܎jAddlmZddlZddlmZmZmZmZddlm Z gdZ Gdde Z e dZdd ZddZddZddddZddZdS)) annotationsN)AnyDictOptionalcast) SecretStr)r_NonObjectPayloadError_wrap_secret_fields_unwrap_secret_json_dumps_secrets_strip_tracebackc$eZdZdZdfd ZxZS)r uRaised by :func:`_wrap_secret_fields` for JSON payloads that are not objects. Carries only the payload's type name — a non-object payload can be an echo of the request (assertion included), so it must never bind in a caller's frame or ride along in an exception. type_namestrreturnNonec^td|||_dS)Nzexpected a JSON object, got )super__init__r)selfr __class__s PC:\Projects\DSCons\.venv\Lib\site-packages\anthropic\lib\credentials\_secrets.pyrz_NonObjectPayloadError.__init__s/ C CCDDD")rrrr)__name__ __module__ __qualname____doc__r __classcell__)rs@rr r sG ##########rr ) typeversion expires_at token_type expires_inscopeerrorerror_description error_uripayloadrrDict[str, Any]c4t|ts$t|j}~t |t d|}|D]K}|t vr@t||trt||||<L|S)uiWrap the secret fields of a parsed JSON object in ``SecretStr``. Called at every boundary where credential material enters SDK code. Traceback frames retain their locals, so any dict a raise site (or a frame an error merely propagates through) still holds must already be redacted — ``SecretStr`` renders as ``SecretStr('**********')`` under crash reporters that capture and render locals. String values are secret unless their key is in ``_PLAIN_KEYS``; wrapped empty strings stay falsy (``SecretStr`` defines ``__len__`` across the supported pydantic range), so ``if not creds.get("access_token")`` checks behave unchanged. Only top-level values are wrapped — the credential formats are flat; revisit if a nested shape ever appears. Mutates ``payload`` in place — a copy would leave the raw-valued original reachable — and returns it. Non-object payloads raise :class:`_NonObjectPayloadError` from this frame, with the payload unbound first, so the raw value never lands in any frame of the traceback — callers translate to their own redacted error. r)) isinstancedictrrr r _PLAIN_KEYSgetrr)r(rmappingkeys rr r 3s* gt $ $0MM* $Y///#W--G33 k ! !jS1A1A3&G&G !$WS\22GCL NrvaluecXt|tr|n|S)zInverse of :func:`_wrap_secret_fields` for a single value; pass-through for values that were never wrapped (absent or non-string fields).)r+rget_secret_valuer1s rr r Ss*(2%'C'C N5 ! ! # # #Nrct|tr|Stdt |jd)NzObject of type z is not JSON serializable)r+rr3 TypeErrorrrr4s r _json_defaultr7YsI%##(%%''' Ud5kk&:UUU V VVr)indentr8 Optional[int]bytesc`tj||tdS)z``json.dumps`` with ``SecretStr`` values unwrapped at dump time. Returns bytes so call sites can pass the result inline (request content, ``os.write``) without binding the raw serialization to a local. )r8defaultzutf-8)jsondumpsr7encode)r(r8s rr r _s) :gfm D D D K KG T TTrerr BaseExceptioncd|_|S)uDetach the frames chained onto ``err`` before raising from it. Foreign frames (json decoder, httpx transport) hold raw payloads — request bodies, response text, credentials-file contents — as locals. Dropping the traceback removes them from every renderer and programmatic chain-walker, while the cause's type and message (which never carry the payload) stay visible in renderings. N) __traceback__)r@s rr r hsC Jr)r(rrr))r1rrr)r(rr8r9rr:)r@rArrA) __future__rr=typingrrrrpydanticr__all__r6r frozensetr-r r r7r r rrrJs7"""""" ,,,,,,,,,,,,    # # # # #Y # # # i  "@OOOO WWWW BFUUUUUU      r