܎j) ddlmZddlZddlZddlZddlmZddlmZdZ dZ dZ d Z d Z d Zd Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZdZd:dZd;d Z dd,Z$d?d/Z%d@d0Z&d@d1Z'dAd3Z(dAd4Z)dBdCd8Z*dAd9Z+dS)D) annotationsN)Optional)AnthropicErrorz+urn:ietf:params:oauth:grant-type:jwt-bearer refresh_tokenz/v1/oauth/tokeng>@zoauth-2025-04-20zoidc-federation-2026-04-01xdefaultzhttps://api.anthropic.comANTHROPIC_API_KEYANTHROPIC_AUTH_TOKENANTHROPIC_CONFIG_DIRANTHROPIC_PROFILEANTHROPIC_IDENTITY_TOKENANTHROPIC_IDENTITY_TOKEN_FILEANTHROPIC_FEDERATION_RULE_IDANTHROPIC_ORGANIZATION_IDANTHROPIC_SERVICE_ACCOUNT_IDANTHROPIC_WORKSPACE_IDANTHROPIC_SCOPEANTHROPIC_BASE_URLreturnstrcddlm}d|S)z``User-Agent`` value sent on token-endpoint POSTs. Computed lazily so this module doesn't need to import ``_version`` at module load time (the credentials package is otherwise import-light). r __version__zanthropic-python/)_versionrrs RC:\Projects\DSCons\.venv\Lib\site-packages\anthropic\lib\credentials\_constants.py _user_agentr8s$ (''''' ,{ , ,, pathlib.Pathctjt}|rt j|St jdkr^tjd}|rt j|n#tjdz dz }|dz Stjdz dz S)uYResolve the config directory. ``ANTHROPIC_CONFIG_DIR`` env var → platform default. Platform defaults: * Linux & macOS: ``~/.config/anthropic/`` — XDG-style on both platforms for consistency across SDKs (macOS does **not** use ``~/Library/Application Support/``). * Windows: ``%APPDATA%\Anthropic\`` win32APPDATAAppDataRoaming Anthropicz.config anthropic) osenvirongetENV_CONFIG_DIRpathlibPathsysplatformhome)envappdatabases r _config_dirr4Cs *.. ( (C !|C    |w*..++(/`w|G$$$W\5F5F5H5H95TW`5`k!! <     *[ 88r Optional[str]c tdz d}n#t$rYdSwxYw|pdS)zxReturn the stripped contents of ``/active_config``, or ``None`` if the pointer file is missing or empty. active_configzutf-8)encodingN)r4 read_textstripOSError)names r_read_active_config_pointerr=Xs` /::G:LLRRTT tt <4s7: AActjt}|rt |t|St }|t St |d|S)uResolve the active profile name. ``ANTHROPIC_PROFILE`` env var → ``/active_config`` pointer file → ``"default"`` literal. The resolved name is validated against path- traversal patterns before being returned. sourceNzactive_config pointer file)r(r)r* ENV_PROFILE_validate_profile_namer=DEFAULT_PROFILE)r1r<s r_active_profilerDbsf *.. % %C s;7777 & ( (D |4(DEEEE KrurlfieldNonec|d}|drdS|drdSt|d|d)a;Reject non-``https://`` token-endpoint URLs. Localhost is allowed for testing so ``base_url="http://localhost:8080"`` works against a local ``oauth_server`` instance; everything else must be TLS-encrypted because the body of these POSTs carries the assertion JWT or a long-lived refresh token. /zhttps://N)zhttp://localhostzhttp://127.0.0.1z http://[::1]z must use https (got z^); the token-exchange endpoint carries secret material and cannot be used over cleartext HTTP.)lowerrstrip startswithr)rErFlowereds r_require_httpsrNtsiikk  %%G*%%RSS   K Ks K K K  rz profile namer?profiler@c n|st|d||krt|d|d|drt|d|dddtjfD] }|r||vrt|d|d|d!d |vrt|d|d d S) aReject profile names that could escape the config directory. Profile names come from user-controlled sources (``ANTHROPIC_PROFILE``, the ``active_config`` pointer file, ``CredentialsFile(profile=...)``) and are interpolated into filesystem paths. A value like ``"../../etc/shadow"`` would otherwise let a read of ``configs/.json`` escape the config root entirely. Pass ``source=`` so the error message names where the bad value came from. z must not be empty. z$ has leading or trailing whitespace..z must not start with a dot.rI\um must not contain path separators — profiles are filenames under the config directory. Pick a name without z must not contain null bytes.N)rr:rLr(sep)rOr@rUs rrBrBs, =;;;<<<'--//!!XXXXXYYY#QOOOOOPPPT26"  3'>> ccGccZ]ccc QQQQQRRRrr3 candidatec|d}|d} ||n)#t$r}td|d|d|d}~wwxYw|S)uAssert ``candidate`` resolves to a descendant of ``base``, return it verbatim. The containment check uses ``resolve(strict=False)`` on both sides so symlinks and ``..`` segments are normalized for the purposes of escape detection. The returned path is the *original* (unresolved) candidate — callers that care about symlink following must handle it themselves (e.g. ``os.stat(follow_symlinks=False)``). F)strictzResolved path z escapes config directory rRN)resolve relative_to ValueErrorr)r3rV base_resolvedcandidate_resolvederrs r_resolve_underr_sLLL..M"**%*88w&&}5555 wwwl.@ll\illlmmsvvw sA A*A%%A*cnt|t}t||dz |dz S)zCPath to ``/configs/.json`` (non-secret, 0644).configs.jsonrBr4r_rOr3s r_config_file_pathres<7### ==D $y 0g3D3D3D D E EErcnt|t}t||dz |dz S)zCPath to ``/credentials/.json`` (secret, 0600). credentialsrbrcrds r_credentials_file_pathrhs<7### ==D $} 4'7H7H7H H I IIrboolc ttS#ttf$rYdSwxYw)aTighter auto-discover check for the tier-1 credential chain. Returns ``True`` only if the *active* profile's config file exists. The previous version returned ``True`` for any ``.json`` under ``configs/``, which meant a stray ``configs/work.json`` on disk was enough to steer ``default_credentials()`` into reading ``configs/default.json`` and failing because ``default.json`` wasn't there. F)rerDis_filer;rrr_has_active_profile_configrmsN !2!233;;=== ^ $uus,/AAc"tduS)uTrue if the user wrote a non-empty ``active_config`` pointer file. This is an explicit opt-in signal equivalent to setting ``ANTHROPIC_PROFILE``: the user has told us which profile to load. If the target config file is missing or malformed, the chain should surface that error rather than silently falling through — matching how ``ANTHROPIC_PROFILE=missing`` behaves today. N)r=rlrr_has_explicit_active_configros ' ( ( 44rpathstr | os.PathLike[str] | Nonepathlib.Path | Nonec|tj|Stjt }|rtj|SdS)u<ctor arg → ``ANTHROPIC_IDENTITY_TOKEN_FILE`` → ``None``.N)r,r-r(r)r*ENV_IDENTITY_TOKEN_FILE)rpr1s rresolve_identity_token_pathrusI |D!!! *..0 1 1C !|C   4rctjts$tjtrdSt rdStjt rntjtrJtjts$tjtrdSdS)uTrue if the environment / filesystem contains signals that would normally drive the tier-1 (profile) or tier-2 (env federation) paths of :func:`default_credentials`. Used by the shadow-warning detection in the client constructor: if a static ``ANTHROPIC_API_KEY`` / ``ANTHROPIC_AUTH_TOKEN`` is set alongside any of these signals, the auto-discovery would have yielded a credential but got silently shadowed — and the user should know. TF) r(r)r*rAr+roENV_FEDERATION_RULE_IDENV_ORGANIZATION_IDrtENV_IDENTITY_TOKENrlrr"_has_auto_discoverable_credentialsrzs z~~k""bjnn^&D&Dt"$$t z~~,--"*..AT2U2U :>>1 2 2 bjnnEW6X6X 4 5r)rr)rr )rr5)rErrFrrrG)rOrr@rrrG)r3r rVr rr )rOrrr )rri)N)rprqrrr), __future__rr(r.r,typingr _exceptionsrGRANT_TYPE_JWT_BEARERGRANT_TYPE_REFRESH_TOKENTOKEN_ENDPOINTTOKEN_EXCHANGE_TIMEOUTOAUTH_API_BETA_HEADERFEDERATION_BETA_HEADERADVISORY_REFRESH_SECONDSMANDATORY_REFRESH_SECONDSrCDEFAULT_BASE_URL ENV_API_KEYENV_AUTH_TOKENr+rAryrtrwrxENV_SERVICE_ACCOUNT_IDENV_WORKSPACE_ID ENV_SCOPE ENV_BASE_URLrr4r=rDrNrBr_rerhrmrorurzrlrrrs"""""" ))))))E*" +6." '(! 09717+  # ----9999*$&;ISSSSSS4$FFFFJJJJ     5 5 5 5r