B :��aQ�@s�ddlZddlZddlZddlZddlZddlZyddlmZWn ek r`ddl mZYnXddl mZddlm Z mZmZmZmZmZddlmZmZe�e�ZdZdZGd d �d e�ZdS)�N)�Thread�)�DistlibException)�HTTPBasicAuthHandler�Request�HTTPPasswordMgr�urlparse�build_opener�string_types)�zip_dir�ServerProxyzhttps://pypi.org/pypi�pypic@s�eZdZdZdZd*dd�Zdd�Zdd �Zd d�Zdd �Z dd�Z dd�Zd+dd�Zd,dd�Z d-dd�Zd.dd�Zdd�Zd/dd�Zd0d d!�Zd1d"d#�Zd$d%�Zd&d'�Zd2d(d)�ZdS)3�PackageIndexzc This class represents a package index compatible with PyPI, the Python Package Index. s.----------ThIs_Is_tHe_distlib_index_bouNdaRY_$Nc Cs�|pt|_|��t|j�\}}}}}}|s<|s<|s<|dkrJtd|j��d|_d|_d|_d|_t t jd��R}xJdD]B} y(tj | dg||d�} | dkr�| |_PWqvtk r�YqvXqvWWdQRXdS) z� Initialise an instance. :param url: The URL of the index. If not specified, the URL for PyPI is used. )ZhttpZhttpszinvalid repository: %sN�w)�gpgZgpg2z --version)�stdout�stderrr)� DEFAULT_INDEX�url�read_configurationrr�password_handler�ssl_verifierr�gpg_home�open�os�devnull� subprocess� check_call�OSError)�selfr�scheme�netloc�pathZparamsZqueryZfragZsink�s�rc�r%�>/opt/alt/python37/lib/python3.7/site-packages/distlib/index.py�__init__$s& zPackageIndex.__init__cCsddlm}|�S)zs Get the distutils command for interacting with PyPI configurations. :return: the command. r)�_get_pypirc_command)�utilr()r�cmdr%r%r&r(Asz PackageIndex._get_pypirc_commandcCsNddlm}||�}|�d�|_|�d�|_|�dd�|_|�d|j�|_dS) z� Read the PyPI access configuration as supported by distutils. This populates ``username``, ``password``, ``realm`` and ``url`` attributes from the configuration. r)�_load_pypirc�username�password�realmr � repositoryN)r)r+�getr,r-r.r)rr+Zcfgr%r%r&rIszPackageIndex.read_configurationcCs |��ddlm}||�dS)z� Save the PyPI access configuration. You must have set ``username`` and ``password`` attributes before calling this method. r)� _store_pypircN)�check_credentialsr)r1)rr1r%r%r&�save_configurationVszPackageIndex.save_configurationcCs\|jdks|jdkrtd��t�}t|j�\}}}}}}|�|j||j|j�t|�|_ dS)zp Check that ``username`` and ``password`` have been set, and raise an exception if not. Nz!username and password must be set) r,r-rrrrZadd_passwordr.rr)rZpm�_r!r%r%r&r2_szPackageIndex.check_credentialscCs\|��|��|��}d|d<|�|��g�}|�|�}d|d<|�|��g�}|�|�S)aq Register a distribution on PyPI, using the provided metadata. :param metadata: A :class:`Metadata` instance defining at least a name and version number for the distribution to be registered. :return: The HTTP response received from PyPI upon submission of the request. Zverifyz:actionZsubmit)r2�validate�todict�encode_request�items�send_request)r�metadata�d�request�responser%r%r&�registerks zPackageIndex.registercCsJx<|��}|sP|�d��}|�|�t�d||f�qW|��dS)ar Thread runner for reading lines of from a subprocess into a buffer. :param name: The logical name of the stream (used for logging only). :param stream: The stream to read from. This will typically a pipe connected to the output stream of a subprocess. :param outbuf: The list to append the read lines to. zutf-8z%s: %sN)�readline�decode�rstrip�append�logger�debug�close)r�name�streamZoutbufr#r%r%r&�_readers zPackageIndex._readerc Cs�|jdddg}|dkr|j}|r.|�d|g�|dk rF|�dddg�t��}tj�|tj�|�d �}|�d dd|d ||g�t � dd�|��||fS)a� Return a suitable command for signing a file. :param filename: The pathname to the file to be signed. :param signer: The identifier of the signer of the file. :param sign_password: The passphrase for the signer's private key used for signing. :param keystore: The path to a directory which contains the keys used in verification. If not specified, the instance's ``gpg_home`` attribute is used instead. :return: The signing command as a list suitable to be passed to :class:`subprocess.Popen`. z--status-fd�2z--no-ttyNz --homedirz--batchz--passphrase-fd�0z.ascz --detach-signz--armorz--local-userz--outputzinvoking: %s� )rr�extend�tempfileZmkdtemprr"�join�basenamerCrD)r�filename�signer� sign_password�keystorer*ZtdZsfr%r%r&�get_sign_command�s zPackageIndex.get_sign_commandc Cs�tjtjd�}|dk r tj|d<g}g}tj|f|�}t|jd|j|fd�}|��t|jd|j|fd�}|��|dk r�|j� |�|j� �|��|��|��|j ||fS)a� Run a command in a child process , passing it any input data specified. :param cmd: The command to run. :param input_data: If specified, this must be a byte string containing data to be sent to the child process. :return: A tuple consisting of the subprocess' exit code, a list of lines read from the subprocess' ``stdout``, and a list of lines read from the subprocess' ``stderr``. )rrN�stdinr)�target�argsr)r�PIPE�PopenrrHr�startrrU�writerE�waitrN� returncode) rr*Z input_data�kwargsrr�pZt1Zt2r%r%r&�run_command�s$ zPackageIndex.run_commandc CsD|�||||�\}}|�||�d��\}}} |dkr@td|��|S)aR Sign a file. :param filename: The pathname to the file to be signed. :param signer: The identifier of the signer of the file. :param sign_password: The passphrase for the signer's private key used for signing. :param keystore: The path to a directory which contains the keys used in signing. If not specified, the instance's ``gpg_home`` attribute is used instead. :return: The absolute pathname of the file where the signature is stored. zutf-8rz&sign command failed with error code %s)rTr`�encoder) rrPrQrRrSr*�sig_filer$rrr%r%r&� sign_file�s zPackageIndex.sign_file�sdist�sourcec Cs(|��tj�|�s td|��|��|��}d} |rZ|jsJt� d�n|� ||||�} t|d��} | ��}WdQRXt �|��}t �|��} |�dd|||| d��dtj�|�|fg}| �rt| d��} | ��}WdQRX|�d tj�| �|f�t�tj�| ��|�|��|�}|�|�S) a� Upload a release file to the index. :param metadata: A :class:`Metadata` instance defining at least a name and version number for the file to be uploaded. :param filename: The pathname of the file to be uploaded. :param signer: The identifier of the signer of the file. :param sign_password: The passphrase for the signer's private key used for signing. :param filetype: The type of the file being uploaded. This is the distutils command which produced that file, e.g. ``sdist`` or ``bdist_wheel``. :param pyversion: The version of Python which the release relates to. For code compatible with any Python, this would be ``source``, otherwise it would be e.g. ``3.2``. :param keystore: The path to a directory which contains the keys used in signing. If not specified, the instance's ``gpg_home`` attribute is used instead. :return: The HTTP response received from PyPI upon submission of the request. z not found: %sNz)no signing program available - not signed�rbZfile_upload�1)z:actionZprotocol_version�filetype� pyversion� md5_digest� sha256_digest�contentZ gpg_signature)r2rr"�existsrr5r6rrC�warningrcr�read�hashlib�md5� hexdigestZsha256�updaterOrB�shutil�rmtree�dirnamer7r8r9)rr:rPrQrRrhrirSr;rb�fZ file_datarjrk�filesZsig_datar<r%r%r&�upload_file�s> zPackageIndex.upload_filec Cs�|��tj�|�s td|��tj�|d�}tj�|�sFtd|��|��|j|j }}t |��}dd|fd|fg}d||fg}|�||�} |� | �S)a2 Upload documentation to the index. :param metadata: A :class:`Metadata` instance defining at least a name and version number for the documentation to be uploaded. :param doc_dir: The pathname of the directory which contains the documentation. This should be the directory that contains the ``index.html`` for the documentation. :return: The HTTP response received from PyPI upon submission of the request. znot a directory: %rz index.htmlz not found: %r)z:actionZ doc_uploadrF�versionrl)r2rr"�isdirrrNrmr5rFrzr�getvaluer7r9) rr:Zdoc_dir�fnrFrzZzip_data�fieldsrxr<r%r%r&�upload_documentation!s z!PackageIndex.upload_documentationcCsT|jdddg}|dkr|j}|r.|�d|g�|�d||g�t�dd�|��|S) a| Return a suitable command for verifying a file. :param signature_filename: The pathname to the file containing the signature. :param data_filename: The pathname to the file containing the signed data. :param keystore: The path to a directory which contains the keys used in verification. If not specified, the instance's ``gpg_home`` attribute is used instead. :return: The verifying command as a list suitable to be passed to :class:`subprocess.Popen`. z--status-fdrIz--no-ttyNz --homedirz--verifyzinvoking: %srK)rrrLrCrDrN)r�signature_filename� data_filenamerSr*r%r%r&�get_verify_command=szPackageIndex.get_verify_commandcCsH|jstd��|�|||�}|�|�\}}}|dkr@td|��|dkS)a6 Verify a signature for a file. :param signature_filename: The pathname to the file containing the signature. :param data_filename: The pathname to the file containing the signed data. :param keystore: The path to a directory which contains the keys used in verification. If not specified, the instance's ``gpg_home`` attribute is used instead. :return: True if the signature was verified, else False. z0verification unavailable because gpg unavailable)rrz(verify command failed with error code %sr)rrr�r`)rr�r�rSr*r$rrr%r%r&�verify_signatureUszPackageIndex.verify_signaturec Csp|dkrd}t�d�n6t|ttf�r0|\}}nd}tt|��}t�d|�t|d��}|�t |��}z�|� �} d} d}d}d} d | kr�t| d �}|r�|| | |�xP|�| �}|s�P|t |�7}|�|�|r�|�|�| d7} |r�|| | |�q�WWd|��XWdQRX|dk�r4||k�r4td||f��|�rl|��}||k�r`td ||||f��t�d|�dS)a This is a convenience method for downloading a file from an URL. Normally, this will be a file from the index, though currently no check is made for this (i.e. a file can be downloaded from anywhere). The method is just like the :func:`urlretrieve` function in the standard library, except that it allows digest computation to be done during download and checking that the downloaded data matched any expected value. :param url: The URL of the file to be downloaded (assumed to be available via an HTTP GET request). :param destfile: The pathname where the downloaded file is to be saved. :param digest: If specified, this must be a (hasher, value) tuple, where hasher is the algorithm used (e.g. ``'md5'``) and ``value`` is the expected value. :param reporthook: The same as for :func:`urlretrieve` in the standard library. NzNo digest specifiedrqzDigest specified: %s�wbi ��rzcontent-lengthzContent-Lengthrz1retrieval incomplete: got only %d out of %d bytesz.%s digest mismatch for %s: expected %s, got %szDigest verified: %s)rCrD� isinstance�list�tuple�getattrrprr9r�info�intro�lenr[rsrErrr)rrZdestfileZdigestZ reporthookZdigesterZhasherZdfpZsfp�headersZ blocksize�sizeroZblocknum�blockZactualr%r%r&� download_filensV zPackageIndex.download_filecCs:g}|jr|�|j�|jr(|�|j�t|�}|�|�S)z� Send a standard library :class:`Request` to PyPI and return its response. :param req: The request to send. :return: The HTTP response from PyPI (a standard library HTTPResponse). )rrBrr r)rZreq�handlers�openerr%r%r&r9�szPackageIndex.send_requestc Cs�g}|j}xX|D]P\}}t|ttf�s,|g}x2|D]*}|�d|d|�d�d|�d�f�q2WqWx6|D].\}} } |�d|d|| f�d�d| f�qjW|�d|ddf�d�|�}d|}|tt|��d�} t |j || �S) a& Encode fields and files for posting to an HTTP server. :param fields: The fields to send as a list of (fieldname, value) tuples. :param files: The files to send as a list of (fieldname, filename, file_bytes) tuple. s--z)Content-Disposition: form-data; name="%s"zutf-8�z8Content-Disposition: form-data; name="%s"; filename="%s"s smultipart/form-data; boundary=)zContent-typezContent-length)�boundaryr�r�r�rLrarN�strr�rr)rr~rx�partsr��k�values�v�keyrP�valueZbody�ctr�r%r%r&r7�s2 zPackageIndex.encode_requestcCsBt|t�rd|i}t|jdd�}z|�||p.d�S|d��XdS)NrFg@)�timeout�andrE)r�r rr�search)rZterms�operatorZ rpc_proxyr%r%r&r��s zPackageIndex.search)N)N)N)N)NNrdreN)N)N)NN)N)�__name__� __module__�__qualname__�__doc__r�r'r(rr3r2r>rHrTr`rcryrr�r�r�r9r7r�r%r%r%r&rs* # 8 M+r)rp�loggingrrtrrM� threadingr�ImportErrorZdummy_threading�r�compatrrrrr r r)rr� getLoggerr�rCr� DEFAULT_REALM�objectrr%r%r%r&�s