i8OdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlmZmZddlmZddlmZmZddlmZddlmZd d lmZmZmZmZd d l m!Z!d d l"m#Z#m$Z$m%Z%d dl&m'Z'm(Z(m)Z)ejTe+Z,dZ-eGddZ. d#dZ/ d$ d%dZ0 d&dZ1e2ejfejhejjejlejnejphZ9ddd d'dZ: d(dZ; d)dZd,dZ?d-dZ@d.dZAd/d ZB d0d!ZCd1d"ZDy)2uwMaterialize a :class:`SessionStore`-backed resume into a temp ``CLAUDE_CONFIG_DIR``. When ``options.resume`` (or ``options.continue_conversation``) is paired with ``options.session_store``, the session JSONL almost certainly does not exist on local disk — it lives in the external store. The CLI subprocess only knows how to resume from a local file. This module bridges the gap: it loads the session from the store, writes it to a temporary directory laid out exactly like ``~/.claude/``, and returns the path so the caller can point the subprocess at it via ``CLAUDE_CONFIG_DIR``. Mirrors the behavior of the TypeScript SDK. ) annotationsN) AwaitableCallable)suppress) dataclassreplace)Path)Any)ClaudeAgentOptions SessionKey SessionStoreSessionStoreFlushMode)_store_implements)_get_projects_dir_validate_uuidproject_key_for_directory)MAX_PENDING_BYTESMAX_PENDING_ENTRIESTranscriptMirrorBatcherzClaude Code-credentialsc0eZdZUdZded<ded<ded<y) MaterializedResumeuResult of :func:`materialize_resume_session`. Attributes: config_dir: Temporary directory laid out like ``~/.claude/`` — point the subprocess at it via ``CLAUDE_CONFIG_DIR``. resume_session_id: Session ID to pass as ``--resume``. When the input was ``continue_conversation``, this is the most-recent session resolved via :meth:`SessionStore.list_sessions`. cleanup: Coroutine that removes ``config_dir`` (best-effort). Call it after the subprocess exits. r config_dirstrresume_session_idzCallable[[], Awaitable[None]]cleanupN)__name__ __module__ __qualname____doc____annotations__p/volume1/homes/robertsu/coba/app/.venv/lib/python3.12/site-packages/claude_agent_sdk/_internal/session_resume.pyrr2s  **r$rczt|i|jdt|ji|jdS)aReturn a copy of ``options`` repointed at a materialized temp config dir. Sets ``CLAUDE_CONFIG_DIR`` in ``env``, ``resume`` to the materialized session id, and clears ``continue_conversation`` (already resolved to a concrete session id during materialization). CLAUDE_CONFIG_DIRF)envresumecontinue_conversation)rr(rrr)options materializeds r%apply_materialized_optionsr-EsH  kk \%<%.cleanups ***s )rrr)returnNone) session_storer)r*load_timeout_msrcwdr_load_candidate_resolve_continue_candidater tempfilemkdtempmkdir _write_jsonl_copy_auth_filesr(r_materialize_subkeys BaseExceptionrBr) r+r1 timeout_s project_keyresolved session_identries project_dirrrCs @r%materialize_resume_sessionrXzs  ! !E }~~g&C&C''$.I+GKK8K ~~! '.. ) 1( W^^YWW4UKSS"JH$$,<=>H+k9 $6[j\#88'B 7;;/ UN 3&xk:y  + $ IXS$  !*** s[B E3 E E3#E $+E3A"E2E3E7E3 E3EE0(E+)E00E3g?)retriesdelaycK|jsyt|D]} tj|ytj|dy#t$r2}|j t vrt|tsYd}~IYd}~nd}~wwxYw tj|d{7#tj$rtj|dwxYww)aBest-effort ``shutil.rmtree`` with retries on transient lock errors. On Windows, AV/indexer can briefly hold a handle on freshly-written files (notably ``.credentials.json``), causing rmtree to fail with EBUSY/EPERM. Retry a few times with a short backoff; after exhausting retries, fall back to ``ignore_errors=True`` (matches the previous behavior, but gives the handle a chance to release first so the access token doesn't leak in temp). Never raises. NT) ignore_errors) existsrangeshutilrmtreeOSErrorerrno_RETRYABLE_RMTREE_ERRNOS isinstancePermissionErrorasynciosleepCancelledError)pathrZr[_es r%rBrBs ;;= 7^  MM$    MM$d+ ww66z?@    --& & &%%  MM$d 3   sQ C AC  B"B > C  BC B1*B-+B10C 1,CC cpKt|j||d|d|d{}|sy||fS7 w)zBLoad entries for ``session_id``; return ``None`` if empty/missing.rSrU SessionStore.load() for session N) _with_timeoutload)r1rSrUrRrVs r%rIrIsM" ;jIJ *:,7G  w s &64 6c<Kt|j||dd{}|syt|ddD][}|d}t|t ||||d{}|-|dd}t |t r|jd durY|cSy7u7;w) uPick the most-recently-modified non-sidechain session. Sidechain transcripts are mirrored as ordinary top-level keys and often have the highest mtime (their append lands after the main session's in the same flush). Walk newest→oldest, loading each candidate (the load is needed anyway) and skipping sidechains so ``--continue`` resumes the user's conversation, not a subagent's. Matches the CLI's own ``--continue`` filter and ``list_sessions_from_store()``. zSessionStore.list_sessions()Nc |dS)Nmtimer#)ss r%z-_resolve_continue_candidate..sqzr$T)keyreverserUrr isSidechain)rp list_sessionssortedrrIredictget)r1rSrRsessionscandsidloadedfirsts r%rJrJs# K(&H x%94H<  #  & &uk3 JJ > q !  eT "uyy'?4'G  I %Ks! BB;BB:BBc K tj||d{S7#tj$r#}t|dt |dzd|d}~wt $r}t|d||d}~wwxYww)zKAwait ``coro`` with a timeout, re-raising as ``RuntimeError`` with context.)timeoutNz timed out after r9z ms during resume materializationz' failed during resume materialization: )rgwait_for TimeoutError RuntimeErrorint Exception)cororRwhatrls r%rprp%sW%%dI>>>>   f%c)d*:&;%<=    WdV#J1#NOUVVWs<A;%#%A;%A8A A8"A33A88A;cv|jjdd|jdd5}|D]9}|jt j |d|jd; d d d t t5|jd d d d y #1swY3xYw#1swYy xYw) zHStream-write ``entries`` as one JSON line each to ``path`` (mode 0o600).Tr;wutf-8encoding),:) separators N) parentrMopenwritejsondumpsrrbchmod)rjrVfrls r%rNrN2sKKdT2 3 )QA GGDJJqZ8 9 GGDM * '  5   * )  s?B#B/#B,/B8c|jdxstjjd}|r t|ntjdz }d}|dz }t t 5|jd}ddd|n|jds]tjjds>|jds-tjjdst}||}t||dz |rt|d z ntjd z }t||d z y#1swYxYw) aRCopy ``.credentials.json`` (refreshToken redacted) and ``.claude.json``. Source resolution mirrors the CLI: - ``.credentials.json`` lives under the config dir (default ``~/.claude/``) - ``.claude.json`` lives at ``$CLAUDE_CONFIG_DIR/.claude.json`` when set, else ``~/.claude.json`` (NOT ``~/.claude/.claude.json``) r'z.claudeNz.credentials.jsonrrANTHROPIC_API_KEYCLAUDE_CODE_OAUTH_TOKENz .claude.json) r}osenvironr homerFileNotFoundError read_text_read_keychain_credentials_write_redacted_credentials_copy_if_present)rCopt_envcaller_config_dirsource_config_dir creds_json creds_pathkeychainclaude_json_srcs r%rOrO=s) $78BJJNN=$5 $))+ :Q"J"%88J # $))7);  % ! KK+ , ?R0S KK1 2zz~~78./  !J H7J,JK  .0 YY[> ) _h&?@= % $s -D>>Ec|y|} tj|}t|tr|j dnd}t|trd|vr|d=tj |}|j|dtt5|jddddy#tj tf$rYXwxYw#1swYyxYw)uWrite ``creds_json`` with ``claudeAiOauth.refreshToken`` removed. The resumed subprocess runs under a redirected ``CLAUDE_CONFIG_DIR``; if it refreshed, the single-use refresh token would be consumed server-side and the new tokens written to a location the parent never reads back — leaving the parent's stored creds revoked. With no ``refreshToken``, the subprocess's refresh check short-circuits. N claudeAiOauth refreshTokenrrr) rloadsrer|r}rJSONDecodeError ValueError write_textrrbr)rdstoutdataoauths r%rros C zz*%-7d-C) eT "~'>n%**T"CNN3N) '  %    * -     sA$B( C(CCCcxtt5tj||dddy#1swYyxYwrA)rrr`copyfile)srcrs r%rrs% # $S! % $ $s09c tjdk7ry tjj dxst j } tjddd|dd tgd d d d }|jdk7ry|jj}|xsdS#t$rd}YcwxYw#t$rYywxYw)uRead OAuth credentials JSON from the macOS Keychain (default service name). Best-effort — returns ``None`` on any error or non-macOS platforms. DarwinNUSERzclaude-code-usersecurityzfind-generic-passwordz-az-wz-sTF)capture_outputtextrcheckr)platformsystemrrr}getpassgetuserr subprocessrun_KEYCHAIN_SERVICE_NAME returncodestdoutstrip)userresultrs r%rrsH$"zz~~f%:):'&   "A --   C ;$/ "!"$ s#5B%%B6% B32B36 CCc K||z }t|j||d|d|d{}|D]}t||stj d|'|||d} t|j | |d|d|d{} | sZg} g} | D]I} t | tr&| jdd k(r| j| 9| j| K||z j||z jd z}| r t|| | s| d jDcic]\}}|dk7s ||}}}|j|jdtd  d z}|jj!d d |j#t%j&|dt)t*5|j-ddddy77Ycc}}w#1swYxYww)zFLoad and write all subagent transcripts/metadata under ``session_id``.rnz(SessionStore.list_subkeys() for session Nz<[SessionStore] skipping unsafe subpath from list_subkeys: %r)rSrUsubpathroz subpath typeagent_metadatar>z .meta.jsonTr;rrr)rpr?_is_safe_subpathloggerwarningrqrer|r}append with_namenamerNitemslenrrMrrrrrbr)r1rCrWrSrUrR session_dirsubkeysrsub_key sub_entriesmetadata transcriptrlsub_filekv meta_content meta_files r%rPrPs *K! ;jQR 2:,?G   5 NNNPW  '$  * JJw  .zl)G9 M   *, " A!T"quuV}8H'H"!!!$   ')44 7 " ( (8 3   : . -5b\-?-?-AQ-ATQQ&[AqD-ALQ ** .X/,>I    " "4$ " ?  L!9G L'"&#"a * 4R #"sZ+G5GAG5GB G5G5+ G"9G">BG5>G( G5G5"G5(G2 -G5c|syt|js|jdrytj|dryt dt jd|Dryd|vry||z } |j|jdzj}|j|jy#ttf$rYywxYw) ziReject subpaths that are empty, absolute, contain ``..``, or escape ``session_dir`` after resolution.F)/\rc3$K|]}|dv yw)).z..Nr#).0ps r% z#_is_safe_subpath..s A%@1 %@sz[\\/]r>T)r is_absolute startswithntpath splitdriveanyresplitrrresolve relative_torrb)rrtargetrs r%rrs  G}  "g&8&8&E !!$ ARXXh%@ AA 7 "F##FKK($:;CCE[0023   s:A CCC)r+r r,rrDr )batched) r1rr,MaterializedResume | Noner(zdict[str, str] | Noner3z3Callable[[SessionKey | None, str], Awaitable[None]]r6rrDr)r+r rDr)rjr rZrr[floatrDrE) r1rrSrrUrrRrrDtuple[str, list[Any]] | None)r1rrSrrRrrDr)rzAwaitable[Any]rRrrrrDr )rjr rVz list[Any]rDrE)rCr rzdict[str, str]rDrE)r str | Nonerr rDrE)rr rr rDrE)rDr)r1rrCr rWr rSrrUrrRrrDrE)rrrr rDbool)Er! __future__rrgrcrrloggingrrrrr`rrKcollections.abcrr contextlibr dataclassesrrpathlibr typingr typesr r rrsession_store_validationrr~rrrtranscript_mirror_batcherrrr getLoggerrrrrr-r7rX frozensetEBUSYEMFILEENFILE ENOTEMPTYEPERMEACCESrdrBrIrJrprNrOrrrrPrr#r$r%rs= #    /*WW7RR   8 $3 ++ +$ /A2)2  + B  &   BF FF^%       #$C, ,,,1, ,B   &) 7: GL !  &)6;!B W/Ad4" "J@' @'@'@' @'  @'  @' @'F r$