@oneie/claude 0.6.0 → 0.8.0

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/types.js

@@ -1,266 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkloadIdentityError = exports.ADVISORY_REFRESH_BACKOFF_IN_SECONDS = exports.MANDATORY_REFRESH_THRESHOLD_IN_SECONDS = exports.ADVISORY_REFRESH_THRESHOLD_IN_SECONDS = exports.FEDERATION_BETA_HEADER = exports.OAUTH_API_BETA_HEADER = exports.TOKEN_ENDPOINT = exports.GRANT_TYPE_REFRESH_TOKEN = exports.GRANT_TYPE_JWT_BEARER = void 0;
-exports.requireSecureTokenEndpoint = requireSecureTokenEndpoint;
-exports.parseTokenResponse = parseTokenResponse;
-exports.redactSensitive = redactSensitive;
-exports.checkCredentialsFileSafety = checkCredentialsFileSafety;
-exports.writeCredentialsFileAtomic = writeCredentialsFileAtomic;
-const error_1 = require("../../core/error.js");
-exports.GRANT_TYPE_JWT_BEARER = 'urn:ietf:params:oauth:grant-type:jwt-bearer';
-exports.GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
-exports.TOKEN_ENDPOINT = '/v1/oauth/token';
-/**
- * `anthropic-beta` value required on authenticated API requests using an
- * OAuth bearer token, and on `refresh_token` grants against the token endpoint.
- */
-exports.OAUTH_API_BETA_HEADER = 'oauth-2025-04-20';
-/**
- * `anthropic-beta` value required on jwt-bearer exchanges against the token
- * endpoint. It routes the request to the federation service; it must NOT be
- * sent on `refresh_token` grants, which are handled by a different backend.
- */
-exports.FEDERATION_BETA_HEADER = 'oidc-federation-2026-04-01';
-exports.ADVISORY_REFRESH_THRESHOLD_IN_SECONDS = 120;
-exports.MANDATORY_REFRESH_THRESHOLD_IN_SECONDS = 30;
-exports.ADVISORY_REFRESH_BACKOFF_IN_SECONDS = 5;
-const MAX_TOKEN_RESPONSE_BYTES = 1 << 20;
-/**
- * Rejects base URLs that would cause a JWT assertion or refresh token to be
- * sent over cleartext HTTP. Loopback hosts are allowed for local development.
- */
-function requireSecureTokenEndpoint(baseURL) {
-    if (!baseURL)
-        return;
-    let u;
-    try {
-        u = new URL(baseURL);
-    }
-    catch (err) {
-        throw new WorkloadIdentityError(`Invalid token endpoint base URL "${baseURL}": ${err}`);
-    }
-    if (u.protocol === 'https:')
-        return;
-    // WHATWG URL.hostname returns bracketed IPv6 ("[::1]"); Go's net/url strips them.
-    const host = u.hostname.toLowerCase().replace(/^\[|\]$/g, '');
-    if (u.protocol === 'http:' && (host === 'localhost' || host === '127.0.0.1' || host === '::1')) {
-        return;
-    }
-    throw new WorkloadIdentityError(`Refusing to send credential over non-https token endpoint "${baseURL}"`);
-}
-/**
- * Reads the response body as text, parses it as a token-endpoint JSON
- * response, validates `access_token` is present, and rejects a non-Bearer
- * `token_type` when one is provided. Reads at most
- * {@link MAX_TOKEN_RESPONSE_BYTES} from the body stream.
- */
-async function parseTokenResponse(resp, requestId) {
-    const text = await readLimitedText(resp);
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        throw new WorkloadIdentityError(`Token endpoint returned non-JSON response (status ${resp.status})`, resp.status, redactSensitive(text), requestId);
-    }
-    if (!data.access_token) {
-        throw new WorkloadIdentityError(`Token endpoint response missing access_token: ${JSON.stringify(redactSensitive(data))}`, resp.status, redactSensitive(data), requestId);
-    }
-    if (data.token_type && data.token_type.toLowerCase() !== 'bearer') {
-        throw new WorkloadIdentityError(`Token endpoint response: unsupported token_type "${data.token_type}" (want Bearer)`, resp.status, redactSensitive(data), requestId);
-    }
-    return data;
-}
-const MAX_ERROR_BODY_CHARS = 2000;
-// RFC 6749 §5.2 standard error-response fields. Anything else in a token
-// endpoint error body is potentially echoed input (assertion, refresh_token,
-// access_token, …) and is dropped rather than allowlisted-with-exceptions.
-const SAFE_ERROR_KEYS = new Set(['error', 'error_description', 'error_uri']);
-/**
- * Returns a redacted copy of a token-endpoint error body for safe inclusion
- * in an exception. Strings are truncated; objects keep only the RFC 6749
- * §5.2 error fields.
- */
-function redactSensitive(body) {
-    if (body == null)
-        return body;
-    if (typeof body === 'string') {
-        let parsed;
-        try {
-            parsed = JSON.parse(body);
-        }
-        catch {
-            if (body.length <= MAX_ERROR_BODY_CHARS)
-                return body;
-            return body.slice(0, MAX_ERROR_BODY_CHARS) + `... <${body.length - MAX_ERROR_BODY_CHARS} more chars>`;
-        }
-        return JSON.stringify(redactSensitive(parsed));
-    }
-    if (typeof body === 'object' && !Array.isArray(body)) {
-        const out = {};
-        for (const [k, v] of Object.entries(body)) {
-            if (SAFE_ERROR_KEYS.has(k))
-                out[k] = v;
-        }
-        return out;
-    }
-    return null;
-}
-/**
- * Best-effort safety check on a credentials file before reading it.
- *
- * On POSIX: resolves symlinks (so containerized deployments that mount the
- * credential as a symlink to a tmpfs-backed file keep working), then rejects
- * the resolved target if it is group- or world- readable or writable. A uid
- * mismatch on the resolved target is surfaced via `onWarn` since
- * root-written/app-read is common in init-container setups. No-op on Windows.
- */
-async function checkCredentialsFileSafety(path, onWarn = (m) => console.warn(`anthropic-sdk: ${m}`)) {
-    if (typeof process === 'undefined' || process.platform === 'win32')
-        return;
-    const fs = await Promise.resolve().then(() => __importStar(require('node:fs')));
-    let resolved = path;
-    let st;
-    try {
-        resolved = await fs.promises.realpath(path);
-        st = await fs.promises.stat(resolved);
-    }
-    catch {
-        return; // ENOENT etc — let the subsequent read surface a precise error
-    }
-    const mode = st.mode & 0o777;
-    // 0o022 = group/world write; 0o044 = group/world read.
-    if (mode & 0o022) {
-        throw new WorkloadIdentityError(`Credentials file at ${resolved} is group/world-writable (mode 0o${mode.toString(8)}); ` +
-            `this allows other local users to plant tokens. Run \`chmod 600 ${resolved}\`.`);
-    }
-    if (mode & 0o044) {
-        throw new WorkloadIdentityError(`Credentials file at ${resolved} is group/world-readable (mode 0o${mode.toString(8)}); ` +
-            `run \`chmod 600 ${resolved}\` before retrying.`);
-    }
-    if (typeof process.getuid === 'function' && st.uid !== process.getuid()) {
-        onWarn(`credentials file at ${resolved} is owned by uid ${st.uid} (current process uid ${process.getuid()}); ` + `verify this is intentional.`);
-    }
-}
-/**
- * Atomically writes JSON to `targetPath` via a `.tmp` sibling + rename,
- * with fsync on the file and (best-effort) on the parent directory.
- * Creates the parent directory with mode 0700 and the file with mode 0600.
- */
-async function writeCredentialsFileAtomic(targetPath, data) {
-    const fs = await Promise.resolve().then(() => __importStar(require('node:fs')));
-    const path = await Promise.resolve().then(() => __importStar(require('node:path')));
-    const dir = path.dirname(targetPath);
-    await fs.promises.mkdir(dir, { recursive: true, mode: 0o700 });
-    // Unique temp name avoids two concurrent writers (different processes or
-    // SDK instances) racing on the same '.tmp' sibling and corrupting each
-    // other's bytes mid-write before the rename.
-    const tmpPath = `${targetPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
-    try {
-        const fh = await fs.promises.open(tmpPath, 'w', 0o600);
-        try {
-            await fh.writeFile(JSON.stringify(data, null, 2));
-            await fh.sync();
-        }
-        finally {
-            await fh.close();
-        }
-        await fs.promises.rename(tmpPath, targetPath);
-    }
-    catch (err) {
-        // Don't leak the temp file if anything between create and rename failed.
-        await fs.promises.unlink(tmpPath).catch(() => { });
-        throw err;
-    }
-    // fsync the parent directory so the rename survives a crash.
-    try {
-        const dirFh = await fs.promises.open(dir, 'r');
-        try {
-            await dirFh.sync();
-        }
-        finally {
-            await dirFh.close();
-        }
-    }
-    catch {
-        // Directory fsync is best-effort (unsupported on some platforms, e.g. Windows).
-    }
-}
-async function readLimitedText(resp) {
-    if (!resp.body) {
-        return '';
-    }
-    const reader = resp.body.getReader();
-    const chunks = [];
-    let received = 0;
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        if (received + value.length > MAX_TOKEN_RESPONSE_BYTES) {
-            const remaining = MAX_TOKEN_RESPONSE_BYTES - received;
-            if (remaining > 0)
-                chunks.push(value.subarray(0, remaining));
-            await reader.cancel();
-            break;
-        }
-        chunks.push(value);
-        received += value.length;
-    }
-    let merged;
-    if (chunks.length === 1) {
-        merged = chunks[0];
-    }
-    else {
-        merged = new Uint8Array(chunks.reduce((n, c) => n + c.length, 0));
-        let offset = 0;
-        for (const c of chunks) {
-            merged.set(c, offset);
-            offset += c.length;
-        }
-    }
-    return new TextDecoder('utf-8').decode(merged);
-}
-class WorkloadIdentityError extends error_1.AnthropicError {
-    constructor(message, statusCode = null, body = null, requestId = null) {
-        super(message);
-        this.statusCode = statusCode;
-        this.body = body;
-        this.requestId = requestId;
-    }
-}
-exports.WorkloadIdentityError = WorkloadIdentityError;
-//# sourceMappingURL=types.js.map

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/credentials/types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,gEAeC;AAQD,gDAiCC;AAaD,0CAoBC;AAWD,gEAmCC;AAOD,gEAkCC;AAnPD,+CAAkD;AAwCrC,QAAA,qBAAqB,GAAG,6CAA6C,CAAC;AACtE,QAAA,wBAAwB,GAAG,eAAe,CAAC;AAC3C,QAAA,cAAc,GAAG,iBAAiB,CAAC;AAEhD;;;GAGG;AACU,QAAA,qBAAqB,GAAG,kBAAkB,CAAC;AAExD;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,4BAA4B,CAAC;AAEtD,QAAA,qCAAqC,GAAG,GAAG,CAAC;AAC5C,QAAA,sCAAsC,GAAG,EAAE,CAAC;AAC5C,QAAA,mCAAmC,GAAG,CAAC,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC;AAEzC;;;GAGG;AACH,SAAgB,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO;IACpC,kFAAkF;IAClF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,MAAM,IAAI,qBAAqB,CAAC,8DAA8D,OAAO,GAAG,CAAC,CAAC;AAC5G,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,kBAAkB,CACtC,IAAc,EACd,SAAwB;IAExB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAC7B,qDAAqD,IAAI,CAAC,MAAM,GAAG,EACnE,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,qBAAqB,CAC7B,iDAAiD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EACxF,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAC7B,oDAAoD,IAAI,CAAC,UAAU,iBAAiB,EACpF,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,OAAO,IAAwD,CAAC;AAClE,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC;AAE7E;;;;GAIG;AACH,SAAgB,eAAe,CAAC,IAAa;IAC3C,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;gBAAE,OAAO,IAAI,CAAC;YACrD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,GAAG,QAAQ,IAAI,CAAC,MAAM,GAAG,oBAAoB,cAAc,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,0BAA0B,CAC9C,IAAY,EACZ,SAAgC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE1E,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC3E,MAAM,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+DAA+D;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;IAC7B,uDAAuD;IACvD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,QAAQ,oCAAoC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACtF,kEAAkE,QAAQ,KAAK,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,QAAQ,oCAAoC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACtF,mBAAmB,QAAQ,qBAAqB,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxE,MAAM,CACJ,uBAAuB,QAAQ,oBAC7B,EAAE,CAAC,GACL,yBAAyB,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,6BAA6B,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,0BAA0B,CAAC,UAAkB,EAAE,IAAa;IAChF,MAAM,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;IACnC,MAAM,IAAI,GAAG,wDAAa,WAAW,GAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,yEAAyE;IACzE,uEAAuE;IACvE,6CAA6C;IAC7C,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,wBAAwB,GAAG,QAAQ,CAAC;YACtD,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,MAAa,qBAAsB,SAAQ,sBAAc;IAKvD,YACE,OAAe,EACf,aAA4B,IAAI,EAChC,OAAgB,IAAI,EACpB,YAA2B,IAAI;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAhBD,sDAgBC"}

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/types.mjs

@@ -1,224 +0,0 @@
-import { AnthropicError } from "../../core/error.mjs";
-export const GRANT_TYPE_JWT_BEARER = 'urn:ietf:params:oauth:grant-type:jwt-bearer';
-export const GRANT_TYPE_REFRESH_TOKEN = 'refresh_token';
-export const TOKEN_ENDPOINT = '/v1/oauth/token';
-/**
- * `anthropic-beta` value required on authenticated API requests using an
- * OAuth bearer token, and on `refresh_token` grants against the token endpoint.
- */
-export const OAUTH_API_BETA_HEADER = 'oauth-2025-04-20';
-/**
- * `anthropic-beta` value required on jwt-bearer exchanges against the token
- * endpoint. It routes the request to the federation service; it must NOT be
- * sent on `refresh_token` grants, which are handled by a different backend.
- */
-export const FEDERATION_BETA_HEADER = 'oidc-federation-2026-04-01';
-export const ADVISORY_REFRESH_THRESHOLD_IN_SECONDS = 120;
-export const MANDATORY_REFRESH_THRESHOLD_IN_SECONDS = 30;
-export const ADVISORY_REFRESH_BACKOFF_IN_SECONDS = 5;
-const MAX_TOKEN_RESPONSE_BYTES = 1 << 20;
-/**
- * Rejects base URLs that would cause a JWT assertion or refresh token to be
- * sent over cleartext HTTP. Loopback hosts are allowed for local development.
- */
-export function requireSecureTokenEndpoint(baseURL) {
-    if (!baseURL)
-        return;
-    let u;
-    try {
-        u = new URL(baseURL);
-    }
-    catch (err) {
-        throw new WorkloadIdentityError(`Invalid token endpoint base URL "${baseURL}": ${err}`);
-    }
-    if (u.protocol === 'https:')
-        return;
-    // WHATWG URL.hostname returns bracketed IPv6 ("[::1]"); Go's net/url strips them.
-    const host = u.hostname.toLowerCase().replace(/^\[|\]$/g, '');
-    if (u.protocol === 'http:' && (host === 'localhost' || host === '127.0.0.1' || host === '::1')) {
-        return;
-    }
-    throw new WorkloadIdentityError(`Refusing to send credential over non-https token endpoint "${baseURL}"`);
-}
-/**
- * Reads the response body as text, parses it as a token-endpoint JSON
- * response, validates `access_token` is present, and rejects a non-Bearer
- * `token_type` when one is provided. Reads at most
- * {@link MAX_TOKEN_RESPONSE_BYTES} from the body stream.
- */
-export async function parseTokenResponse(resp, requestId) {
-    const text = await readLimitedText(resp);
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        throw new WorkloadIdentityError(`Token endpoint returned non-JSON response (status ${resp.status})`, resp.status, redactSensitive(text), requestId);
-    }
-    if (!data.access_token) {
-        throw new WorkloadIdentityError(`Token endpoint response missing access_token: ${JSON.stringify(redactSensitive(data))}`, resp.status, redactSensitive(data), requestId);
-    }
-    if (data.token_type && data.token_type.toLowerCase() !== 'bearer') {
-        throw new WorkloadIdentityError(`Token endpoint response: unsupported token_type "${data.token_type}" (want Bearer)`, resp.status, redactSensitive(data), requestId);
-    }
-    return data;
-}
-const MAX_ERROR_BODY_CHARS = 2000;
-// RFC 6749 §5.2 standard error-response fields. Anything else in a token
-// endpoint error body is potentially echoed input (assertion, refresh_token,
-// access_token, …) and is dropped rather than allowlisted-with-exceptions.
-const SAFE_ERROR_KEYS = new Set(['error', 'error_description', 'error_uri']);
-/**
- * Returns a redacted copy of a token-endpoint error body for safe inclusion
- * in an exception. Strings are truncated; objects keep only the RFC 6749
- * §5.2 error fields.
- */
-export function redactSensitive(body) {
-    if (body == null)
-        return body;
-    if (typeof body === 'string') {
-        let parsed;
-        try {
-            parsed = JSON.parse(body);
-        }
-        catch {
-            if (body.length <= MAX_ERROR_BODY_CHARS)
-                return body;
-            return body.slice(0, MAX_ERROR_BODY_CHARS) + `... <${body.length - MAX_ERROR_BODY_CHARS} more chars>`;
-        }
-        return JSON.stringify(redactSensitive(parsed));
-    }
-    if (typeof body === 'object' && !Array.isArray(body)) {
-        const out = {};
-        for (const [k, v] of Object.entries(body)) {
-            if (SAFE_ERROR_KEYS.has(k))
-                out[k] = v;
-        }
-        return out;
-    }
-    return null;
-}
-/**
- * Best-effort safety check on a credentials file before reading it.
- *
- * On POSIX: resolves symlinks (so containerized deployments that mount the
- * credential as a symlink to a tmpfs-backed file keep working), then rejects
- * the resolved target if it is group- or world- readable or writable. A uid
- * mismatch on the resolved target is surfaced via `onWarn` since
- * root-written/app-read is common in init-container setups. No-op on Windows.
- */
-export async function checkCredentialsFileSafety(path, onWarn = (m) => console.warn(`anthropic-sdk: ${m}`)) {
-    if (typeof process === 'undefined' || process.platform === 'win32')
-        return;
-    const fs = await import('node:fs');
-    let resolved = path;
-    let st;
-    try {
-        resolved = await fs.promises.realpath(path);
-        st = await fs.promises.stat(resolved);
-    }
-    catch {
-        return; // ENOENT etc — let the subsequent read surface a precise error
-    }
-    const mode = st.mode & 0o777;
-    // 0o022 = group/world write; 0o044 = group/world read.
-    if (mode & 0o022) {
-        throw new WorkloadIdentityError(`Credentials file at ${resolved} is group/world-writable (mode 0o${mode.toString(8)}); ` +
-            `this allows other local users to plant tokens. Run \`chmod 600 ${resolved}\`.`);
-    }
-    if (mode & 0o044) {
-        throw new WorkloadIdentityError(`Credentials file at ${resolved} is group/world-readable (mode 0o${mode.toString(8)}); ` +
-            `run \`chmod 600 ${resolved}\` before retrying.`);
-    }
-    if (typeof process.getuid === 'function' && st.uid !== process.getuid()) {
-        onWarn(`credentials file at ${resolved} is owned by uid ${st.uid} (current process uid ${process.getuid()}); ` + `verify this is intentional.`);
-    }
-}
-/**
- * Atomically writes JSON to `targetPath` via a `.tmp` sibling + rename,
- * with fsync on the file and (best-effort) on the parent directory.
- * Creates the parent directory with mode 0700 and the file with mode 0600.
- */
-export async function writeCredentialsFileAtomic(targetPath, data) {
-    const fs = await import('node:fs');
-    const path = await import('node:path');
-    const dir = path.dirname(targetPath);
-    await fs.promises.mkdir(dir, { recursive: true, mode: 0o700 });
-    // Unique temp name avoids two concurrent writers (different processes or
-    // SDK instances) racing on the same '.tmp' sibling and corrupting each
-    // other's bytes mid-write before the rename.
-    const tmpPath = `${targetPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
-    try {
-        const fh = await fs.promises.open(tmpPath, 'w', 0o600);
-        try {
-            await fh.writeFile(JSON.stringify(data, null, 2));
-            await fh.sync();
-        }
-        finally {
-            await fh.close();
-        }
-        await fs.promises.rename(tmpPath, targetPath);
-    }
-    catch (err) {
-        // Don't leak the temp file if anything between create and rename failed.
-        await fs.promises.unlink(tmpPath).catch(() => { });
-        throw err;
-    }
-    // fsync the parent directory so the rename survives a crash.
-    try {
-        const dirFh = await fs.promises.open(dir, 'r');
-        try {
-            await dirFh.sync();
-        }
-        finally {
-            await dirFh.close();
-        }
-    }
-    catch {
-        // Directory fsync is best-effort (unsupported on some platforms, e.g. Windows).
-    }
-}
-async function readLimitedText(resp) {
-    if (!resp.body) {
-        return '';
-    }
-    const reader = resp.body.getReader();
-    const chunks = [];
-    let received = 0;
-    for (;;) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        if (received + value.length > MAX_TOKEN_RESPONSE_BYTES) {
-            const remaining = MAX_TOKEN_RESPONSE_BYTES - received;
-            if (remaining > 0)
-                chunks.push(value.subarray(0, remaining));
-            await reader.cancel();
-            break;
-        }
-        chunks.push(value);
-        received += value.length;
-    }
-    let merged;
-    if (chunks.length === 1) {
-        merged = chunks[0];
-    }
-    else {
-        merged = new Uint8Array(chunks.reduce((n, c) => n + c.length, 0));
-        let offset = 0;
-        for (const c of chunks) {
-            merged.set(c, offset);
-            offset += c.length;
-        }
-    }
-    return new TextDecoder('utf-8').decode(merged);
-}
-export class WorkloadIdentityError extends AnthropicError {
-    constructor(message, statusCode = null, body = null, requestId = null) {
-        super(message);
-        this.statusCode = statusCode;
-        this.body = body;
-        this.requestId = requestId;
-    }
-}
-//# sourceMappingURL=types.mjs.map

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/types.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/lib/credentials/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,6BAAyB;AAwClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AACxD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAAG,CAAC;AACzD,MAAM,CAAC,MAAM,sCAAsC,GAAG,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAErD,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,OAAO,MAAM,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO;IACpC,kFAAkF;IAClF,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,MAAM,IAAI,qBAAqB,CAAC,8DAA8D,OAAO,GAAG,CAAC,CAAC;AAC5G,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAc,EACd,SAAwB;IAExB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,IAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAC7B,qDAAqD,IAAI,CAAC,MAAM,GAAG,EACnE,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,qBAAqB,CAC7B,iDAAiD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EACxF,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAqB,CAC7B,oDAAoD,IAAI,CAAC,UAAU,iBAAiB,EACpF,IAAI,CAAC,MAAM,EACX,eAAe,CAAC,IAAI,CAAC,EACrB,SAAS,CACV,CAAC;IACJ,CAAC;IACD,OAAO,IAAwD,CAAC;AAClE,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,yEAAyE;AACzE,6EAA6E;AAC7E,2EAA2E;AAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,CAAC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB;gBAAE,OAAO,IAAI,CAAC;YACrD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,GAAG,QAAQ,IAAI,CAAC,MAAM,GAAG,oBAAoB,cAAc,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAAY,EACZ,SAAgC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE1E,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC3E,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+DAA+D;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;IAC7B,uDAAuD;IACvD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,QAAQ,oCAAoC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACtF,kEAAkE,QAAQ,KAAK,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,qBAAqB,CAC7B,uBAAuB,QAAQ,oCAAoC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACtF,mBAAmB,QAAQ,qBAAqB,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxE,MAAM,CACJ,uBAAuB,QAAQ,oBAC7B,EAAE,CAAC,GACL,yBAAyB,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,6BAA6B,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,UAAkB,EAAE,IAAa;IAChF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,yEAAyE;IACzE,uEAAuE;IACvE,6CAA6C;IAC7C,MAAM,OAAO,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACrC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,wBAAwB,GAAG,QAAQ,CAAC;YACtD,IAAI,SAAS,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtB,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,cAAc;IAKvD,YACE,OAAe,EACf,aAA4B,IAAI,EAChC,OAAgB,IAAI,EACpB,YAA2B,IAAI;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/user-oauth.d.mts

@@ -1,21 +0,0 @@
-import type { Fetch } from "../../internal/builtin-types.mjs";
-import type { AccessTokenProvider } from "./types.mjs";
-export type UserOAuthConfig = {
-    credentialsPath: string;
-    clientId?: string | undefined;
-    baseURL: string;
-    fetch: Fetch;
-    userAgent?: string | undefined;
-    onSafetyWarning?: ((msg: string) => void) | undefined;
-};
-/**
- * Reads a user-oauth credential file. Returns the cached access token while
- * fresh; on expiry performs a `refresh_token` grant and writes the new
- * tokens back to the credentials file (atomic replace, fsync'd).
- *
- * If `clientId` is empty, the access token is treated as static — the
- * credentials file is read on every call but no refresh is attempted, and
- * an expired token without a `refresh_token` raises.
- */
-export declare function userOAuthProvider(config: UserOAuthConfig): AccessTokenProvider;
-//# sourceMappingURL=user-oauth.d.mts.map

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/user-oauth.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-oauth.d.mts","sourceRoot":"","sources":["../../src/lib/credentials/user-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,yCAAqC;AAE1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAgB;AAgBnD,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,eAAe,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACvD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CA2G9E"}

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/user-oauth.d.ts

@@ -1,21 +0,0 @@
-import type { Fetch } from "../../internal/builtin-types.js";
-import type { AccessTokenProvider } from "./types.js";
-export type UserOAuthConfig = {
-    credentialsPath: string;
-    clientId?: string | undefined;
-    baseURL: string;
-    fetch: Fetch;
-    userAgent?: string | undefined;
-    onSafetyWarning?: ((msg: string) => void) | undefined;
-};
-/**
- * Reads a user-oauth credential file. Returns the cached access token while
- * fresh; on expiry performs a `refresh_token` grant and writes the new
- * tokens back to the credentials file (atomic replace, fsync'd).
- *
- * If `clientId` is empty, the access token is treated as static — the
- * credentials file is read on every call but no refresh is attempted, and
- * an expired token without a `refresh_token` raises.
- */
-export declare function userOAuthProvider(config: UserOAuthConfig): AccessTokenProvider;
-//# sourceMappingURL=user-oauth.d.ts.map

package/scripts/node_modules/@anthropic-ai/sdk/lib/credentials/user-oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-oauth.d.ts","sourceRoot":"","sources":["../../src/lib/credentials/user-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,wCAAqC;AAE1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAgB;AAgBnD,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,eAAe,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACvD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,mBAAmB,CA2G9E"}