o

��
ibQ�@s�dd
lZdd
l
Z
dd
lZdd
lZdd
lZdd
lZzddlmZ
Wney/


ddl	mZ
Yn
wddl
mZ
ddlm
Z
mZmZmZmZmZ
ddlmZmZ
e
�e�
ZdZdZGd	d
�d
e�Zd
S)�N)
�Thread�
)
�DistlibException)�HTTPBasicAuthHandler�Request�HTTPPasswordMgr�urlparse�build_opener�string_types)�zip_dir�ServerProxyzhttps://pypi.org/pypi�pypic@s�eZ
dZd
ZdZd*dd�
Zdd�Zdd	�Zd
d�Zdd
�Z	dd�Z
dd�Zd*dd�
Zd*dd�
Z
d*dd�
Z		d+dd�
Zdd�Z	d*dd�
Z	d*d d!�
Zd,d"d#�
Zd$d%�Zd&d'�Zd*d(d)�
ZdS)-�PackageIndexzc
    This class represents a package index compatible with PyPI, the Python
    Package Index.
    s.----------ThIs_Is_tHe_distlib_index_bouNdaRY_$Nc
Cs�|
pt|_
|��
t|j
�
\}}}}}}|s|s|s|d
v
r%td|j
�
�
d|_d|_d|_d|_t	t
jd��5}dD]!}	ztj
|	dg||d�}
|
dkrQ|	|_W
nWq:ty[


Yq:wWd�
dSWd�
dS1sow



Y
dS)	z�
        Initialise an instance.

        :param url: The URL of the index. If not specified, the URL for PyPI is
                    used.
        )�http�httpszinvalid repository: %sN�
w)�gpgZgpg2z	--version��stdout�stderrr
)�
DEFAULT_INDEX�url�read_configurationrr�password_handler�ssl_verifierr�gpg_home�open�os�devnull�
subprocess�
check_call�OSError)�selfr�scheme�netloc�path�params�query�fragZsink�
s�rc�r+�D/usr/local/lib/python3.10/site-packages/pip/_vendor/distlib/index.py�__init__$s4












�

�
���	"�zPackageIndex.__init__c
Csd
dlm
}

|
�S)zs
        Get the distutils command for interacting with PyPI configurations.
        :return: the command.
        r)
�_get_pypirc_command)�utilr.)r"�cmdr+r+r,r.As
z PackageIndex._get_pypirc_commandc
CsNd
dlm
}

|
|�
}|�d�
|_|�d�
|_|�dd�|_|�d|j�|_dS)	z�
        Read the PyPI access configuration as supported by distutils. This populates
        ``username``, ``password``, ``realm`` and ``url`` attributes from the
        configuration.
        r)
�_load_pypirc�username�password�realmr
�
repositoryN)r/r1�getr2r3r4r)r"r1�cfgr+r+r,rIs




zPackageIndex.read_configurationc
Cs |��
d
dl
m}

|
|�

dS)z�
        Save the PyPI access configuration. You must have set ``username`` and
        ``password`` attributes before calling this method.
        r)
�
_store_pypircN)�check_credentialsr/r8)r"r8r+r+r,�save_configurationVs

zPackageIndex.save_configurationc
Cs\|jd
us
|j
d
urtd�
�
t�}
t|j�
\}}}}}}|
�|j||j|j
�
t|
�
|_	d
S)zp
        Check that ``username`` and ``password`` have been set, and raise an
        exception if not.
        Nz!username and password must be set)
r2r3rrrr�add_passwordr4rr)r"�pm�
_r$r+r+r,r9_s




zPackageIndex.check_credentialscCs\|��
|
�
�
|
��}d
|d<|�|��g�}|�|�
}d|d<|�|��g�}|�|�
S)aq

        Register a distribution on PyPI, using the provided metadata.

        :param metadata: A :class:`Metadata` instance defining at least a name
                         and version number for the distribution to be
                         registered.
        :return: The HTTP response received from PyPI upon submission of the
                request.
        �verify�:action�submit)r9�validate�todict�encode_request�items�send_request)r"�metadata�
d�request�responser+r+r,�registerks










zPackageIndex.registercCsH	|��}|sn|�
d�
��}|�|�

t�d|
|f�

q
|��
dS)ar

        Thread runner for reading lines of from a subprocess into a buffer.

        :param name: The logical name of the stream (used for logging only).
        :param stream: The stream to read from. This will typically a pipe
                       connected to the output stream of a subprocess.
        :param outbuf: The list to append the read lines to.
        T�utf-8z%s: %sN)�readline�decode�rstrip�append�logger�debug�close)r"�name�streamZoutbufr)r+r+r,�_readers	






�zPackageIndex._readerc	Cs�|jd
ddg}|dur|j
}|r|�d|g�

|du
r"|�gd�
�

t��}tj�|tj�|
�
d�}|�dd	d
|d||
g�

t	�
dd
�|�
�
||fS)a�
        Return a suitable command for signing a file.

        :param filename: The pathname to the file to be signed.
        :param signer: The identifier of the signer of the file.
        :param sign_password: The passphrase for the signer's
                              private key used for signing.
        :param keystore: The path to a directory which contains the keys
                         used in verification. If not specified, the
                         instance's ``gpg_home`` attribute is used instead.
        :return: The signing command as a list suitable to be
                 passed to :class:`subprocess.Popen`.
        �--status-fd�
2�--no-ttyN�	--homedir)z--batchz--passphrase-fd�
0z.ascz
--detach-signz--armorz--local-userz--output�invoking: %s�
 )rr�extend�tempfile�mkdtemprr%�join�basenamerPrQ)r"�filename�signer�
sign_password�keystorer0�tdZsfr+r+r,�get_sign_command�s










�
zPackageIndex.get_sign_commandc	Cs�tj
tj
d
�}|du
rtj
|d<g}g}tj|
f
i|�
�
}t|jd|j|fd�}|��
t|jd|j|fd�}|��
|du
rJ|j�	|�

|j�
�
|��
|��
|��
|j
||fS)a�

        Run a command in a child process , passing it any input data specified.

        :param cmd: The command to run.
        :param input_data: If specified, this must be a byte string containing
                           data to be sent to the child process.
        :return: A tuple consisting of the subprocess' exit code, a list of
                 lines read from the subprocess' ``stdout``, and a list of
                 lines read from the subprocess' ``stderr``.
        rN�stdinr)�target�argsr)r�PIPE�PopenrrUr�startrrh�writerR�waitr`�
returncode)	r"r0Z
input_data�kwargsrr�
p�t1�t2r+r+r,�run_command�s&
�














zPackageIndex.run_commandc
CsD|�|
|||�\}}|�
||�d
�
�\}}}	|dkr td|�
�
|S)aR
        Sign a file.

        :param filename: The pathname to the file to be signed.
        :param signer: The identifier of the signer of the file.
        :param sign_password: The passphrase for the signer's
                              private key used for signing.
        :param keystore: The path to a directory which contains the keys
                         used in signing. If not specified, the instance's
                         ``gpg_home`` attribute is used instead.
        :return: The absolute pathname of the file where the signature is
                 stored.
        rKr
z&sign command failed with error code %s)rgru�encoder)
r"rbrcrdrer0�sig_filer*rrr+r+r,�	sign_file�s

�

�

�zPackageIndex.sign_file�sdist�sourcec	CsN
|��
t
j�|�
std
|�
�
|
��
|
��}d}	|r-|js%t�	d�

n|�
||||�}	t|d��}
|
��}Wd�
n1sAw



Y
t
�|�
��}t
�|�
��}
|�dd||||
d��

dt
j�|�
|fg
}|	r�t|	d��}
|
��}Wd�
n1s�w



Y
|�d	t
j�|	�
|f�

t�t
j�|	�
�

|�|��|�}|�|�
S)
a�
        Upload a release file to the index.

        :param metadata: A :class:`Metadata` instance defining at least a name
                         and version number for the file to be uploaded.
        :param filename: The pathname of the file to be uploaded.
        :param signer: The identifier of the signer of the file.
        :param sign_password: The passphrase for the signer's
                              private key used for signing.
        :param filetype: The type of the file being uploaded. This is the
                        distutils command which produced that file, e.g.
                        ``sdist`` or ``bdist_wheel``.
        :param pyversion: The version of Python which the release relates
                          to. For code compatible with any Python, this would
                          be ``source``, otherwise it would be e.g. ``3.2``.
        :param keystore: The path to a directory which contains the keys
                         used in signing. If not specified, the instance's
                         ``gpg_home`` attribute is used instead.
        :return: The HTTP response received from PyPI upon submission of the
                request.
        z
not found: %sNz)no signing program available - not signed�rbZfile_upload�
1)r?Zprotocol_version�filetype�	pyversion�
md5_digest�
sha256_digest�contentZ
gpg_signature)r9rr%�existsrrArBrrP�warningrxr�read�hashlib�md5�	hexdigest�sha256�updaterarO�shutil�rmtree�dirnamerCrDrE)r"rFrbrcrdr}r~rerGrw�
f�	file_datarr��filesZsig_datarHr+r+r,�upload_file�sH









�

�







�



�
�


zPackageIndex.upload_filec
Cs�|��
t
j�|�
std
|�
�
t
j�|d�}t
j�|�
s#td|�
�
|
��
|
j|
j	}}t
|�
��}dd|fd|fg}d||fg
}|�||�}	|�
|	�
S)a2
        Upload documentation to the index.

        :param metadata: A :class:`Metadata` instance defining at least a name
                         and version number for the documentation to be
                         uploaded.
        :param doc_dir: The pathname of the directory which contains the
                        documentation. This should be the directory that
                        contains the ``index.html`` for the documentation.
        :return: The HTTP response received from PyPI upon submission of the
                request.
        znot a directory: %rz
index.htmlz
not found: %r)r?Z
doc_uploadrS�versionr�)r9rr%�isdirrr`r�rArSr�r�getvaluerCrE)
r"rFZdoc_dir�fnrSr��zip_data�fieldsr�rHr+r+r,�upload_documentation 
s










�


z!PackageIndex.upload_documentationcCsT|jd
ddg}|dur|j
}|r|�d|g�

|�d|
|g�

t�dd�|�
�
|S)	a|
        Return a suitable command for verifying a file.

        :param signature_filename: The pathname to the file containing the
                                   signature.
        :param data_filename: The pathname to the file containing the
                              signed data.
        :param keystore: The path to a directory which contains the keys
                         used in verification. If not specified, the
                         instance's ``gpg_home`` attribute is used instead.
        :return: The verifying command as a list suitable to be
                 passed to :class:`subprocess.Popen`.
        rVrWrXNrYz--verifyr[r\)rrr]rPrQr`)r"�signature_filename�
data_filenamerer0r+r+r,�get_verify_command<
s






zPackageIndex.get_verify_commandcCsH|jst
d
�
�
|�|
||�}|�|�
\}}}|dv
r t
d|�
�
|dkS)a6
        Verify a signature for a file.

        :param signature_filename: The pathname to the file containing the
                                   signature.
        :param data_filename: The pathname to the file containing the
                              signed data.
        :param keystore: The path to a directory which contains the keys
                         used in verification. If not specified, the
                         instance's ``gpg_home`` attribute is used instead.
        :return: True if the signature was verified, else False.
        z0verification unavailable because gpg unavailable)r
rz(verify command failed with error code %sr
)rrr�ru)r"r�r�rer0r*rrr+r+r,�verify_signatureT
s

�


�zPackageIndex.verify_signaturec	Cs�
|d
urd
}t�
d�

nt|ttf�r|\}}nd}tt|��}t�
d|�

t|d��a}|�t	|
�
�
}zL|�
�}	d}
d}d}d}
d	|	vrKt|	d
�
}|rS||
|
|�
	|�|
�
}|s\n|t
|�
7}|�|�

|rn|�|�

|
d7}
|rz||
|
|�
qTW|��
n|��
wWd
�
n1s�w



Y
|dkr�||kr�td
||f�
�
|r�|��}||kr�td||||f�
�
t�
d|�
d
Sd
S)a
        This is a convenience method for downloading a file from an URL.
        Normally, this will be a file from the index, though currently
        no check is made for this (i.e. a file can be downloaded from
        anywhere).

        The method is just like the :func:`urlretrieve` function in the
        standard library, except that it allows digest computation to be
        done during download and checking that the downloaded data
        matched any expected value.

        :param url: The URL of the file to be downloaded (assumed to be
                    available via an HTTP GET request).
        :param destfile: The pathname where the downloaded file is to be
                         saved.
        :param digest: If specified, this must be a (hasher, value)
                       tuple, where hasher is the algorithm used (e.g.
                       ``'md5'``) and ``value`` is the expected value.
        :param reporthook: The same as for :func:`urlretrieve` in the
                           standard library.
        NzNo digest specifiedr�zDigest specified: %s�wbi ���r
zcontent-lengthzContent-LengthTrz1retrieval incomplete: got only %d out of %d bytesz.%s digest mismatch for %s: expected %s, got %szDigest verified: %s)rPrQ�
isinstance�list�tuple�getattrr�rrEr�info�intr��lenrnr�rRrr�)r"r�destfile�digest�
reporthookZdigesterZhasherZdfpZsfp�headers�	blocksize�sizer��blocknum�block�actualr+r+r,�
download_filem
sf





























�	�


��




���zPackageIndex.download_filecCs:g}|jr|�
|j�

|jr|�
|j�

t|�}|�|
�
S)
z�
        Send a standard library :class:`Request` to PyPI and return its
        response.

        :param req: The request to send.
        :return: The HTTP response from PyPI (a standard library HTTPResponse).
        )rrOrr	r)r"�req�handlers�openerr+r+r,rE�
s






zPackageIndex.send_requestc
Cs�g}|j}|
D]&\}}t
|ttf�s|g
}|D]}|�d
|d|�d�
d|�d�
f�

qq|D]\}}	}
|�d
|d||	f�d�
d|
f�

q0|�d
|d
df�

d�|�
}d|}|tt|�
�
d�}
t	|j
||
�S)	a&

        Encode fields and files for posting to an HTTP server.

        :param fields: The fields to send as a list of (fieldname, value)
                       tuples.
        :param files: The files to send as a list of (fieldname, filename,
                      file_bytes) tuple.
        s--z)Content-Disposition: form-data; name="%s"rK�z8Content-Disposition: form-data; name="%s"; filename="%s"s
smultipart/form-data; boundary=)zContent-typezContent-length)�boundaryr�r�r�r]rvr`�strr�rr)r"r�r��partsr��
k�values�
v�keyrb�value�body�ctr�r+r+r,rC�
sB







�


��



�


�



�zPackageIndex.encode_requestcCsJt|
t
�r	d
|
i
}
t|jdd�}z|�|
|pd�W|d�
�
S|d�
�
w)NrSg@)
�timeout�andrR)r�r
rr�search)r"Zterms�operatorZ	rpc_proxyr+r+r,r��
s





zPackageIndex.search)
N)NNryrzN)NN)�__name__�
__module__�__qualname__�__doc__r�r-r.rr:r9rJrUrgrurxr�r�r�r�r�rErCr�r+r+r+r,rs2


	


#

�9
�
�
M+r)r��loggingrr�rr^�	threadingr�ImportErrorZdummy_threading�r�compatrrrrr	r
r/rr�	getLoggerr�rPr�
DEFAULT_REALM�objectrr+r+r+r,�<module>
s$








�