO54p\P!VP 44P 4#)zAShort, stable digest of `parts` (which are joined unambiguously).)join_DIGEST_PREFIXhashlibsha256encode hexdigest)rmaterials* r_digestrDs7{{N3U34H >>(//+ , 6 6 88rT)frozencha]tRt^JtoRt]V3RlRl4t]V3RlRl4tV3Rlt Rt Vt R#) CacheContextaLThe security context a cache entry belongs to. A cached entry is not just data: the fast path rebuilds a host transport from it and sends it the HF bearer plus the derived host token. So it may only ever be read back by the same *endpoint*, *credential* and *namespace* that wrote it -- anything else is a plain cache miss, which is what the docs promise and what keeps a `connect(namespace=...)` from being served hosts that belong to another namespace. `principal` is an opaque, stable id for the credential; the token itself is never stored nor used as a key (see `for_credential`). c><V^8dQhRS[RS[RS[R,RR/#)r endpointtoken namespaceNrr"r)r __classdict__s"rrCacheContext.__annotate__]s4 g g gS gS4Z gTb grc :V!V\RV4R,VR7#)a Build the context of a given HF token, identified by its fingerprint. The fingerprint is a local computation, which is what keeps a cache hit at zero round-trips -- resolving the credential to a user id would cost a `whoami` and defeat the purpose of the cache. It is derived from the token but does not contain it: only the digest is ever written to disk. A rotated or swapped credential therefore reads as a different principal and gets a cache miss (the cold path, which always works), rather than someone else's hosts. principal:N N)r$r*r&)r)clsr$r%r&s&$$$rfor_credentialCacheContext.for_credential\s H U0KC0P\effrc <V^8dQhRS[/#r rr)rr's"rrr(ks\\S\rc |\RVPVPVP;'gR4R,#)zHDigest of the whole context; the name of the cache subdirectory it owns.context:NN)rr$r*r&)selfs&rkeyCacheContext.keyjs0y$--AUAUSUVWZ[[rcL<V^8dQh/S[;R&S[;R&S[R,;R&#)r r$r*Nr&r)rr's"rrr(Js.MN Tz!rN) __name__ __module__ __qualname____firstlineno____doc__ classmethodr-propertyr6__annotate_func____static_attributes____classdictcell__r's@rr"r"Js>   g g\\Crr"c4a]tRt^ptoRtRtV3RltRtVtR#) CachedHosta3A single host Job of a pool, as last seen by some process. `base_url` + `nonce` are everything needed to rebuild the in-job server transport (`_SandboxServer`) without an `inspect_job` round-trip: the per-sandbox auth token is re-derived from the user's HF token and `nonce` (see `_derive_sandbox_token`). cn<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&S[;R&#)r job_idownerbase_urlnoncecapacitylive updated_at)rintfloat)rr's"rrCachedHost.__annotate__psZ K JM JM Irr9N) r:r;r<r=r>rOrArBrCrDs@rrFrFpsJrrFcRa]tRt^toRtRtRt]!]R7t ] t Rt V3Rlt RtVtR#) PoolCachezJCached view of one pool: its config (to boot new hosts) + its known hosts.r3)default_factoryrGc<V^8dQh/S[;R&S[;R&S[;R&S[;R&S[R,;R&S[R,;R&S[R,;R&S[;R &S[;R &S[S[,;R &S[;R &S[;R &#)r pool_idimageflavorsandboxes_per_hostN max_hosts idle_timeoutr&r$r2hostsversionrO)rrPrrFrQ)rr's"rrPoolCache.__annotate__sL  J  K Tz*Tz  9 !!"#rr9N)r:r;r<r=r>r$r2rlistr]_CACHE_VERSIONr^rOrArBrCrDs@rrTrTs/THG#D9E!GJ#rrTc$V^8dQhR\/#r0r)rs"rrrs99D9rcP\\P4R, R, #)sandboxpools)rr HF_HOMEr9rr _pools_dirrgs  !! "Y . 88rc0V^8dQhR\R\/#)r rWrr)rs"rrrsCCrca\;QJdV3RlR4F 'gK RM RM!V3RlR44'gSR9d\RS: 24hS#)zAReturn `pool_id` if it is safe to use as a file name, else raise.c3,<"TF qS9xK R#5iNr9).0crWs& r !_check_pool_id..s 5!4A'+B*C5(I IIrcJV^8dQhR\R\R\R,/#)r rWr2rN)rr"rT)rs"rrrs&S<ID  D% dead_host_idscV^8dQhR\R\R\R\R\R\R,R\R,R \\,R \ \,R,R R/ #) r rWr2rXrYrZr[Nr\r]rr)rr"rPrrFset)rs"rrrs-Q-Q -Q-Q  -Q  -Q  -QTz-Q*-Q  -Qs8d?-Q -QrcT;'g \4p \W4p \V P4\ \ V 4R,\ R7;_uu_4\W4p V 'd V PM.U u/uFqPV bK p p VFpWVP&K V FpV PVR4K \VVVVVVVPVPVP\V P!44\"P"!4R7 p\%V V4RRR4R#uup i +'giR#;i \&d(p\(P+RT: RT 24Rp?R#Rp?ii;i)aMerge `hosts` into the cache for `pool_id` in `context` (best-effort, never raises). Concurrency-safe: under a file lock, the on-disk hosts are read, then `hosts` are upserted by `job_id` and `dead_host_ids` removed, so a process only adds/updates what it learned and never drops hosts another process discovered. The result is written atomically. The pool config is refreshed from the arguments. z.lock)timeoutN) rWrXrYrZr[r\r&r$r2r]rOz'Could not write sandbox pool cache for r)rrz_ensure_private_dirparentr r _LOCK_TIMEOUTrr]rIrrTr&r$r6r`valuestime _atomic_writerrr)rWr2rXrYrZr[r\r]rdeadrexistingrmergedhostrIrrs&$$$$$$$$ rsave_pool_cachersE&  ! !CEDQw0DKK( #d)g-} E E&w8H>FHNNB,NP,Nahhk,NFP&*t{{# 64(#5#)!++ )) 6==?+99; E $ &)F EPF E E* Q >wkA3OPPQsIA E$EEBE6EE E EE F $FF cBV^8dQhR\R\R,RR/#)r rWr2Nr)rr")rs"rrrs+PPsP\D-@PDPrclVe\W4PRR7R#\V4 R2p\4P 4F3pVP 4'gKW2, PRR7K5 R# \ d'p\PRT RT 24Rp?R#Rp?ii;i)a8Remove the cache file(s) for `pool_id` (best-effort, never raises). Without a `context`, the pool's entry is removed from *every* context: deleting a pool is the one operation for which over-deleting is the safe direction (the cache is disposable), and the caller may not know which credential wrote the entry. NT missing_okrxz(Could not delete sandbox pool cache for r) rzunlinkrurgiterdiris_dirrrr)rWr2filename directoryrs&& rdelete_pool_cachers P   G - 4 4 4 E $W-.e4#--/I!!%--->0 P ?y1#NOOPs"B->!>  I&+rc4V^8dQhR\R\RR/#)r rrrN)rrT)rs"rrrs!Y4rc\P!VPVPR,RR7wr#\P !VRRR7;_uu_4p\ P!\V4V^R7RRR4\P!W04R# +'giL(;i \d\T4PR R 7hi;i) aZWrite the cache via a temp file + `os.replace` so readers never see a partial file. `mkstemp` gives the temp file an unpredictable name and mode `0600` regardless of the umask (which `os.replace` then carries over to the final file), so no other user can read -- or pre-create and win a race on -- the host URLs and nonces on their way to disk. rrz.tmp)dirprefixsuffixwr~r)indentNTr) tempfilemkstemprnamerfdopenrdumprreplace BaseExceptionrr)rrfdtmprs&& rrrs4;;tyy3vVGB YYr3 1 1Q IIfUmQq 12 32 1  S D) s#!B/#B<B/ B, 'B//(CminimummaximumcHV^8dQhR\R\R\R\/#)r valuerrr)rrPbool)rs"rrr#s.bbSbcbbTbrc\V\4;'d3\V\4'*;'dYu;8*;'dV8*#u#)zJWhether `value` is a plausible count. `bool` is an `int`, but not a count.) isinstancerPr)rrrs&$$r _is_countr#s; eS ! a a*UD*A&A a agFaFaZaFaaFaarc0V^8dQhR\R\/#)r rrrr)rs"rrr(sllllrc\V\\34;'d8\V\4'*;'d^Tu;8*;'d \8*#u#)rrPrQr_MAX_TIMESTAMP)rs&r _is_timestampr(sB ec5\ * k k:eT3J/J k kqTYOkOk]kOkkOkkr allow_emptyFc<V^8dQhR\R\R\/#)r rrrr)rs"rrr,s&aaCaa$arc\V\4;'d3T;'g\V4^8;'d\V4\8*#r)rrlen_MAX_STR)rrs&$r_is_textr,s9 eS ! ` `{'D'Dc%j1n ` `#e*X`J``rc VV^8dQhR\R\R\R\R,/#)r rrWr2rN)rTrr")rs"rrr0s///I/3//RUX\R\/rcbVPVP8wdR#VPVP8wdRVP: RVP: 2#VPVP8wdRVP: RVP: 2#VPV8wdRVP: RV: 2#\ VP 4'd\ VP4'gR#\VP^R7'gRVP: 2#VPe.\VP^R7'gR VP: 2#VPe2\VP\R 7'gR VP: 2#\VP4'gR VP: 2#\VP \"4'gR#VP EFp\$P'\VP(\*4'd VP(MR4'gRVP(: R2u#\$P'\VP,\*4'd VP,MR4'g RVP( RVP,: 2u#\ VP.4'gRVP( R2u#\VP0\*4'd&\2P'VP04'gRVP( R2u#\VP44'd\VP64'gRVP( R2u#\VP4'dEKRVP( R2u# R #)aOWhy this cache file must not be used, or `None` if it may be. Two jobs. First, the entry has to belong to the caller's security context -- same endpoint, same credential, same namespace -- which is what makes a cross-namespace or cross-principal hit a miss instead of a confidentiality bug. Second, a schema check. `dataclass` does not enforce types, so a well-shaped file with `"capacity": "50"` parses happily and only blows up much later, on `host.capacity - host.live`, as an uncaught `TypeError` in the middle of `create()`. Validating here turns that into the documented cache miss. z@it was written for a different endpoint, credential or namespacezit names endpoint z, not zit names namespace zit names pool z its image/flavor are not strings)rz0its sandboxes_per_host is not a positive count: Nz'its max_hosts is not a positive count: )rz/its idle_timeout is not a duration in seconds: z#its updated_at is not a timestamp: zits hosts are not a listr3zhost z is not a plausible job idz names a non-namespace owner: z has no URLz has no usable noncez& has a non-numeric capacity/live countz has no usable timestamp)r2r6r$r&rWrrXrYrrZr[r\ _MAX_SECONDSrrOrr]r` _JOB_ID_REmatchrIrrJrKrL _NONCE_RErMrN)rrWr2rs&$$ rrr0s }} #Q ~~)))#ENN#5VGO>O=RSS }} 0wkBB EKK (>(>1 U--q 9 9A%BZBZA]^^ "9U__a+P+P88KLL %i8J8JT`.a.a@ASAS@VWW )) * *4U5E5E4HII ekk4 ( () z$++s/K/K QSTT4;;/)CD DjS.I.I rRR4;;-'Edjj^T T &&4;;-{3 3$**c**)//$**2M2M4;;-';< <''y/C/C4;;-'MN NT__--4;;-'?@ @ riirk)4r>rrrrerr dataclassesrrrpathlibrtypingrrr3r utilsr r get_loggerr:rrarHOST_TRUST_TTLrr _MAX_COUNTrrrcompilerrrr"rFrTrgrurzrrrrrrrrrr9rrrscF  00(   H %   +>*:; #  ZZ2 3  JJ/ 0 9  $"\"\"\J  "  &9J 6-Q&*-Q`P& '"bAbjb laa/r