4Rj}UddlmZddlZddlZddlZddlZddlZddlZddlZddl m Z m Z m Z m Z mZmZddlmZddlZddlmZmZddlmZmZmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,dd l-m.Z.ej^e0Z1d e2d <e rdd l3m4Z4gd Z5ddZ6dZ7dZ8dZ9dZ:dZ;ddZ<GddZ=GddZ>GddZ?GddZ@Gdde?ZAy) ) annotationsN) TYPE_CHECKINGAnyDictUnionOptionalcast)override) AccessTokenIdentityTokenProvider) ENV_SCOPE ENV_PROFILE ENV_BASE_URLENV_AUTH_TOKENENV_CONFIG_DIRTOKEN_ENDPOINTDEFAULT_BASE_URLENV_WORKSPACE_IDENV_ORGANIZATION_IDOAUTH_API_BETA_HEADERENV_FEDERATION_RULE_IDENV_SERVICE_ACCOUNT_IDTOKEN_EXCHANGE_TIMEOUTENV_IDENTITY_TOKEN_FILEGRANT_TYPE_REFRESH_TOKENMANDATORY_REFRESH_SECONDS _user_agent_require_https_active_profile_config_file_path_credentials_file_pathresolve_identity_token_path)AnthropicErrorzlogging.Loggerlog)WorkloadIdentityCredentials) StaticTokenEnvTokenCredentialsFileInMemoryConfigIdentityTokenFilec|y t|S#ttf$r }|d|nd}t|d|d|d}~wwxYw)z@Parse a credentials-file ``expires_at`` field into Unix seconds.Nzcredentials file at credentialsz has invalid 'expires_at' u; expected an integer Unix timestamp in seconds. The SDK does not parse ISO8601 — convert with int(datetime.timestamp()) before writing the file.)int TypeError ValueErrorr%)valuesourceerrwheres l/var/www/html/meridian/meridian-ai/venv/lib/python3.12/site-packages/anthropic/lib/credentials/_providers.py_coerce_expires_atr72sl }5z z "393E&vh/=g/y9F G   s ?:? oauth_tokenz1.0oidc_federation user_oauthcd d}||dt||dt||dt|jd}|tk(rk||dt ||dt ||dt|jd s/tjjt}|r d |d |d <y y y |tk(r||dty y )uFill empty profile fields from corresponding ANTHROPIC_* env vars. The profile file is authoritative — this only fills fields the file left unset. Empty-string env values are treated as unset. cv|j|s(tjj|}|r|||<yyyN)getosenviron)targetkeyenv_varvs r6fillz$_fill_missing_from_env..fillUs5zz# w'As base_urlorganization_id workspace_idtypefederation_rule_idservice_account_idscopeidentity_tokenfile)r3pathN)rADict[str, Any]rBstrrCrRreturnNone) rrrr>AUTH_TYPE_OIDC_FEDERATIONrrrr?r@rAUTH_TYPE_USER_OAUTH)configauthrE auth_typerDs r6_fill_missing_from_envrZNs  \*"$78!12 I-- T')?@ T')?@ T7I&xx() 67A4:A)F%&* * * T7I& +rFc&eZdZdZddZddddZy) r(zQAn :class:`AccessTokenProvider` that always returns a fixed token with no expiry.c||_yr=)_token)selftokens r6__init__zStaticToken.__init__ps  rFF force_refreshc2~t|jdS)Nr_ expires_at)r r])r^rbs r6__call__zStaticToken.__call__ss >>rFN)r_rRrSrTrbboolrSr )__name__ __module__ __qualname____doc__r`rfrFr6r(r(ms[16?rFr(c*eZdZdZefddZddddZy) r)zQAn :class:`AccessTokenProvider` that reads ``ANTHROPIC_AUTH_TOKEN`` at call time.c||_yr=)_env_var)r^rCs r6r`zEnvToken.__init__{s  rFFrac~tjj|j}|t d|jdt |dS)NzEnvironment variable zN is not set. Set it or pass an explicit `credentials=` provider to the client.rd)r?r@r>rpr%r )r^rbr2s r6rfzEnvToken.__call__~sS  t}}- = ' 7TU 488rFN)rCrRrSrTrg)rirjrkrlrr`rfrmrFr6r)r)xs[&4 169rFr)ceZdZdZ ddd ddZeddZeddZeddZddZ dd Z d d Z d!d Z d!d Z d"d Zd#dZd#dZd$dZd!dZddd%dZddd&dZd'dZddd&dZd(dZy))r*uAn :class:`AccessTokenProvider` backed by a named profile. A profile is a pair of files under the config directory (``~/.config/anthropic/`` by default; override with ``ANTHROPIC_CONFIG_DIR``): * ``configs/.json`` — non-secret. Holds the nested ``"authentication"`` object (discriminated by its ``"type"`` field), plus top-level ``organization_id``, ``workspace_id``, and ``base_url``. The ``authentication`` object may contain a ``credentials_path`` field overriding the credentials file location. * ``credentials/.json`` — secret (0600). Holds ``access_token``, ``expires_at``, and (for ``user_oauth`` with a ``client_id``) ``refresh_token``. The split keeps secret material out of files that may need to be readable by config-only consumers, and lets the SDK enforce 0600 on the credentials file without locking out config readers. Dispatches on the ``authentication.type`` discriminator: ``"oidc_federation"`` OIDC workload identity federation. Lazily constructs a :class:`WorkloadIdentityCredentials` delegate from the nested auth fields plus the top-level ``organization_id`` and calls it to perform the jwt-bearer exchange. ``"user_oauth"`` Output of an interactive PKCE login. If the auth block has a ``client_id``, performs ``refresh_token`` grants on expiry and writes the new tokens back to the credentials file (atomic replace, refresh-token rotation supported). Without a ``client_id``, the credentials file is treated as externally rotated — the SDK re-reads it on every invocation and returns whatever ``access_token`` is there, no refresh grant attempted. This is the pattern for a sidecar/daemon that mints the access token out-of-band. Args: profile: Profile name. ``None`` resolves via ``ANTHROPIC_PROFILE`` env → ``/active_config`` pointer file → ``"default"``. N) http_clientc||n t|_t|j|_d|_||_d|_d|_d|_t|_ d|_ yr=) r _profiler! _config_path_bound_base_url _http_client_owned_http_client_config_credentials_pathr _base_url_workload_delegate)r^profilerss r6r`zCredentialsFile.__init__s^ $+#6O26 9=.IMrFc|jSr=)rur^s r6r~zCredentialsFile.profiles }}rFc|jSr=)rvrs r6 config_pathzCredentialsFile.config_paths   rFc|j}|jd}|rt|jdSdS)uThe ``base_url`` declared in the profile config file, if any. Returns ``None`` when the config has no top-level ``base_url`` key — callers should fall back to their own default rather than the provider's bound/default value, so a profile that *doesn't* pin a host never overrides an explicit client setting. Loads the config on first access. rG/N) _load_configr>rRrstrip)r^rWraws r6resolved_base_urlz!CredentialsFile.resolved_base_urls:""$jj$'*s3xs#44rFc |jd}t||jd||_|jE|j |j|_t|j |jdyy)aAdopt the owning client's ``base_url`` as a fallback for the token exchange. Slots between the config file's own ``base_url`` field and the hard-coded default; a ``base_url`` in the config file still wins. The owning client binds exactly once at construction; sharing one instance across clients with different ``base_url`` values is unsupported and silently picks the last bind when the config file doesn't pin a host. r : base_urlfieldN)rrrvrwrz_resolve_base_urlr|)r^rGbounds r6 bind_base_urlzCredentialsFile.bind_base_urlsu$ ut'8'8&9$DE$ << #!33DLLADN 4>>D4E4E3Fj1Q R $rFc|jdrt|djdS|j |jStS)u+base_url precedence: top-level config field → bound (the owning client's base_url, via :meth:`bind_base_url`) → default. Validated against the scheme/TLS rules so a malicious config with ``base_url="http://evil/"`` can't exfiltrate the assertion or refresh token.rGr)r>rRrrwrr^rWs r6rz!CredentialsFile._resolve_base_urlsI ::j !vj)*11#6 6    +'' 'rFc|j}i}|jjdtk7r!|jd}|rt ||d<|S)zReturn headers derived from the config file (e.g. ``workspace_id``). Eagerly reads the config if not yet loaded. The returned dict is suitable for merging into the client's default headers. rJrIzanthropic-workspace-id)r _auth_blockr>rUrR)r^rWheadersrIs r6 extra_headerszCredentialsFile.extra_headerss\ ""$"$     ! !& )-F F!::n5L47 4E01rFc |j |jS |jjd} tj|}t|ts/t d |jd t|j d t#d|}|j%d}t|ts't d |jdt&dt(dt#d|}t+|||j-||_t1|j.|jd|j%d}|r2t3j4t7|j9|_nt=|j |_||_|S#t$r:}t d|jd|j dt dtd |d}~wttf$r!}t d |jd ||d}~wwxYw#tj$r!}t d |jd ||d}~wwxYw)zPRead and cache the config file, resolving ``base_url`` and ``credentials_path``.Nutf-8encodingzConfig file not found at (profile z). Set z' to select a different profile, or set z" to relocate the config directory.zConfig file at  could not be read:  is not valid JSON: z! must contain a JSON object, not .rQauthenticationzV is missing the 'authentication' object. Expected shape: {"authentication": {"type": ""|" ", ...}, ...}rrcredentials_path)rzrv read_textFileNotFoundErrorr%rurrOSErrorUnicodeDecodeErrorjsonloadsJSONDecodeError isinstancedictrJrir r>rUrVrZrr|rpathlibPathrR expanduserr{r")r^rr4 raw_configrWraw_authrXr s r6rzCredentialsFile._load_configsP << #<<  j##--w-?C j"jjoJ*d+ !$"3"3!44UVZ[eVfVoVoUppqr & 3::./(D) !$"3"3!45-.c2F1GX  $h/ vt,//7t~~0A0A/B*-MN88./ %,\\#h-%@%K%K%MD "%;DMM%JD "  U!  +D,=,=+>jHYZ"m#J>JZ[45   +, j ?43D3D2EEYZ]Y^!_`fi i j## j ?43D3D2EEYZ]Y^!_`fi i js:FH  H "5GH )HH  I H<<Ic B|jJ|j}tjdk(r tj|d}tj|jrt d|d tj|j}|d zrt d|d |d d|d|dzrtjd||| |jd} tj |}|j%d}|M|t&k7rD|j(J|j(dj%d}t d|dt&d||S#t$r"}t d|d|j d|d}~wt$r}t d|d ||d}~wwxYw#t$r"}t d|d|j d|d}~wttf$r}t d|d||d}~wwxYw#tj"$r}t d|d||d}~wwxYw)ujRead the credentials file. Re-reads on every call — daemons rotate it. On Unix, verifies the file is not group/world-readable. World-readable credentials files are refused outright; group-readable files log a warning but are accepted. The check is skipped on Windows where POSIX mode bits don't carry the same meaning. NposixF)follow_symlinkszCredentials file not found at rz).Credentials file at z could not be accessed: zu is a symlink; refusing to follow (move the real file into place to keep secret material on the expected filesystem).z is world-readable (mode z#oz); run `chmod 600 z` before retrying.8zMCredentials file at %s is group-readable (mode %#o); consider `chmod 600 %s`.rrrrrJrzcredentials file has type z ; expected z for authentication.type )r{r?namestatrr%rurS_ISLNKst_modeS_IMODEr&warningrrrrrr>CREDENTIALS_FILE_TYPErz) r^rP file_statr4modercredsactualrYs r6_read_credentialsz!CredentialsFile._read_credentialsAs%%111%% 77g  jGGD%@ ||I--.$*4&1jk<< 1 12De|$*4&0I$rS&&*V+=?e| c   b..'.2C  b$(JJsOE 6"  &,A"A<<+ ++ %56::6BI ,VJkBWAZ[++4-9  W% t$'EdV:VZVcVcUffh%ijpss j$';D6AYZ]Y^%_`fii j,! p #A$zRVR_R_Qbbd!eflo o+, b #7v=QRUQV!WX^a a b## b #7v=QRUQV!WX^a a bs_E F"G4 FE<< FFF" G1+GG1G,,G14HHHc|j |jS|jtjt|_|jS)zFReturn an ``httpx.Client``, lazily creating (and tracking) one we own.)timeout)rxryhttpxClientrrs r6_get_http_clientz CredentialsFile._get_http_client{sD    ($$ $  " " *&+ll;Q&RD #&&&rFc|j!|jjd|_|j|jjyy)z3Close the owned ``httpx.Client`` if we created one.N)rycloser}rs r6rzCredentialsFile.closesK  " " .  # # ) ) +&*D #  " " .  # # ) ) + /rFc d|_d|_y)aDrop the cached config so the next call re-reads it from disk. ``CredentialsFile`` caches the parsed config across calls to keep the hot path cheap; a daemon that rotates a profile in place (e.g. flips ``"type": "user_oauth"`` to ``"type": "oidc_federation"``) will not be picked up automatically. Callers that need to react to such changes can call ``reload()`` to force a fresh read on the next ``__call__``. N)rzr}rs r6reloadzCredentialsFile.reloads "&rFc|jJ|jj}|jdddtj|d|jj dd\}} t j|dt j|tj|d jd t j|t j|t j||j t j$|t j&} t j|t j|y#t j|wxYw#t$r' t j |#t"$rYwxYwwxYw#t j|wxYw#t"$rYywxYw) z;Atomic write to the credentials file (NOT the config file).NTi)parentsexist_okrrz.tmp)dirprefixsuffixi)indentr)r{parentmkdirtempfilemkstemprr?fchmodwriterdumpsencodefsyncrreplace BaseExceptionunlinkropenO_RDONLY)r^datarfdtmpdir_fds r6_atomic_write_credentialsz)CredentialsFile._atomic_write_credentialssn%%111''.. TDu = ""v$:P:P:U:U9VVW6XaghC   "e$TZZQ7>>wGH  JJsD22 3 WWVR[[1F !  !    #         sm.A%E5E3 $G.F&GE00E33 F#=FF# FF#FF#&F==G G  G c@|j}td|dS)zEReturn the cached ``authentication`` sub-object from the config file.rQr)rr rs r6rzCredentialsFile._auth_blocks$""$$f-=&>??rFFrac |j}|jd}|tk(r|j||S|tk(r|j ||St d|d|jdtdtd )NrJraUnknown authentication.type  at . Expected  or r)rr>rU_call_oidc_federationrV_call_user_oauthr%rv)r^rbrXrYs r6rfzCredentialsFile.__call__s!HHV$ 1 1--d--P P , ,((](K K*9-tDr%r{r7r rurVtimerrpostr|rrrr HTTPError status_coderr/r0r1CREDENTIALS_FILE_VERSIONrr)r^rXrbrrrrrrerbodyrespr4payload new_accessraw_expires_inrnew_expires_at new_refreshs r6rz CredentialsFile._call_user_oauths R&&(yy0  #78N8N7OOj!kl lHH[) ,EIIl,CTE[E[\J\jI I /2 '/ /@@V'**Y))*, ( ,(?AWAWX !7DIIK*>">"23$6 '<"--0 D   s " '=X Y"&))+[[0 '(\] ] \48 ^,J TYY[)J6kk/2Cm 3i-f *n,l!,o &&u-GG9 n'*]^a]b(cdjm m n:& 'GGYZ9:  s1AH89 I8I IIJ. I;;Jc|jJ|jjsy |jS#t$r%}t |j t rYd}~yd}~wwxYw)u``_read_credentials`` variant that returns ``None`` on absence instead of raising — used by the federation disk-cache path where a missing credentials file just means "exchange now". N)r{existsrr%r __cause__r)r^r4s r6_read_credentials_if_existsz+CredentialsFile._read_credentials_if_exists+sd %%111%%,,. ))+ + #--):;  s; A)A$#A$$A)c|j|j||_|j|jS|j}|so|m|j d}|j d} |rH|Ft j t |tz krtt|t|S|j} |ji|xsitt|j |j"d|S#ttf$rY^wxYw#t$$r!}t&j)d|Yd}~|Sd}~wwxYw)Nrrerd)rrJrrez?federation token disk-cache write-back failed (best-effort): %s)r}_build_workload_delegater{r r>rfloatrr rRr/r0r1rrrr_rerr&debug)r^rXrbcachedrrer_r4s r6rz%CredentialsFile._call_oidc_federation:sJ  " " *&*&C&CD&ID #  ! ! )**, ,113!3!::n5LL1J  ". eJ&7:S&SS&S->3z?[[ '') ^  * *|71$)KK"'"2"2   #z*   ^ IIWY\ ] ]  ^s+6A D :D" DD" E +EE c ddlm}m}|jd}|jJ|jjd}|r|s|dt d|j |jd}|a|jd}|d k7rtd |d |jd }|s+td |jd|j d|dd}|r t|n t} || |||jd|jjd|jd|j} | j|j| S)Nr rr'rKrHz%config file with authentication.type zS must include 'authentication.federation_rule_id' and top-level 'organization_id': rNr3rOzidentity_token source z- is not supported; only 'file' is implementedrPz@identity_token source 'file' requires a non-empty path; profile rz has identity_token=rrLrIrMidentity_token_providerrKrHrLrIrMrs) rrr'r>rzrUrvr%rur,rrr|) r^rXrr'rKrHidentity_token_cfgr3identity_token_pathproviderdelegates r6r z(CredentialsFile._build_workload_delegatehs R!XX&:;||''',,**+<=!'78Q7TUX$$%' "XX&67  )'++H5F$'=fZGt%uvv"4"8"8"@ & %#}}/tD4E4E3FFZ[mZppqs #' =P$%89VgVi /$,1+#xx(<=)).9((7#--/  t~~.rFr=)r~ Optional[str]rsOptional[httpx.Client]rSrTrSrRrSz pathlib.Path)rSr)rGrRrSrT)rWrQrSrR)rSzDict[str, str]rSrQ)rSz httpx.ClientrSrT)rrQrSrTrg)rXrQrbrhrSr )rSzOptional[Dict[str, Any]]rXrQrSr')rirjrkrlr`propertyr~rrrrrrrrrrrrrfrr rr rmrFr6r*r*s'V"&N/3 NN, N  N&!! 5 5S&  &1f8t', '"L@ 16  "OTTHp TY,\3rFr*c4eZdZdZdddZeddZd dZy) r,zAn :class:`IdentityTokenProvider` that reads a JWT from a file on every call. Kubernetes projected service-account tokens (and similar) are rotated in place, so the file MUST be re-read on every invocation rather than cached. NcRt|}|tdtd||_y)Nz;No identity token file path given. Pass `path=` or set the z environment variable.)r#r%r_path)r^rPresolveds r6r`zIdentityTokenFile.__init__s<.t4   MNeMfg()  rFc|jSr=)r!rs r6rPzIdentityTokenFile.paths zzrFc |jjdj}|st d|jd |S#t$r}t d|jd|d}~wt $r"}t d|jd|d|d}~wt $r}t d|jd |d}~wttf$r!}t d|jd ||d}~wwxYw) Nrrz!Identity token file not found at rzIdentity token file at z" is not readable by this process: z;. Check the file mode and the effective uid of the process.zIdentity token path zF is a directory, not a file. Point at the projected token file itself.rz is empty. If this is a Kubernetes projected service-account token, check the volume mount and the serviceAccountToken projection audience.) r!rstriprr%PermissionErrorIsADirectoryErrorrr)r^contentr4s r6rfzIdentityTokenFile.__call__s, kjj**G*<BBDG )$**6PQ  )! ] #DTZZLPQ!RSY\ \  )$**5WX[W\]LM !  &tzzl3<= +, k #:4::,FZ[^Z_!`agj j ks;*A C.A,, C.8B C.!B;;C. C))C.r=)rPz$Union[str, 'os.PathLike[str]', None]rSrTrr)rirjrkrlr`rrPrfrmrFr6r,r,s% rFr,ceZdZdZej dZddd d dZed dZ ed dZ ed fd Z xZ S) r+uAn :class:`AccessTokenProvider` driven by an in-memory config dict (same shape as ``configs/.json``) rather than files on disk. Intended for callers that want to construct an :class:`anthropic.Anthropic` client with a fully programmatic credentials setup — equivalent to the Go SDK's ``option.WithConfig`` / TypeScript SDK's ``ClientOptions.config``. Both ``authentication.type`` discriminator values are supported: ``"oidc_federation"`` ``authentication.credentials_path`` is **optional**. If set, exchanged tokens are cached to / read from that file (same atomic 0600 write as :class:`CredentialsFile`). If omitted, every call performs a fresh jwt-bearer exchange with no on-disk cache. ``"user_oauth"`` ``authentication.credentials_path`` is **required** — it is where the access/refresh tokens live. Behaviour is identical to a file-backed :class:`CredentialsFile` profile of the same shape. The implementation subclasses :class:`CredentialsFile` so the dispatch, refresh-grant, disk-cache and atomic-write logic are shared verbatim; only config loading and identity-token resolution are overridden. zN)rrsc |jd}t|tstdtdt dt d|}|jd}|tt fvrtd|dtd t d |jd }|t k(r|std t d d|_|j|_ d|_ ||_ d|_ d|_ ||_||_|r,t!j"t%|j'nd|_|j+||_t/|j,dy)Nrzaconfig dict is missing the 'authentication' object. Expected shape: {"authentication": {"type": "rrrQrJrrrrrzauthentication.type z requires 'authentication.credentials_path' (where the access/refresh tokens live). For profile-based resolution, use CredentialsFile instead.z zconfig: base_urlr)r>rrr%rUrVr ru_IN_MEMORY_PATHrvrwrxryr}!_identity_token_provider_overriderzrrrRrr{rr|r)r^rWrrsrrXrYrs r6r`zInMemoryConfig.__init__sq::./(D) BB[A\])*/;  $h/HHV$ 68LM M .ym<58=Q?MN &  00.2':>IM1H. Uec2B.C!D!O!O!Qko//7t~~-?@rFc6|jJ|jSr=)rzrs r6rzInMemoryConfig._load_configs||'''||rFcd|_yr=)r}rs r6rzInMemoryConfig.reloads #'rFc |jt| |Sddlm}m}|j d}|jJ|jj d}|r|s|dtd||j|||j d|jj d|j d |j }|j|j|S) Nr rrKrHz%config dict with authentication.type zQ must include 'authentication.federation_rule_id' and top-level 'organization_id'rLrIrMr) r,superr rrr'r>rzrUrrr|)r^rXrr'rKrHr __class__s r6r z'InMemoryConfig._build_workload_delegate s  1 1 973D9 9Q!XX&:;||''',,**+<=!'78Q7TUVW /$($J$J1+#xx(<=)).9((7#--/  t~~.rF)rWrQrzOptional[IdentityTokenProvider]rsrrSrTrrr) rirjrkrlrrr+r`r rrr  __classcell__)r1s@r6r+r+s2#gll#78O DH.2 +A+A"A +A , +A  +AZ'' rFr+)r2rr3zOptional[pathlib.Path]rSz Optional[int])rWrQrXrQrSrT)B __future__rr?rrrloggingrrtypingrrrrrr typing_extensionsr r_typesr r _constantsrrrrrrrrrrrrrrrrrrr r!r"r# _exceptionsr% getLoggerrir&__annotations__rr'__all__r7rCONFIG_FILE_VERSIONrrUrVrZr(r)r*r,r+rmrFr6r>s" BB& 60*'g''1^16 _ "& .#'>??99"RRj++\m_mrF