o $i( @sddlZddlmZddlmZmZmZmZddlZddlm Z ddl Z ddl m Z ddlmZ   dded eeeeefd ed eejfd d Z    ddeeded eeeeefd efddZdS)N)futures)AnyOptionalSequenceTuple)aio)authentication_utils)load_certs_from_envFaddressoptions asynchronous credentialscCs0|rtnt}|p g}t|}|dtj|d<|dtj|d<|}g}t rEddl m }m }|r?||n|||durQ|j} ||f} n'tjdddvrrt\} } } tj| | | d }|j} ||f} n|j} |f} |r| | ||d }|S| | d |i}|rtj|g|R}|S) a#Create a gRPC channel with authentication interceptors if token auth is enabled. This function handles: - TLS configuration via RAY_USE_TLS environment variable or custom credentials - Authentication interceptors when token auth is enabled - Keepalive settings from Ray config - Both synchronous and asynchronous channels Args: address: The gRPC server address (host:port) options: Optional gRPC channel options as sequence of (key, value) tuples asynchronous: If True, create async channel; otherwise sync credentials: Optional custom gRPC credentials for TLS. If provided, takes precedence over RAY_USE_TLS environment variable. Returns: grpc.Channel or grpc.aio.Channel: Configured gRPC channel with interceptors zgrpc.keepalive_time_mszgrpc.keepalive_timeout_msr)+SyncAuthenticationMetadataClientInterceptorget_async_auth_interceptorsN RAY_USE_TLS0)1true)certificate_chain private_keyroot_certificates)r interceptorsr )aiogrpcgrpcdictgetray_configgrpc_client_keepalive_time_ms grpc_client_keepalive_timeout_msitemsris_token_auth_enabledBray._private.authentication.grpc_authentication_client_interceptorrrextendappendsecure_channelosenvironlowerr ssl_channel_credentialsinsecure_channelintercept_channel)r r r r grpc_module options_dictrrrchannel_creator base_argsserver_cert_chainrca_certtls_credentialschannelr4T/home/ubuntu/veenaModal/venv/lib/python3.10/site-packages/ray/_private/grpc_utils.pyinit_grpc_channel sN       r6 grpc_server max_workersthread_name_prefixc Cs|rtnt}g}tr'|rddlm}||n ddlm}|||r6|j|r/|nd|d}|S|dur>t dt j ||d} |j| |rL|nd|d}|S)aCreate a gRPC server with authentication interceptors if token auth is enabled. This function handles: - Authentication interceptors when token auth is enabled - Both synchronous and asynchronous servers - Thread pool configuration for sync servers Args: max_workers: Max thread pool workers (required for sync, ignored for async) thread_name_prefix: Thread name prefix for sync thread pool options: Optional gRPC server options as sequence of (key, value) tuples asynchronous: If True, create async server; otherwise sync Returns: grpc.Server or grpc.aio.Server: Configured gRPC server with interceptors r)$AsyncAuthenticationServerInterceptor)#SyncAuthenticationServerInterceptorN)rr z4max_workers is required for synchronous gRPC servers)r8r9) rrrr!Bray._private.authentication.grpc_authentication_server_interceptorr:r$r;server ValueErrorrThreadPoolExecutor) r8r9r r r,rr:r;r=executorr4r4r5$create_grpc_server_with_interceptors_s4      rA)NFN)Nr7NF)r& concurrentrtypingrrrrrrrrray._private.authenticationrray._private.tls_utilsr strboolChannelCredentialsr6intrAr4r4r4r5sB     S