Build a :class:`CredentialResult` for the env-var federation path (step 4 in the precedence spec). Returns ``None`` if the required trio isn't

Build the middleware invocation chain. The chain only depends on the immutable `self._middleware` tuple so it is built once at constr

Build the middleware invocation chain. The chain only depends on the immutable `self._middleware` tuple so it is built once at constr

Build the result-event params matching ``ev``'s tool-call kind. A custom tool call (``agent.custom_tool_use``) is answered with a ``user.cust

Call the provider, retrying once on a 401 from the token endpoint.

Interactive-login profile. With a ``client_id`` in the auth block, we run the refresh_token grant on expiry; without one, we treat the

Check token usage and compact messages if threshold exceeded. Returns True if compaction was performed, False otherwise.

Check token usage and compact messages if threshold exceeded. Returns True if compaction was performed, False otherwise.

Remove the skill directories :meth:`setup_skills` downloaded. Only the directories this context created are removed — a pre-existing

Parse a credentials-file ``expires_at`` field into Unix seconds.

Convert MCP ``CallToolResult`` to a value suitable for returning from ``call()``.

Create JSON schema from function signature using pydantic.

Path to ``<config_dir>/credentials/<profile>.json`` (secret, 0600).

The environment for the bash subprocess, with the runner's own credentials scrubbed. The bash tool runs model-issued commands, so it must nev

Stream the skill archive to a temp file, then extract it into ``dest``.

Feed one hop's SSE events through `reader`, yielding the frames to forward.

Feed one hop's SSE events through `reader`, yielding the frames to forward. The outcome is read from `reader.finish()` afterwards — async generat

Run ``ev``'s tool, post its result, and surface the dispatched call. ``confirmation`` is the verdict that released the call onto the work

Fill empty profile fields from corresponding ANTHROPIC_* env vars. The profile file is authoritative — this only fills fields the file left u

Convert the `APIResponse` returned by the middleware chain into the value the original caller expects. The middleware chain operates on `APIR

Convert the `AsyncAPIResponse` returned by the middleware chain into the value the original caller expects. The middleware chain operates on

Best-effort ``work.stop(force=True)`` for an item that can't be processed. A 409 just means the work already stopped; anything else is logged but

Extract description from parsed docstring.

Tighter auto-discover check for the tier-1 credential chain. Returns ``True`` only if the *active* profile's config file exists. The previous

True if the environment / filesystem contains signals that would normally drive the tier-1 (profile) or tier-2 (env federation) paths of :func

Keep the work-item lease alive while a session is being served. ``work`` must be bound to a sub-client authenticated for the environment; thi

Replace {name} placeholders in `template`, quoting each value with `quoter`. Placeholder names are looked up in `values`. Raises: Ke

Invoke ``self._provider``, tolerating legacy zero-arg callables.

True when ``fn`` is a function produced by :func:`contextlib.asynccontextmanager`.

True when ``fn`` is a function produced by :func:`contextlib.contextmanager`. ``contextmanager`` wraps the generator function with ``functools.wr

Given an iterator that yields raw binary data, iterate over it and yield individual SSE chunks

Extract the values of a ``Required[Literal[...]]`` TypedDict field.

Merge two mappings of the same type, removing any values that are instances of `Omit`. In cases with duplicate keys the second mapping takes prec

Adapter: convert a flat legacy config dict into the new nested shape. Many tests in this file predate the schema migration and pass legacy fl

Record an allow/deny verdict and release the held call it gates, if any.

Returns a float of the number of seconds (not milliseconds) to wait after retrying, or None if unspecified. About the Retry-After header: htt

`overrides` applied flat against `base`: a key set to a value overrides it, a key explicitly `None` unsets it, an absent key keeps the base value.

Hook for mutating the given options

Hook for mutating the given options

This method is used as a callback for mutating the `Request` object after it has been constructed. This is useful for cases where you

This method is used as a callback for mutating the `Request` object after it has been constructed. This is useful for cases where you

Merge a URL argument together with any 'base_url' on the client, to create the URL used for the outgoing request.

Read an image/PDF as a base64 ``image``/``document`` content block. The text cap does not apply here — its 256 KiB default would reject most

``_read_credentials`` variant that returns ``None`` on absence instead of raising — used by the federation disk-cache path where a mis

Read full history and enqueue every tool-call event still unanswered. Two-pass: read the whole history before emitting so a tool-call whose

The locally runnable tool name a tool-change reference resolves to. Only ``tool_reference`` names a runnable tool; ``mcp_tool_reference`` / `

Fall back to ``env_var`` for ``value``; raise a clear error if still empty. The ``ANTHROPIC_*`` env vars are the ones the ``ant worker poll --on-

Resolve ``version`` to the concrete numeric timestamp the ``/v1/skills/{id}/versions/{version}`` endpoints require. ``session.agent.skills[].

Internal: drive a :class:`SessionToolRunner` as an async context manager. Kept as a thin module-level shim because :class:`~anthropic.lib.env

Return ``name`` as a confined relative path, or raise on path-traversal. Strips ``.`` components; rejects absolute paths and any ``..`` component

Build the runner's request client. With an environment key, defer to :func:`_copy_client_with_bearer_auth` for a Bearer-only sub-client. With

(code name, locals) for every traceback frame owned by the anthropic package, across the full ``__context__`` / ``__cause__`` chain.

Post ``tool_result`` back to the session, retrying transient failures. ``tool_use_id`` is the originating tool-call event id — passed