"jSSKJr SSKrSSKJrJrJrJr SSKJ r /SQr "SS\ 5r \ "S5rSS jrSS jrSS jrSS .SS jjrSSjrg)) annotationsN)AnyDictOptionalcast) SecretStr)r_NonObjectPayloadError_wrap_secret_fields_unwrap_secret_json_dumps_secrets_strip_tracebackc0^\rSrSrSrSU4SjjrSrU=r$)r uRaised by `_wrap_secret_fields` for JSON payloads that are not objects. Carries only the payload's type name — a non-object payload can be an echo of the request (assertion included), so it must never bind in a caller's frame or ride along in an exception. c6>[TU]SU35 Xlg)Nzexpected a JSON object, got )super__init__ type_name)selfr __class__s _/home/mande/repo/quber/.venv/lib/python3.13/site-packages/anthropic/lib/credentials/_secrets.pyr_NonObjectPayloadError.__init__s 7 {CD")r)rstrreturnNone)__name__ __module__ __qualname____firstlineno____doc__r__static_attributes__ __classcell__)rs@rr r s ##rr ) typeversion expires_at token_type expires_inscopeerrorerror_description error_uric[U[5(d![U5RnA[ U5e[ SU5nUHDnU[ ;dM[URU5[5(dM5[X#5X#'MF U$)uWrap the secret fields of a parsed JSON object in `SecretStr`. Called at every boundary where credential material enters SDK code. Traceback frames retain their locals, so any dict a raise site (or a frame an error merely propagates through) still holds must already be redacted — `SecretStr` renders as `SecretStr('**********')` under crash reporters that capture and render locals. String values are secret unless their key is in `_PLAIN_KEYS`; wrapped empty strings stay falsy (`SecretStr` defines `__len__` across the supported pydantic range), so `if not creds.get("access_token")` checks behave unchanged. Only top-level values are wrapped — the credential formats are flat; revisit if a nested shape ever appears. Mutates `payload` in place — a copy would leave the raw-valued original reachable — and returns it. Non-object payloads raise `_NonObjectPayloadError` from this frame, with the payload unbound first, so the raw value never lands in any frame of the traceback — callers translate to their own redacted error. Dict[str, Any]) isinstancedictr#rr r _PLAIN_KEYSgetrr)payloadrmappingkeys rr r 3sw* gt $ $M** $Y//#W-G k !jS1A3&G&G$W\2GL NrcP[U[5(aUR5$U$)zInverse of `_wrap_secret_fields` for a single value; pass-through for values that were never wrapped (absent or non-string fields).)r.rget_secret_valuevalues rr r Ss$(2%'C'C5 ! ! #NNrc[U[5(aUR5$[S[ U5R S35e)NzObject of type z is not JSON serializable)r.rr6 TypeErrorr#rr7s r _json_defaultr;Ys>%##%%'' od5k&:&:%;;TU VVr)indentcR[R"X[S9RS5$)z`json.dumps` with `SecretStr` values unwrapped at dump time. Returns bytes so call sites can pass the result inline (request content, `os.write`) without binding the raw serialization to a local. )r<defaultzutf-8)jsondumpsr;encode)r2r<s rr r _s ::gm D K KG TTrcSUlU$)uDetach the frames chained onto `err` before raising from it. Foreign frames (json decoder, httpx transport) hold raw payloads — request bodies, response text, credentials-file contents — as locals. Dropping the traceback removes them from every renderer and programmatic chain-walker, while the cause's type and message (which never carry the payload) stay visible in renderings. N) __traceback__)errs rr r hsC Jr)r2rrr-)r8rrr)r2rr<z Optional[int]rbytes)rD BaseExceptionrrF) __future__rr?typingrrrrpydanticr__all__r:r frozensetr0r r r;r r rrrMs\" ,,  #Y #   "@O W BFU r