+ QV-jh/aR$t,0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t ^RI H t ^RI H t ^RIHt^RIHt^RIHtHtRtR tR R ltR s] !4tRs]^k]P6!]4tR RltRRltRRlt RRlt!!RR] 4t"] !4t#Rs$]^kRt%RRlt&RRlt'RRlt(RRlt)R R!lt*R"R#lt+R#)%zVContains a helper to get the token from machine (env variable, secret or config file).N)Path)Lock) TypedDict) constants) OIDCError)is_colab_enterpriseis_google_colabiic4V^8dQhR\R\RR/#)pathcontentreturnN)rstr)formats"l/Volumes/fast/ai/experiments/ui-tars-smoke/.venv/lib/python3.14/site-packages/huggingface_hub/utils/_auth.py __annotate__r#s!     s  t  c6VPPRR\R7\P!\ V4\P \P,\P,\4p\P!VR4;_uu_4pVPV4RRR4VP\4VPP\4R# +'giLG;i \\3dR#i;i)ziWrite content to file, restricting both the file and its parent directory to owner-only on POSIX systems.T)parentsexist_okmodewN)parentmkdir_SECRET_DIR_MODEosopenrO_WRONLYO_CREATO_TRUNC_SECRET_FILE_MODEfdopenwritechmodOSErrorNotImplementedError)r r fdfs&& r _write_secretr(#sKKdT8HI TBKK"**4rzzACT UB 2s  q    $% *+   ( )   sC0:4D0 D DDFc2V^8dQhR\R,/#r r Nr)rs"rrr8s3:rc\4;'g/\4;'g\4;'g \4#)am Get token if user is logged in. Note: in most cases, you should use [`huggingface_hub.utils.build_hf_headers`] instead. This method is only useful if you want to retrieve the token for other purposes than sending an HTTP request. If `HF_OIDC_RESOURCE` is set (Trusted Publishers, typically in CI), a short-lived token obtained via OIDC token exchange takes precedence. Otherwise the token is retrieved from the `HF_TOKEN` environment variable, then from the token file in the Hugging Face home folder. Returns None if user is not logged in. To log in, use [`login`] or `hf auth login`. Note: if `HF_OIDC_RESOURCE` is set but the OIDC token exchange fails, this raises instead of returning `None`, opting into OIDC is explicit, so a failure surfaces as a clear error rather than a silent fallback. Returns: `str` or `None`: The token, `None` if it doesn't exist. )_get_token_from_oidc_get_token_from_environment_get_token_from_file_get_token_from_google_colabrr get_tokenr28sA&  * * & ( * *  ! * * ( ) rc2V^8dQhR\R,/#r*r+)rs"rrrRs=$=$cDj=$rc \4'd\4'dR#\;_uu_4\'d\uuRRR4#^RIHp^RIHpTPR4p\T4sR s\uuRRR4# \d RRR4R#i;i TPd\P!R4RsLWTPd\P!R4RsLTd0p\P!R\!T4 R24RsRp?LRp?ii;i +'giR#;i) zGet token from Google Colab secrets vault using `google.colab.userdata.get(...)`. Token is read from the vault only once per session and then stored in a global variable to avoid re-requesting access to the vault. N)userdata)ErrorHF_TOKENz Access to the secret `HF_TOKEN` has not been granted on this notebook. You will not be requested again. Please restart the session if you want to be prompted again.a The secret `HF_TOKEN` does not exist in your Colab secrets. To authenticate with the Hugging Face Hub, create a token in your settings tab (https://huggingface.co/settings/tokens), set it as secret in your Google Colab and restart your session. You will be able to reuse this secret in all of your notebooks. Please note that authentication is recommended but still optional to access public models or datasets.z@ Error while fetching `HF_TOKEN` secret value from your vault: 'z'. You are not authenticated with the Hugging Face Hub in this notebook. If the error persists, please let us know by opening an issue on GitHub (https://github.com/huggingface/huggingface_hub/issues/new).T)rr_GOOGLE_COLAB_SECRET_LOCK_IS_GOOGLE_COLAB_CHECKED_GOOGLE_COLAB_SECRET google.colabr5google.colab.errorsr6 ImportErrorget _clean_tokenNotebookAccessErrorwarningswarnSecretNotFoundErrorr)r5 ColabErrortokenes rr0r0Rs-    3 5 5 # " $ #' # "  - ? (LL,E#/#6 <$( #] # "  # "  ++ ( MMQ  $( ++ ( MM{ $(  ( MMSTWXYTZS[\OO  $(  (G # " "swD1 B B$8D1 B!D1 B!!D1$)D. D1D.D.7D19D.>D.?%D)$D1)D..D11 E c2V^8dQhR\R,/#r*r+)rs"rrrs``S4Z`rc\\PPR4;'g \PPR44#)r7HUGGING_FACE_HUB_TOKEN)r?renvironr>r1rrr.r.s0  z2^^bjjnnE]6^ __rc2V^8dQhR\R,/#r*r+)rs"rrrscDjrc\\\P4P 44# \ dR#i;i)N)r?rr HF_TOKEN_PATH read_textFileNotFoundErrorr1rrr/r/s8D!8!89CCEFF s/2 AAc,a]tRt^toV3RltRtVtR#)_OidcTokenCachec><V^8dQh/S[;R&S[;R&S[;R&#)r resourcerE expires_at)rfloat)r __classdict__s"rr_OidcTokenCache.__annotate__s&M Jrr1N)__name__ __module__ __qualname____firstlineno____annotate_func____static_attributes____classdictcell__)rVs@rrQrQsrrQi,c2V^8dQhR\R,/#r*r+)rs"rrrs00cDj0rc \PPR4pV'gR#^RIHpHp\ ;_uu_4\P!4p\e<\R,V8Xd*V\R,8d\R,uuRRR4#\PPR4;'gRpVfV!4f \R4hV!WR 7pVR ,p\VPR R 44pVe^M\pRVRVRV\Wx, ^4,/s VuuRRR4# +'giR#;i) aGet a short-lived OIDC token in CI (Trusted Publishers). Enabled by setting `HF_OIDC_RESOURCE`, which scopes the token to a repo or user. The ID token is read from `HF_OIDC_ID_TOKEN` if available, or minted from a supported CI provider (e.g. GitHub Actions). Returns `None` when OIDC is not enabled. If enabled, any failure is raised explicitly rather than falling back silently. See `huggingface_hub._oidc` and https://huggingface.co/docs/hub/trusted-publishers. HF_OIDC_RESOURCEN)detect_provider oidc_loginrSrTrEHF_OIDC_ID_TOKENzHF_OIDC_RESOURCE is set but no OIDC id token is available: not running in a supported CI provider (github) and HF_OIDC_ID_TOKEN is not set. Set HF_OIDC_ID_TOKEN to the id token minted by your CI provider, or unset HF_OIDC_RESOURCE.)rS subject_token access_token expires_ini)rrJr>_oidcrbrc_OIDC_TOKEN_LOCKtime monotonic_OIDC_TOKEN_CACHErint_OIDC_REFRESH_MARGINmax) rSrbrcnowreresultrErgmargins rr-r-szz~~01H 3  nn  )!*-9' 55$W-   '9:BBd  _%6%>O  XK~&L$78 $/5I  U #J$7 ;;  =    sAD>%D>?A4D>> E cFV^8dQhR\\\3,/#)r r dictr)rs"rrrs4S>rc\\P4pVP4'g/p\P !4pVP V4VP4Uu/uFq3VPVR4bK ppV#uupi \Pd&p\PRT 24/pRp?T#Rp?ii;i)a) Returns the parsed INI file containing the access tokens. The file is located at `HF_STORED_TOKENS_PATH`, defaulting to `~/.cache/huggingface/stored_tokens`. If the file does not exist, an empty dictionary is returned. Returns: `dict[str, str]` Key is the token name and value is the token. hf_tokenz"Error parsing stored tokens file: N) rrHF_STORED_TOKENS_PATHexists configparser ConfigParserreadsectionsr>r6loggererror) tokens_path stored_tokensconfig token_namerFs rget_stored_tokensrsy667K       & & (F K Z`ZiZiZklZkJVZZ J%GGZk l  m    9!=> s*#B+B B BC $CC cJV^8dQhR\\\3,RR/#)r rr Nrt)rs"rrrs"66tCH~6$6rct\\P4p\P!4p\ VP 44F-pVPV4VPVRW,4K/ \P!4pVPV4\WP44R#)z Saves the given configuration to the stored tokens file. Args: stored_tokens (`dict[str, str]`): The stored tokens to save. Key is the token name and value is the token. rwN)rrrxrzr{sortedkeys add_sectionsetioStringIOr"r(getvalue)rstored_tokens_pathrrbufs& r_save_stored_tokensrsi==> & & (F]//12 :& :z=+DE3 ++-C LL$lln5rc>V^8dQhR\R\R,/#)r rr Nr+)rs"rrr s33333:3rcH\4pW9dR#\W,4#)z Get the token by name. Args: token_name (`str`): The name of the token to get. Returns: `str` or `None`: The token, `None` if it doesn't exist. N)rr?)rrs& r_get_token_by_namer s#&'M&  1 22rc4V^8dQhR\R\RR/#)r rErr Nr+)rs"rrrs&MMsMMMrc\\P4p\4pWV&\ V4\ P RV RV 24R#)z Save the given token. If the stored tokens file does not exist, it will be created. Args: token (`str`): The token to save. token_name (`str`): The name of the token. z The token `z` has been saved to N)rrrxrrr~info)rErrrs&& r _save_tokenrsFy667K%'M %* & KK+j\)=k]KLrcLV^8dQhR\R,R\R,/#)r rENr r+)rs"rrr-s&EEd EsTzErcVfR#VPRR4PRR4P4;'gR#)zmClean token by removing trailing and leading spaces and newlines. If token is an empty string, return None. N  )replacestrip)rEs&rr?r?-s;  } ==r " * *4 4 : : < D DDrcV^8dQh/^\9d\R,;R&^\9d\R,;R&#)r Nr:rl)__conditional_annotations__rrQ)rs"rrrs;\\J('cDj'K]r10?T)0s]r)-r__doc__rzrloggingrrjrApathlibr threadingrtypingrrrerrorsr_runtimerrr rr(r9r8r: getLoggerrXr~r2r0r.r/rQrirlrnr-rrrrr?r)rs@rrs]  :  ! F#''   8 $4=$@` i6,000f,6*3$M$Er