+ ~j;cta0t$^RIHt^RIt^RIHuHtRt ^RI t ^RI t ^RI t ^RI t ^RIHtHt^RIHt^R IHt^R I Ht^R IHtHtHt^R IHtHtHtHtHt^R I H!t!H"t"^RI#H$t$H%t%H&t&H't'H(t(H)t)] PTR8d ^RIH+t+H,t,M^RI-H+t+H,t,] PTR8d^RIH.t.M^RI-H.t.]!R4t/]+!R4t0]1]1]2]23,R3,t3R]4R&]1]3R3,t5R]4R&!RR]!4t6]!RR7!RR]&44t7]!RR7!RR](]7,44t8!RR]'4t9R#) ) annotationsN TLSAttributeTLSConnectable TLSListener TLSStream)CallableMapping) dataclass)wraps) SSLContext)Any TypeAliasTypeVar)BrokenResourceError EndOfStreamaclose_forcefullyget_cancelled_exc_class to_thread)TypedAttributeSettyped_attribute) AnyByteStreamAnyByteStreamConnectable ByteStreamByteStreamConnectableListener TaskGroup) TypeVarTupleUnpack)overrideT_RetvalPosArgsT.r _PCTRTT_PCTRTTTc ]tRt^5t$Rt]!4tR]R&]!4tR]R&]!4t R]R&]!4t R]R &]!4t R ]R &]!4t R ]R &]!4t R]R&]!4tR]R&]!4tR ]R&]!4tR]R&RtR#)rz5Contains Transport Layer Security related attributes. str | None alpn_protocolbyteschannel_binding_tls_uniqueztuple[str, str, int]cipherz*None | dict[str, str | _PCTRTTT | _PCTRTT]peer_certificatez bytes | Nonepeer_certificate_binarybool server_sidez!list[tuple[str, str, int]] | Noneshared_ciphers ssl.SSLObject ssl_objectstandard_compatiblestr tls_versionN)__name__ __module__ __qualname____firstlineno____doc__rr%__annotations__r'r(r)r*r,r-r/r0r2__static_attributes__r3f/Users/mitch_tango/dev/rabbit-r1-livekit/agent/.venv/lib/python3.14/site-packages/anyio/streams/tls.pyrr5s?!0 1M:1(7(99#2#4F 4FUEVBV,;,=\=')K)9H8IN5I / 1J 1!0 11&(K(r;F)eqc ]tRt^Qt$RtR]R&R]R&R]R&R]R &R]R &]R R R R RR RR/RRll4tRRltRRlt RRlt R!RRllt RRlt RRlt ]RRl4tR tR #)"ra A stream wrapper that encrypts all sent data and decrypts received data. This class has no public initializer; use :meth:`wrap` instead. All extra attributes from :class:`~TLSAttribute` are supported. :var AnyByteStream transport_stream: the wrapped stream rtransport_streamr+r0r. _ssl_objectz ssl.MemoryBIO _read_bio _write_bior,Nhostname ssl_contextTc 0V^8dQhRRRRRRRRR R R R /#) r?rr,z bool | NonerCr$rDssl.SSLContext | Noner0r+returnrr3)formats"r< __annotate__TLSStream.__annotate__dsNDD'D! D  D + D"D Dr;c "VfV'*pV'gV'd\PPM\PPp\P!V4p\ \R4'd)V;P \P(,un\P!4p\P!4p\V4\PJdVPWxW#R7p M-\P!VPVVVVR4GRjxL p V!VVV VVR7p V PV P4GRjxL V #L6L5i)a\ Wrap an existing stream with Transport Layer Security. This performs a TLS handshake with the peer. :param transport_stream: a bytes-transporting stream to wrap :param server_side: ``True`` if this is the server side of the connection, ``False`` if this is the client side (if omitted, will be set to ``False`` if ``hostname`` has been provided, ``False`` otherwise). Used only to create a default context when an explicit context has not been provided. :param hostname: host name of the peer (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the peer does the same :raises ~ssl.SSLError: if the TLS handshake fails NOP_IGNORE_UNEXPECTED_EOF)r,server_hostname)r?r0r@rArB)sslPurpose CLIENT_AUTH SERVER_AUTHcreate_default_contexthasattroptionsrM MemoryBIOtyper wrap_biorrun_sync_call_sslobject_method do_handshake) clsr?r,rCrDr0purposebio_inbio_outr/wrappers &&$$$$ r<wrapTLSStream.wrapcs,:  &,K+6 ''CKK\dApTPP4TPP4\ThRp?ii;i\ PdBTPPTPP 44GRjxL EK\ PdApTPP4TPP4\ThRp?i\ P dpTPP4TPP4\#T\ P$4'g$TP&'d2RTP&9d!TP('d\Th\RhhRp?ii;i5i)TNUNEXPECTED_EOF_WHILE_READING)rBpendingr?sendreadrOSSLWantReadErrorreceiverAwriter write_eofOSErrorrSSLWantWriteErrorSSLSyscallErrorSSLError isinstance SSLEOFErrorstrerrorr0)selfrdreresultdataexcs&&* r<rZ TLSStream._call_sslobject_methods( tH??***//44T__5I5I5KLLL MI'' / /..."33889M9M9OPPP!%!6!6!>!>!@@@DNN((..#/NN,,..7NN,,.OO--/-367 (( I++001E1E1GHHH&& 3((*))+)s2<< ((*))+c3??33LLL%Cs||%S///1s:)t3 sK)A&AK)A$K)&K&=D6DC"D2C53D8K&K)%F <K&=K)F  F  ;FF  K&!7K&GK&K)"K&5K&6;H11K&K& A%K!/"K!K!!K&&K)cV^8dQhRR/#)rFrHztuple[AnyByteStream, bytes]r3)rIs"r<rJrKs < <9 >>  -sCBAAAB B BA#A?7A:8A??Bc V^8dQhRRRR/#)rF max_bytesintrHr&r3)rIs"r<rJrKssur;c "VPVPPV4GRjxL pV'g\hV#L5ir)rZr@rjr)rvrrxs&& r<rlTLSStream.receives:001A1A1F1F RR  Ss*AA A Ac V^8dQhRRRR/#)rFitemr&rHrr3)rIs"r<rJrKsHHuHHr;c n"VPVPPV4GRjxL R#L5ir)rZr@rm)rvrs&&r<riTLSStream.sends'))$*:*:*@*@$GGGs *535cV^8dQhRR/#rr3)rIs"r<rJrKs     r;c B"VP\P4p\P!RV4pV'dT\ VP ^44\ VP ^4;'g^4rCW43R8d\RV 24h\R4h5i)zTLSv(\d+)(?:\.(\d+))?z;send_eof() requires at least TLSv1.3; current session uses z7send_eof() has not yet been implemented for TLS streams))extrarr2rematchrgroupNotImplementedError)rvr2rmajorminors& r<send_eofTLSStream.send_eofsjj!9!9: 1;? u{{1~.EKKN4G4Ga0H5~&)$$/=2 " E  s A4B7(BcV^8dQhRR/#rFrHzMapping[Any, Callable[[], Any]]r3)rIs"r<rJrKs  "A r;c Ha/SPPC\PSPP \P SPP\PSPP\PV3Rl\PV3Rl\PV3Rl\PV3Rl\PV3Rl\PV3Rl\PSPP / C#)c:<SPPR4#)Fr@ getpeercertr~sr<,TLSStream.extra_attributes..s43C3C3O3OPU3Vr;c:<SPPR4#)Trr~sr<rrs$:J:J:V:V;r;c0<SPP#r)r@r,r~sr<rrsd.>.>.J.Jr;ct<SPP'dSPP4#R#r)r@r,r-r~sr<rrs6##///  //1r;c<SP#rr0r~sr<rr d6N6Nr;c<SP#r)r@r~sr<rrs T-=-=r;)r?extra_attributesrr%r@selected_alpn_protocolr'get_channel_bindingr(r)r*r,r-r0r/r2versionr~sfr<rTLSStream.extra_attributess ##44  & &(8(8(O(O  3 3  44   !1!1!8!8  ) )+V  0 03  $ $&J  ' '*  , ,.N  # #%=  $ $d&6&6&>&>'  r;r3)i)r4r5r6r7r8r9 classmethodrarZr}rrlrirpropertyrr:r3r;r<rrQs$#D$( D $ D .2 D%)DDL,\ <-H    r;c]tRtRt$RtR]R&R]R&RtR]R &^tR ]R &]R R l4t RRRllt RRlt ] RRl4t RtR#)ri aj A convenience listener that wraps another listener and auto-negotiates a TLS session on every accepted connection. If the TLS handshake times out or raises an exception, :meth:`handle_handshake_error` is called to do whatever post-mortem processing is deemed necessary. Supports only the :attr:`~TLSAttribute.standard_compatible` extra attribute. :param Listener listener: the listener to wrap :param ssl_context: the SSL context object :param standard_compatible: a flag passed through to :meth:`TLSStream.wrap` :param handshake_timeout: time limit for the TLS handshake (passed to :func:`~anyio.fail_after`) z Listener[Any]listenerzssl.SSLContextrDTr+r0floathandshake_timeoutc$V^8dQhRRRRRR/#)rFryrstreamrrHrr3)rIs"r<rJTLSListener.__annotate__9s"-SWr;c $"\V4GRjxL \V\44'g,\P!\ 4P RVR7\V\4'd\V\44'dhR#L|5i)au Handle an exception raised during the TLS handshake. This method does 3 things: #. Forcefully closes the original stream #. Logs the exception (unless it was a cancellation exception) using the ``anyio.streams.tls`` logger #. Reraises the exception if it was a base exception or a cancellation exception :param exc: the exception :param stream: the original stream NzError during TLS handshake)exc_info)rrsrlogging getLoggerr4 exception Exception)ryrs&&r<handle_handshake_error"TLSListener.handle_handshake_error8sz  '''#6899   h ' 1 1,s 2  #y))Z=T=V-W-W .X (sBBA=BNc$V^8dQhRRRRRR/#)rFhandlerzCallable[[TLSStream], Any] task_groupzTaskGroup | NonerHrr3)rIs"r<rJrXs(??+?%?  ?r;c aa"\S4RVV3Rll4pSPPW24GRjxL R#L5i)c V^8dQhRRRR/#)rFrrrHrr3)rIs"r<rJ'TLSListener.serve..__annotate__^s . .- .D .r;c<"^RIHpV!SP4;_uu_4\P VSP SP R7GRjxL pRRR4S!X4GRjxL R#L +'giL$;iL \d&pSPY04GRjxL Rp?R#Rp?ii;i5i)rF) fail_after)rDr0N) rrrrarDr0rr)rrwrapped_streamryrrvs& r<handler_wrapper*TLSListener.serve..handler_wrapper]s % . 6 677+4>>$($4$4,0,D,D,:,&N8n---&87.! ?11#>>> ?suB>B 0A6A4A6B " B>-B .B>4A66 B B B> B;B6*B-+B60B>6B;;B>N)r rserve)rvrrrsff& r<rTLSListener.serveXs= w . .  .mm!!/>>>s7AAAcV^8dQhRR/#rr3)rIs"r<rJros%%d%r;c V"VPP4GRjxL R#L5ir)rrr~s&r<rTLSListener.acloseosmm""$$$s )')cV^8dQhRR/#rr3)rIs"r<rJrss  "A r;c 0a\PV3Rl/#)c<SP#rrr~sr<r.TLSListener.extra_attributes..urr;)rr0r~sfr<rTLSListener.extra_attributesrs  , ,.N  r;r3r)r4r5r6r7r8r9r0r staticmethodrrrrrr:r3r;r<rr s[" $$!u!>?.%  r;cL]tRtRtRtRRRRRR/RR llt]R R l4tR tR#) riya Wraps another connectable and does TLS negotiation after a successful connection. :param connectable: the connectable to wrap :param hostname: host name of the server (if host name checking is desired) :param ssl_context: the SSLContext object to use (if not provided, a secure default will be created) :param standard_compatible: if ``False``, skip the closing handshake when closing the connection, and don't raise an exception if the server does the same rCNrDr0Tc ,V^8dQhRRRRRRRRR R /#) rF connectablerrCr$rDrGr0r+rHrr3)rIs"r<rJTLSConnectable.__annotate__s<77-7 7 + 7 " 7 7r;c NWnT;'g/\P!\PP4Vn\ VP \P4'g,\R\VP 4P 24hW n W@n R#)z7ssl_context must be an instance of ssl.SSLContext, not N) rrOrSrPrRrDrsr TypeErrorrWr4rCr0)rvrrCrDr0s&&$$$r<__init__TLSConnectable.__init__s''2( ( c6P6P KK # #7 $**CNN;;I(()2235 ! #6 r;cV^8dQhRR/#)rFrHrr3)rIs"r<rJrs  y r;c "VPP4GRjxL p\PVVPVP VP R7GRjxL #LDL \d\T4GRjxL hi;i5i)N)rCrDr0) rconnectrrarCrDr0rr)rvrs& r<rTLSConnectable.connects''//11 " ,,$($<$< ( 2  #F+ + +  sDB A%B :A) A'!A)$B 'A))B BB  B )rrCrDr0) r4r5r6r7r8rrrr:r3r;r<rrys> 7 $ 7 .2 7 %) 7(  r;)rrrr)r )r ):__conditional_annotations__ __future__rbuiltins @py_builtins_pytest.assertion.rewrite assertionrewrite @pytest_ar__all__rrrOsyscollections.abcrr dataclassesr functoolsr r typingr r rrrrrrr_core._typedattrrrabcrrrrrr version_inforrtyping_extensionsrrr tupler1r!r9r"rrrr)rs@r<rs)""  -!**Bw++6w* :   #5c?C/00GSL))))$)8 eK K K \ eU (9%U U p,*,r;