mxiZSUdZddlmZddlZddlZddlmZddlmZm Z m Z ddl m Z ddl mZddlmZmZdd lmZdd lmZdd lmZdd lmZmZmZdd lmZmZmZddl m!Z!ddl"m#Z#m$Z$m%Z%m&Z&er&ddl'm(Z(m)Z)ddl*m+Z+ddl,m-Z-ddl.m/Z/ddl0m1Z1ddl2m3Z3ee4Z5de6d<dZ7de6d< d&dZ8d'dZ9d(dZ:d)dZ;d*dZ< d+dZ=Gd d!eZ>Gd"d#eZ?d,d$Z@d-d%ZAy).z,WebSocket handling for the Starlette server.) annotationsN)suppress) TYPE_CHECKINGAnyFinal)urlparse)config)get_cookie_with_chunksget_expose_tokens_config) get_logger)BackMsg)serialize_forward_msg) ClientContext SessionClientSessionClientDisconnectedError)get_cookie_secretis_url_from_allowed_originsis_xsrf_enabled)starlette_app_utils)TOKENS_COOKIE_NAMEUSER_COOKIE_NAMEWEBSOCKET_MAX_SEND_QUEUE_SIZEXSRF_COOKIE_NAME)IterableMapping)Headers) BaseRoute) WebSocket) ForwardMsg)Runtimer_LOGGERz_stcore/stream_ROUTE_WEBSOCKET_STREAMc|jd}|sy|jdDcgc]}|j}}|r |dr|dnd}t|dk\r |dr|dnd}t|dk\r |dr|dnd}|||fScc}w) aParse the Sec-WebSocket-Protocol header. Returns a tuple of (selected_subprotocol, xsrf_token, existing_session_id). The subprotocol header is repurposed to pass tokens from client to server: - First entry: subprotocol to select (e.g., "streamlit") - Second entry: XSRF token for authentication validation - Third entry: existing session ID for reconnection Positional semantics are preserved: empty/whitespace entries are treated as None rather than being filtered out (which would shift positions). zsec-websocket-protocol)NNN,rN)getsplitstriplen)headersrawvalueentriesselected xsrf_tokenexisting_sessions i/home/htdocs/ttos/venv/lib/python3.12/site-packages/streamlit/web/server/starlette/starlette_websocket.py_parse_subprotocolsr4@s ++. /C +.))C.9u{{}9G9$wqzH"7|q0WQZTJ%(\Q%671:wqz4 Z!1 11 :sBci}tjd}t|ts|S|j D]"\}}|j |}|r|dnd||<$|S)z'Extract user info from trusted headers.zserver.trustedUserHeadersrN)r get_option isinstancedictitemsgetlist)r, user_infomapping header_nameuser_keyvaluess r3_gather_user_infor@[sj.0I ;? s$C0DDc@tdfd }t||S)aGet a signed cookie value, reconstructing from chunks if necessary. Large cookies may be split into multiple chunks (e.g., `_streamlit_user`, `_streamlit_user__1`, `_streamlit_user__2`) due to browser cookie size limits. This function handles both single and chunked cookies transparently. Parameters ---------- cookies Dictionary of cookie names to their string values. cookie_name The base name of the cookie to retrieve. Returns ------- bytes | None The decoded (unsigned) cookie value, or None if the cookie doesn't exist or has an invalid signature. Notes ----- Uses itsdangerous signing which is NOT compatible with Tornado's format. Cookies signed by Tornado will fail to decode. c|j|}|y|jd}tj||S)NrJ)r(rLrrM)name raw_valuerQcookiesrPs r3get_single_cookiez9_get_signed_cookie_with_chunks..get_single_cookies?KK%   '' 2 "66vt\RRrA)rfrKreturn bytes | None)rr )rh cookie_namerirPs` @r3_get_signed_cookie_with_chunksrms#6 FS ""3[ AArAcNeZdZdZddZeddZed dZed dZy) StarletteClientContexta$Starlette-specific implementation of ClientContext. Captures headers, cookies, and client info from the initial WebSocket handshake. Values are cached at construction time since they represent the initial request context and should not change during the connection lifetime. ct|jj|_t |j |_|j}|r|j|_ yd|_ y)N) listr,r9_headersr8rh_cookiesclientrE _remote_ip)self websocketrts r3__init__zStarletteClientContext.__init__sM/3I4E4E4K4K4M/N (,Y->->(? !!5;fkkrAc|jS)z$All headers as (name, value) tuples.)rrrvs r3r,zStarletteClientContext.headers}}rAc|jS)z#Cookies as a name-to-value mapping.)rsrzs r3rhzStarletteClientContext.cookiesr{rAc|jS)zThe client's remote IP address.)rurzs r3 remote_ipz StarletteClientContext.remote_ipsrANrwrrjNone)rjzIterable[tuple[str, str]])rjzMapping[str, str])rj str | None) __name__ __module__ __qualname____doc__rxpropertyr,rhr~rAr3rorosIF rArocBeZdZdZddZd dZd dZed dZd dZ y) StarletteSessionClientaWebSocket client for Starlette that implements the SessionClient interface. This class bridges the synchronous `write_forward_msg` calls from the Streamlit runtime to the asynchronous WebSocket send operations. It uses an internal queue and a background sender task to avoid blocking the calling thread. Parameters ---------- websocket The Starlette WebSocket connection to send messages through. c||_t||_tjt |_tj|jd|_ tj|_ y)N)maxsizezstarlette-ws-send)rf) _websocketro_client_contextasyncioQueuer _send_queue create_task_sender _sender_taskEvent_closed)rvrws r3rxzStarletteSessionClient.__init__s\#5i@2912 $// LLN!4 }} rAcvKddlm} |jjd{}|jj |d{F7(7#|$rYn#t $rtjdYnwxYw|jjy#|jjwxYww)aBackground task that drains the send queue and writes to the WebSocket. This task runs continuously, waiting for messages on the queue and sending them to the WebSocket. It decouples message generation (sync) from network I/O (async), allowing non-blocking sends from the runtime thread. The task terminates when the WebSocket disconnects or an error occurs, at which point it sets the closed flag to signal the client is no longer usable. rWebSocketDisconnectNzError sending websocket payload) starlette.websocketsrrr(r send_bytes Exceptionr!r[rset)rvrras r3rzStarletteSessionClient._sender(s =  $ 0 0 4 4 66oo0099969"   A   ? @ A LL   DLL   s\B9AA"A A AAA<BA<9B;A<<B?B9B66B9c |jjrtt|} |jj |y#t j$r&}|jjt|d}~wwxYw)a0Send a ForwardMsg to the browser via the WebSocket. This method is called synchronously from the Streamlit runtime. The message is serialized and queued for asynchronous sending by the background sender task. Parameters ---------- msg The ForwardMsg protobuf to send to the client. Raises ------ SessionClientDisconnectedError If the client is already closed or the send queue is full (client is overwhelmed and not consuming messages fast enough). N) ris_setrrr put_nowaitr QueueFullr)rvmsgraexcs r3write_forward_msgz(StarletteSessionClient.write_forward_msg@sk" <<   0 0', :    ' ' 0   : LL   0c 9 :sA B!A==Bc|jS)z'Return the client's connection context.)rrzs r3client_contextz%StarletteSessionClient.client_context[s###rAcK|jj|jjt t j 5|jd{dddy7 #1swYyxYww)zClose the client and release resources. Sets the closed flag to prevent further message sends, cancels the background sender task, and waits for it to complete cleanup. N)rrrcancelrrCancelledErrorrzs r3aclosezStarletteSessionClient.aclose`sd    " g,, - $## # # $ $ # $ $s0AA<A0 A.!A0% A<.A00A95A<Nr)rjr)rrrjr)rjr) rrrrrxrrrrrrrAr3rrs/  '0:6$$ $rArc<ddlmtdfd }|S)a Create the WebSocket endpoint handler for client-server communication. This factory function creates a Starlette WebSocket handler that manages the bidirectional communication between the browser and the Streamlit runtime. The handler performs: - Origin validation (CORS/XSRF protection) - Subprotocol negotiation - Session management (connect/disconnect) - User authentication via cookies and trusted headers - BackMsg processing from the client - ForwardMsg sending to the client (via StarletteSessionClient) Parameters ---------- runtime The Streamlit runtime instance that manages sessions and script execution. Returns ------- Callable An async function that handles WebSocket connections. rrcpK|jjd}|jjd}t||s1tj d||j dd{yt |j\}}}|j|d{t|}d} i}tr|jjt} |jjd} | rtj|| r t|jt} | rl|j!t#| | t|jt$} | r5t'j(| } i}D]}|d}|| vs | |||<||d<|j!t/|jj1||| } |j3d{}t9} |j;||j?d }|dk(rYtAjBdstAjBdr|j d{ntj d|dk(rQtAjBdstAjBdrjEn*tj djG|| |jI||jKd{y77q#t*$rtj-d YwxYw7R#$rYbt4$r%|j d{7t7d wxYw#t*$r4}tj-d |j=||Yd}~d}~wwxYw7X#$rYwxYw7#|jKd{7wxYw# |jI||jKd{7w#|jKd{7wxYwxYww)NOriginHostz9Rejecting WebSocket connection from disallowed origin: %si)code) subprotocol_tokentokensz'Error parsing auth cookie for websocket)rtr;existing_session_idzVWebSocket text frames are not supported; connection closed. Expected binary protobufs.z Error deserializing back messagetypedebug_disconnect_websocketzglobal.developmentModezglobal.e2eTestzQClient tried to disconnect websocket when not in development mode or e2e testing.debug_shutdown_runtimezNClient tried to shut down runtime when not in development mode or e2e testing.)&r,r(rHr!warningcloser4acceptrrrhrrvalidate_xsrf_tokenrmrr_rNrrVrWrr[r@connect_session receive_bytes RuntimeError TypeErrorr ParseFromString(handle_backmsg_deserialization_exception WhichOneofr r6stophandle_backmsgdisconnect_sessionr)rwrDrErr1rrt session_idr; xsrf_cookie origin_headerraw_auth_cookieraw_token_cookie all_tokensfiltered_tokens token_type token_keydataback_msgrmsg_typer expose_tokensruntimes r3_websocket_endpointz5create_websocket_handler.._websocket_endpoints4""&&x0  $$V,!&$/ OOKV //t/, , , 7J   8 4 Z!4;777' 2!% t &(*I '//334DE ) 1 1 5 5h ? !%8%L%L &U*H%--/?++%,, :$3]!" 0N ) 1 13E0, 0-1ZZ8H-I BD2?!*J3=,f0EI'0J'>FP,5G* (C!*7F ( 3   .y/@/@A B 00#$71J  !*!8!8!::D#9,,T2$..v6 ;;(()ABfFWFW(G(oo///OO;77(()ABfFWFW(G OO;&&z8-M1 N;<M8 AN; N8!BN;'O:P6 OP6P6L;7N;:L;;N;>MM5N;M5#M&$M55N;8 N5)N0*N;0N55N;;OO&OO&P6O#OO##P6&P3(P;P3PP3P0)P, *P00P33P6r)rrr )rrrrs` @@r3create_websocket_handlerrls.9,.MH&T rAc^ddlm}ddlm}|||xsdtt |gS)abCreate the WebSocket route for client-server communication. Creates a route at `/_stcore/stream` (with optional base URL prefix) that handles the bidirectional WebSocket connection between the browser and Streamlit runtime. Parameters ---------- runtime The Streamlit runtime instance that manages sessions and script execution. base_url Optional base URL path prefix for the route (e.g., "myapp" results in "/myapp/_stcore/stream"). Returns ------- list[BaseRoute] A list containing the single WebSocketRoute for the stream endpoint. r)WebSocketRoute) make_url_path)starlette.routingrstreamlit.url_utilrr"r)rbase_urlrrs r3create_websocket_routesrs5&10  (.b*A B $W -  rA)r,rrjz)tuple[str | None, str | None, str | None])r,rrjzdict[str, str | bool | None])rDrrErrjbool)rOz str | bytesrDrKrjdict[str, Any])r`bytesrDrKrjr)rhzdict[str, str]rlrKrjrk)rr rjr)rr rrrjzlist[BaseRoute])Br __future__rrrV contextlibrtypingrrr urllib.parser streamlitr streamlit.auth_utilr r streamlit.loggerr streamlit.proto.BackMsg_pb2r streamlit.runtime.runtime_utilr!streamlit.runtime.session_managerrrr streamlit.web.server.server_utilrrrstreamlit.web.server.starletter6streamlit.web.server.starlette.starlette_server_configrrrrcollections.abcrrstarlette.datastructuresrrrrrstreamlit.proto.ForwardMsg_pb2rstreamlit.runtimer rr!__annotations__r"r4r@rHrSrNrmrorrrrrAr3rs3" ,,!P'/@  ?10+.9)H%%"212 2.26 &/R72<%B %B*-%B%BP]<[$][$|ePrA