ÁjddlmZddlZddlmZmZmZmZddlm Z gdZ Gdde Z e dZdd Zdd Zdd Zdd dd ZddZy)) annotationsN)AnyDictOptionalcast) SecretStr)r_NonObjectPayloadError_wrap_secret_fields_unwrap_secret_json_dumps_secrets_strip_tracebackc$eZdZdZdfd ZxZS)r uRaised by :func:`_wrap_secret_fields` for JSON payloads that are not objects. Carries only the payload's type name — a non-object payload can be an echo of the request (assertion included), so it must never bind in a caller's frame or ride along in an exception. c8t|d|||_y)Nzexpected a JSON object, got )super__init__ type_name)selfr __class__s I/tmp/pip-target-k_scjv0h/lib/python/anthropic/lib/credentials/_secrets.pyrz_NonObjectPayloadError.__init__s 7 {CD")rstrreturnNone)__name__ __module__ __qualname____doc__r __classcell__)rs@rr r s ##rr ) typeversion expires_at token_type expires_inscopeerrorerror_description error_urict|ts!t|j}~t |t d|}|D]<}|t vs t|j|ts,t||||<>|S)uiWrap the secret fields of a parsed JSON object in ``SecretStr``. Called at every boundary where credential material enters SDK code. Traceback frames retain their locals, so any dict a raise site (or a frame an error merely propagates through) still holds must already be redacted — ``SecretStr`` renders as ``SecretStr('**********')`` under crash reporters that capture and render locals. String values are secret unless their key is in ``_PLAIN_KEYS``; wrapped empty strings stay falsy (``SecretStr`` defines ``__len__`` across the supported pydantic range), so ``if not creds.get("access_token")`` checks behave unchanged. Only top-level values are wrapped — the credential formats are flat; revisit if a nested shape ever appears. Mutates ``payload`` in place — a copy would leave the raw-valued original reachable — and returns it. Non-object payloads raise :class:`_NonObjectPayloadError` from this frame, with the payload unbound first, so the raw value never lands in any frame of the traceback — callers translate to their own redacted error. Dict[str, Any]) isinstancedictrrr r _PLAIN_KEYSgetrr)payloadrmappingkeys rr r 3sz* gt $M** $Y//#W-G3 k !jS1A3&G$WS\2GCL3 NrcFt|tr|jS|S)zInverse of :func:`_wrap_secret_fields` for a single value; pass-through for values that were never wrapped (absent or non-string fields).)r*rget_secret_valuevalues rr r Ss!(2%'C5 ! ! #NNrct|tr|jStdt |j d)NzObject of type z is not JSON serializable)r*rr2 TypeErrorrrr3s r _json_defaultr7Ys;%#%%'' od5k&:&:%;;TU VVr)indentcXtj||tjdS)z``json.dumps`` with ``SecretStr`` values unwrapped at dump time. Returns bytes so call sites can pass the result inline (request content, ``os.write``) without binding the raw serialization to a local. )r8defaultzutf-8)jsondumpsr7encode)r.r8s rr r _s" ::gfm D K KG TTrcd|_|S)uDetach the frames chained onto ``err`` before raising from it. Foreign frames (json decoder, httpx transport) hold raw payloads — request bodies, response text, credentials-file contents — as locals. Dropping the traceback removes them from every renderer and programmatic chain-walker, while the cause's type and message (which never carry the payload) stay visible in renderings. N) __traceback__)errs rr r hsC Jr)r.rrr))r4rrr)r.rr8z Optional[int]rbytes)r@ BaseExceptionrrB) __future__rr;typingrrrrpydanticr__all__r6r frozensetr,r r r7r r rrrIs\" ,,  #Y #   "@O W BFU r