Open the wire for this hop: its message_start (raw for stream A; suppressed or id-rewritten for a spliced hop), the queued seam frames,

Forward a decoded event in its original wire bytes, preserving SSE fields beyond `event:`/`data:` (`id:`, `retry:`, comment lines). Falls back to

Build the options the base middleware handler hands to `_attempt_request()`. Returns a copy so that mutations made by the request pipeline never

Best-effort project from an explicit credentials object — service-account / impersonated credentials usually know theirs.

Raise a redacted :class:`WorkloadIdentityError` from a non-200 token-endpoint response. Shared between the jwt-bearer exchange path in this modul

Return the stripped contents of ``<config_dir>/active_config``, or ``None`` if the pointer file is missing or empty.

Read the credentials file. Re-reads on every call — daemons rotate it. Secret values in the returned dict (every string field not in

The policy category that caused the refusal; only the beta surface carries one.

base_url (arg or ``ANTHROPIC_GOOGLE_CLOUD_BASE_URL``, resolved by the caller) > derived template. Returns ``None`` when derivation must wait

Derive and set the real base URL once the project is known. Called on every request (after the project back-fill from ADC, if any); a

Resolve a denied call without executing it. The denial itself resolves the call server-side — no result event will ever be posted for

Resolve and validate all Mantle client configuration. Returns (resolved_api_key, resolved_base_url, use_sigv4, merged_headers).

Resolve a configured cap to an effective size limit. ``not_given`` selects ``DEFAULT_MAX_FILE_BYTES``; ``None`` disables the size check (unca

Assert ``candidate`` resolves to a descendant of ``base``, return it verbatim. The containment check uses ``resolve(strict=False)`` on both sides

Convert MCP resource contents to an Anthropic content block.

The content blocks the runner computed and posted back, as carried in ``result`` (the flat ``content`` convenience field was removed).

Enqueue ``ev`` for dispatch, honoring its evaluated permission. A builtin call the server gated behind user confirmation (``evaluated

Drive the session tool loop, yielding an iterator of :class:`DispatchedToolCall`. :meth:`__aiter__` (and the module-level :func:`_run_

A copy of the served hop's response with `seams` prepended to its `content`, or `None` when the body isn't the expected message shape. The ca

Serialize an event back to its SSE wire form (`event: ...\\ndata: ...\\n\\n`). Multi-line `data` is emitted as one `data:` line per line, matchin

Whether an exception raised by a request attempt should be retried. Also returns the HTTP response behind the failure, when there is one, so

A synthetic response standing in for `original`, with `stream` as its body. The spliced frames are emitted post-decode, so the original's con

The chain entry this request starts at (-1 = the original params). Only an explicit `BetaFallbackState` pin moves the start; without one

Drop entries whose value is an `Omit` removal marker.

A copy of `body` with `{type: "fallback"}` seam blocks filtered out of the replayed message history; `body` itself when there are none. An as

Drop the leading ``top`` component from ``safe`` (an already-confined relative path). Returns ``""`` for the bare top-dir entry itself.

Yield ``call`` to the consumer, tolerating a consumer that left early. ``BrokenResourceError`` — the consumer broke out of the iterator;

Convert a hop's accumulated response blocks to the appended assistant turn. A `fallback_has_prefill_claim` refusal guarantees the partial output

``User-Agent`` value sent on token-endpoint POSTs. Computed lazily so this module doesn't need to import ``_version`` at module load time (th

Warn when an ``ANTHROPIC_API_KEY`` / ``ANTHROPIC_AUTH_TOKEN`` from the environment is set alongside signals that would normally drive profile /

Warn when an explicit ``api_key=`` / ``auth_token=`` argument shadows an explicit ``credentials=`` provider. Call *after* any copy-inheritance

Emit a log warning at most once per ``key`` per process.

A copy of `request` with `betas` appended to its `anthropic-beta` header (skipping values already present) and the middleware's helper-telemetry t

Fold a refused hop's outcome in, readying the next hop.

Note: these endpoints are called automatically by the pre-built environment worker provided in the SDKs and CLI, for orchestrating se

Run a runnable tool's optional cleanup. Drives the legacy ``aclose`` / ``close`` attribute (awaited if it returns an awaitable) and, when the

Higher order function that takes one of our bound API methods and an `APIResponse` class and wraps the method to support returning the given respo

Higher order function that takes one of our bound API methods and an `APIResponse` class and wraps the method to support streaming and returning t

The chain state after stream A's chainable refusal.

Adopt the owning client's ``base_url`` as a fallback for the token exchange. Slots between the config file's own ``base_url`` field and

Close the response and release the connection. Automatically called if the response body is read to completion.

Close the response and release the connection. Automatically called if the response body is read to completion.

Close the owned ``httpx.Client`` if we created one.

Close the underlying ``httpx.Client`` if we created it.

The accumulated content blocks, in start order.

Create a new client instance re-using the same options given to the current client with optional overriding.

Create a new client instance re-using the same options given to the current client with optional overriding.

Create a new client instance re-using the same options given to the current client with optional overriding.

Cancel the idle countdown; only signals on an actual transition.

Execute a memory command and return the result. This method dispatches to the appropriate handler method based on the command type (v

Given a type like `Stream[T]`, returns the generic type variable `T`. This also handles the case where a concrete subclass is given, e.g. ```

Process one event, returning the frames to forward for it.

The outcome once the hop's stream is fully consumed (or cut early).

Frames still owed when the stream ends without a chainable refusal.

Gets the proxy mappings based on environment variables. We use our own logic to parse these variables, as HTTPX doesn’t allow full config

Get the helper name from an object, if any.