b\j€SrSSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK J r SSK J r J r JrJrJrJr SSKJrJr SSKJr SSKJr SS KJr SS KJrJr SS KJrJ r J!r!J"r" SSK#r#SSK$r#SS K%J&r& S SK'J(r(J)r) SSK*J+r+J,r, SSK-J.r. SSK/J0r0J1r1J2r2J3r3J4r4J5r5 S SK6J7r7J8r8J9r9 \ (aSSK:J;r; /SQrSr?\?r@SrASrBSrCSrD\R"S5rFS2SjrG\R"S5rIS3SjrJS4S jrKS5S!jrL\"S"S#55rMS6S$jrN"S%S&\5rO"S'S(5rPS7S)jrQS7S*jrRS7S+jrSS7S,jrTS8S-jrUS7S.jrVS7S/jrWS9S0jrXS:S1jrYg);u>Reference implementations of the ``agent_toolset_20260401`` tools — ``bash``, ``read``, ``write``, ``edit``, ``glob``, ``grep`` — plus the workdir/skills :class:`AgentToolContext`. This sits next to the other ``lib/tools`` helpers (the Messages tool runner, the memory tool, …). Importing it pulls in ``subprocess`` etc., so it is kept out of ``anthropic.lib.tools.__init__`` — depend on it explicitly (``from anthropic.lib.tools.agent_toolset import beta_agent_toolset_20260401``). The result of :func:`beta_agent_toolset_20260401` is a plain ``list[BetaAsyncFunctionTool]`` — *async* function tools, so it is for the **async** runners only: ``client.beta.sessions.events.tool_runner(...)`` (the ``SessionToolRunner``, always async) for a managed-agents session, or — via the :class:`~anthropic.lib.environments.EnvironmentWorker` — the self-hosted environment worker. The sync ``Anthropic`` ``messages.tool_runner`` accepts ``BetaRunnableTool``, which excludes the async function tools this returns, so it cannot consume this toolset. .. warning:: ``bash`` is **stateful**: it owns a persistent ``/bin/bash`` subprocess that is only torn down by its ``close`` cleanup hook. Only ``SessionToolRunner`` (and the ``EnvironmentWorker`` built on it) invoke that hook. The Messages ``client.beta.messages.tool_runner(...)`` does **not** call ``close``, so handing this toolset to the Messages tool runner leaks the bash subprocess (one orphaned shell per run). Run stateful tools under ``client.beta.sessions.events.tool_runner(...)`` / the environment worker, or drop ``bash`` from the toolset before using the Messages tool runner. Trust model: the file tools confine to ``workdir`` (symlink-aware) and are safe without a sandbox; ``bash`` is unrestricted and should run inside one. See :class:`AgentToolContext`. ) annotationsN)S_ISREG) TYPE_CHECKINGAnyListOptional NamedTuplecast)Path PurePosixPath)partial)islice)asynccontextmanager)field dataclass)MappingCallable Awaitable AsyncIterator)run_sync)_withindownload_session_skills)NotGiven not_given)is_given).BetaManagedAgentsAgentToolset20260401BashInput.BetaManagedAgentsAgentToolset20260401EditInput.BetaManagedAgentsAgentToolset20260401GlobInput.BetaManagedAgentsAgentToolset20260401GrepInput.BetaManagedAgentsAgentToolset20260401ReadInput/BetaManagedAgentsAgentToolset20260401WriteInput) ToolErrorBetaAsyncFunctionToolbeta_async_tool)AsyncAnthropic) AgentToolContext BashSession BashResult resolve_pathbeta_agent_toolset_20260401beta_bash_toolbeta_read_toolbeta_write_toolbeta_edit_toolbeta_glob_toolbeta_grep_toolig^@iiiPz\x1b\[[0-9;?]*[ -/]*[@-~]c2[U5(aU$[$)uResolve a configured cap to an effective size limit. ``not_given`` selects ``DEFAULT_MAX_FILE_BYTES``; ``None`` disables the size check (uncapped); a positive int is the cap. Governs only the size guard — callers still reject non-regular files. )rDEFAULT_MAX_FILE_BYTES) configureds W/var/www/website/venv/lib/python3.13/site-packages/anthropic/lib/tools/agent_toolset.py_resolve_max_bytesr8`s"*--:I3IIz!anthropic.lib.tools.agent_toolsetc[RR5VVs0sHupURS5(aMX_M! snn$s snnf)uThe environment for the bash subprocess, with the runner's own credentials scrubbed. The bash tool runs model-issued commands, so it must never inherit the runner's ``ANTHROPIC_*`` variables (API key, environment key, per-work session tokens): a prompt-injected ``echo $ANTHROPIC_API_KEY`` would otherwise land the credential straight in the session transcript. Passing an explicit ``env`` to :class:`AgentToolContext` does NOT add to this default — it FULLY REPLACES it. The provided mapping becomes the entire bash environment verbatim; nothing here is merged in, so callers who want the scrubbed process environment plus extras must build that mapping themselves. ANTHROPIC_)osenvironitems startswith)kvs r7_default_bash_envrBms< ZZ--/ R/TQq||L7QDAD/ RR Rs A A c^[U[5(aSnO[U[5(aSnOk[U[5(aSnOS[U[5(aSnO;[U[ 5(aSnO#UR =(d SR5n[USUSU35$)zMap a filesystem ``OSError`` to a consistent, runtime-independent message. The raw ``OSError`` string is platform-specific (``[Errno 2] ENOENT: ...``); normalise the common cases so the model sees the same wording everywhere. zno such file or directoryznot a directoryzis a directoryzpermission deniedzfile already existsz i/o errorz: ) isinstanceFileNotFoundErrorNotADirectoryErrorIsADirectoryErrorPermissionErrorFileExistsErrorstrerrorlowerr$)op file_pathereasons r7 _fs_errorrP~s !&'', A) * *" A( ) )! A ' '$ A ' '&**+ 224 t2i[6(3 44r9c/$NrSr9r7_empty_skill_dirsrTs Ir9c\rSrSr%Sr\"\RS9rS\ S'Sr S\ S'S r S \ S 'S r S \ S 'S r S\ S'\rS\ S'\"S SSS9rS\ S'\"\SSS9rS\ S'SSjrS SjrS SjrS SjrS!SjrS"SjrSrg )#r(ub Workdir + path-policy for the agent toolset. Trust model — two tiers: - The file tools (:func:`beta_read_tool`, :func:`beta_write_tool`, :func:`beta_edit_tool`, :func:`beta_glob_tool`, :func:`beta_grep_tool`) resolve paths against ``workdir`` and reject escapes unless ``unrestricted_paths`` is set. :func:`resolve_path` follows every symlink (including the leaf, even a dangling one) before the check and returns that canonical path for the operation, so a symlink inside the workdir that points outside it can neither pass the check nor be followed afterwards — a real boundary, consistent with the memory tool, so the file tools are safe to use without a sandbox. - :func:`beta_bash_tool` runs an unrestricted ``/bin/bash`` regardless of ``unrestricted_paths``. Confinement for it must come from the OS layer (e.g. a self-hosted environment runner). Attributes: workdir: Base directory for resolving relative tool paths. Defaults to :func:`os.getcwd` captured when the context is constructed (TS parity: ``process.cwd()`` at construction), so a ``chdir`` between constructing this context and the first tool call does not move where paths resolve. Pass an explicit path to override. unrestricted_paths: When ``False`` (default), the file tools reject paths that resolve outside ``workdir``. Does **not** constrain :func:`beta_bash_tool`. env: Optional environment for the bash subprocess. When unset, the bash tool inherits the process environment with the runner's ``ANTHROPIC_*`` credentials scrubbed. When provided, it FULLY REPLACES that default environment — the mapping is used verbatim and is NOT merged with or added to the scrubbed process environment. To keep the defaults plus extra vars, build the combined mapping yourself before passing it. max_file_bytes: Size cap for the ``read`` and ``edit`` tools, which both load the whole file into memory. ``not_given`` (default) uses the built-in 256 KiB cap; a positive int sets a custom cap; ``None`` disables the cap entirely. Disabling it reintroduces the OOM risk on a model-controlled path, so pass ``None`` only when the sandbox can absorb arbitrarily large files. The non-regular-file (FIFO/device) guard always applies regardless of this value. )default_factorystr | os.PathLike[str]workdirFboolunrestricted_pathsNzAsyncAnthropic | Noneclientz str | None session_idOptional[Mapping[str, str]]envint | None | NotGivenmax_file_bytes)defaultinitreprzBashSession | None_bash)rWrcrd list[Path] _skill_dirsc# URc5[RURURS9IShvN UlUR$N7fNr_)rer)startrYr_selfs r7bashAgentToolContext.bashsA :: *004880LLDJzzMs9AAAc~# URb*URR5IShvN SUlggN 7frR)recloserls r7rqAgentToolContext.closes4 :: !**""$ $ $DJ " $s +=;=c# URb URcg[URURURS9IShvN UlgN 7f)zDownload the session agent's skills into ``{workdir}/skills//``. No-op unless both :attr:`client` and :attr:`session_id` are set. The download + safe archive extraction lives in :mod:`anthropic.lib.tools._skills`. N)r]rY)r\r]rrYrgrls r7 setup_skillsAgentToolContext.setup_skillssF ;; $//"9 !8QUQ`Q`jnjvjv!wwwsAA A Ac # URH.n[[[RUSS95IShvN M0 /UlgN![ a!n[ RSX5 SnAMbSnAff=f7f)uRemove the skill directories :meth:`setup_skills` downloaded. Only the directories this context created are removed — a pre-existing ``{workdir}/skills`` tree is left untouched. T) ignore_errorsNz,failed to remove downloaded skill dir %s: %s)rgrr shutilrmtree Exceptionlogwarning)rm skill_dirrNs r7_cleanup_skills AgentToolContext._cleanup_skillssk ))I Zwv}}itTUUU* V Z JIYY Zs=A9%A A A  A9 A  A6A1+A91A66A9cB# UR5IShvN U$N7frR)rtrls r7 __aenter__AgentToolContext.__aenter__s!!!!  "s c# UR5IShvN UR5IShvN gNN!UR5IShvN f=f7frR)rqr~)rmexcs r7 __aexit__AgentToolContext.__aexit__sE )**,  &&( ( (  ($&&( ( (s?A959A7A9AA AAA)rergreturnr)rNone)rr()robjectrr)__name__ __module__ __qualname____firstlineno____doc__rr<getcwdrY__annotations__r[r\r]r_rrarerTrgrnrqrtr~rr__static_attributes__rSr9r7r(r(s(Z',BII&FG #F$$%)F !(!J !'+C $+,5N)5 %dU KE K$4EEX]^K^  x )r9r(c[U5nUR(a%UR5(aUR5$[UR5R5nUR5(aUOX2- R5nUR(d [ XC5(d[ SU<S35eU$)uQResolve ``p`` against the workdir; reject results that escape it. Absolute and relative inputs go through the same canonicalise-then-contain check — an absolute path that lands inside the workdir is permitted, only paths that resolve *outside* are rejected. ``Path.resolve()`` follows every symlink (including the leaf, even a dangling one) before the containment check, so a symlink under the workdir that targets ``/etc`` is rejected — and the resolved path is what the tool then operates on, so it can't be followed afterwards either. See the trust model on :class:`AgentToolContext`. zpath z escapes workdir)r r[ is_absoluteresolverYr ValueError)ctxp candidaterootfulls r7r+r+sQI )"7"7"9"9  ""   $ $ &D"..00Id6F O O QD  ! !'$*=*=5%5677 Kr9c0\rSrSr%SrS\S'S\S'Srg) r*iuResult of :meth:`BashSession.exec` — the captured output and exit code. A ``NamedTuple`` so it unpacks positionally (``out, code = await s.exec(...)``) and reads by name (``result.output`` / ``result.exit_code``) interchangeably. stroutputint exit_coderSN)rrrrrrrrSr9r7r*r*s K?N8r9r*cl\rSrSrSrS Sjr\SS.S Sjj5r\S Sj5r \ 4SSjjr SS jr S r g)r)i'uA persistent ``/bin/bash`` process; cwd, env and jobs survive across calls. .. warning:: :class:`BashSession` is **stateful and not safe to share concurrently**. Interleaved :meth:`exec` calls would race for the same stdin/stdout pipes (mixed input, output read by the wrong caller, and corrupted sentinel detection). Each :class:`AgentToolContext` creates its own session, so the safe pattern is *one context per session* — never a single ``AgentToolContext`` (or hand-constructed ``BashSession``) shared across multiple sessions running on different self-hosted environments. Holding the shared instance behind a per-call lock would serialize all bash work and is almost certainly not what you want. cXlg)u~Use :meth:`BashSession.start` to construct — ``__init__`` takes an already-spawned process and is intended for internal use.N_proc)rmprocs r7__init__BashSession.__init__6s  r9Nrjc # Ub [U5O [5n[R"/SQU0UESSSS.E[R [R [R S9IShvN nU"U5$N 7f)N)z /bin/bashz --noprofilez--norcdumb)PS1PS2TERM)cwdr_stdinstdoutstderr)dictrBanyio open_process subprocessPIPESTDOUT)clsrYr_basers r7rkBashSession.start;slOtCy1B1D'' 2>4>2v>//??$$   4y sA)A:+A8, A:c2URRSL$)uWhether the underlying bash process has exited / been torn down. Inverse of "alive". Named ``closed`` (not ``alive``) to match the TS ``BashSession.closed`` boolean — porting code between the two SDKs should not have to flip the sense of this check. N)r returncoderls r7closedBashSession.closedHszz$$D00r9c^^^^# UR(a [S5eURRbURRceURRnURRmS[ R "5RS3nUSSSUSS3nSUSUS3nURUR55IShvN [5mS mUR5mSUUUU4S jjn[R"U5 U"5IShvN SSS5 ["R%STR'SS95n U R)U5n U S:a[+U R-5S5$U SU R/S5n X[1U5-SR-5n U (a[3U R55S5OSn T(aSU -n [+X5$GNN!,(df  N=f![a]n[R"S S 9 UR5IShvN SSS5 O!,(df  O=f[S US35UeSnAf[R "5aI [R"S S 9 UR5IShvN SSS5 e!,(df  e=ff=f![6a Sn GNf=f7f)Nz)bash session terminated; restart required __ANT_CMD__DONE__z''z{ z } &1; printf '\nz %d\n' $? Fc># TRS5IShvN nU(dgTRU5 [ T5[ :aTS[ T5[ - 2 SmTT;agMfNP![Ra gf=f7f)NTi)receiver EndOfStreamextendlenBASH_OUTPUT_LIMIT)chunkbufmarkerr truncateds r7read_until_sentinel-BashSession.exec..read_until_sentinelfs"(.."66E 5!s8//:c#h):::; $IS=6((s8BA-A+A-A B+A--BBBBTshieldzbash command timed out after srreplaceerrorsr z[output truncated] r)r RuntimeErrorrrruuiduuid4hexsendencode bytearrayr fail_after TimeoutError CancelScoperqget_cancelled_exc_class_ANSIsubdecoderfindr*striprstriprr splitlinesr)rmcmdtimeoutrsentinelsentinel_splitwrappedrrNtextidxouttailcoderrrrs @@@@r7execBashSession.execRs| ;;JK Kzz+ 0A0A0MMM   ""  0 019$RaL>HQRL>:u=n=M[Yjj)***k "  $ !!'*)++++.yySZZyZ9:jj" 7djjlB/ /4Cj%#h-')*002 043t(+,"D (3.C#$$y +4,+* R""$/jjl""0//!>wiqIJPQ Q,,. ""$/jjl""0 0/  , D sCK+G8+K+H G=(G;)G=-H5BK+<%K!K+;G== H H K+ H KI0,III I0 I I000K K4J75K: K K KK+ K($K+'K((K+c# URRbJ[R"SS9 URRR 5IShvN SSS5 URR c[URR5 [R"S5 URR5IShvN SSS5 [R"SS9 URR 5IShvN SSS5 gN![ a Nf=f!,(df  N=fNp!,(df  Nt=fNC![ a NMf=f!,(df  g=f7f)NTr) rrrracloserzrkill move_on_afterwaitrls r7rqBashSession.closes ::   '""$/****113330 :: ( JJOO $$Q'jjoo'''(   d + jj''))), +4 0/(('*  , +s,E0D)'DDDAE0+D< D: D<E0*E,E E  E E0D D&#D)%D&&D)) D73E0:D<< E E0 E EEEE E-)E0r)rzanyio.abc.Processrr)rYrXr_r^rr))rrZ)rrrfloatrr*r)rrrrrr classmethodrkpropertyrBASH_DEFAULT_TIMEOUTrrqrrSr9r7r)r)'sI  `d  115IJ%Xr9r)cj^[SU4Sjj5n[S[S9"[[U55$)Nc>^^# SmSUU4SjjmSSUU4SjjjnU7v TbTR5IShvN ggN!TbTR5IShvN ff=f7f)z)Run a command in a persistent bash shell.Ncz># Tc0[RTRTRS9IShvN mT$N7fri)r)rkrYr_)rsessionsr7_session3beta_bash_tool..bash_tool.._sessions6 + 1 1#++377 1 KKNLs /;9;c># U(a-T bT R5IShvN Sm T"5IShvN gU(d [S5eU(aUS- O[nT"5IShvN nURXS9IShvN upVUS:wa [U5eU$NvNgN4N![[ 4an[SU35UeSnAff=f7f)Nzbash session restartedzbash: command is requiredg@@)rzbash: r)rqr$rrrr) commandrestart timeout_msrrrrrNrrs r7rn/beta_bash_tool..bash_tool..bashs&!--/))"Gj  / ;<<-7j6)=QG 5"*$"#&&&"BB qyn$J* %B ,/ 5& -14 5sgCBCB)C B 'B(B >B?B CCB B C0B??CCr)NNN)r Optional[str]r Optional[bool]r z Optional[int]rr)rq)rnrrrs @@r7 bash_tool!beta_bash_tool..bash_tools'+  hl " 4B Wd    , &J"mmo%%#%"mmo%%#s3A+A A+AA+ A( A#!A((A+rnname input_schema)rz,AsyncIterator[Callable[..., Awaitable[str]]])rr&rr r)rrs` r7r-r-s<,&,&f  C  3  r9c>^[S[S9SSU4Sjjj5nU$)Nreadrc ># [T U5nUR5n[ UR 5(d[SUS35e[ T R5nUb/URU:a[SUSURSUS35eUR5nU(dU$[U5S:wa [S 5eUupxURS 5n [S US - 5n US :aUO [U 5n S RXU 5$![an[SU35UeSnAff=f![a e[an[SX5UeSnAff=f7f) z,Read a file rooted at the working directory.zread: N: not a regular file is  bytes, exceeds z6-byte limit. Use bash (head/tail/sed) to read a slice.rrz/read: view_range must be [start_line, end_line]rrr)r+rr$statrst_moder8rast_size read_textOSErrorrPrsplitmaxjoin) rM view_rangetargetrNstlimitr start_lineend_linelinesrkendrs r7rbeta_read_tool..readsl 1!#y1F 9B2::&&& 3G HII&s'9'9:E RZZ%%7YKtBJJ<7GwO@@##%D K z?a MN N)  4 AzA~&"Q,hCJyyS)**9 1fQCL)q 0 1    9FI1q 8 9sGE DBD0"A-E D-D((D--E0E EEErR)rMrr!zOptional[List[int]]rr)r&r")rrs` r7r.r.s+&/]^ + +_ +D Kr9c:^[S[S9SU4Sjj5nU$)Nwriterc ># [TU5nURR SSS9 UR U5 S[U5SU3$![an[SU35UeSnAff=f![ an[SX5UeSnAff=f7f)z4Write a file, creating parent directories as needed.zwrite: NT)parentsexist_okr+zwrote z bytes to ) r+rr$parentmkdir write_textrrPr)rMcontentr"rNrs r7r+beta_write_tool..writes 2!#y1F : MM  t  <   g &G ~Z {;; 2gaSM* 1 2  :GY2 9 :sDB A+A/B A,A''A,,B/ B 9 BB  B)rMrr2rrr)r&r#)rr+s` r7r/r/s%'0_` <a < Lr9c>^[S[S9SSU4Sjjj5nU$)Neditrc D># [T U5nUR5n[ UR 5(d[SUS35e[ T R5nUb/URU:a[SUSURSUS35eUR5nURU5n U S:Xa[S U35eU(dU S :a[S U S US 35eU(aURX5OURXS 5n URU 5 SUSU(aU S3$S S3$![an[SU35UeSnAff=f![a e[an[SX5UeSnAff=f![an[SX5UeSnAff=f7f)z-Replace text in a file by exact string match.zedit: Nrrrz5-byte limit. Use bash (sed/awk) to edit a large file.r5rzedit: old_string not found in rzedit: old_string appears z times in z (must be unique)zedited z (z replacement(s)))r+rr$rrrr8rarrrrPcountrr1) rM old_string new_string replace_allr"rNr#r$rr7updatedrs r7r5beta_edit_tool..edit%s 1!#y1F 9 B2::&&& 3G HII&s'9'9:E RZZ%%7YKtBJJ<7GwO??##%D  :& A:, E99E>>F  F FFF rR) rMrr8rr9rr:r rr)r&r)rr5s` r7r0r0$s.&/]^#T#T_#TJ Kr9cXUR5R$![a gf=f)Ng)rst_mtimer)rs r7_mtime_or_zeror?Ns+vvx   s  ))c>^[S[S9SSU4Sjjj5nU$)Nglobrc># Sn[U5R5(a9TR(d [S5e[S5nUR S5nOTR(d$S[ U5R ;a [S5eU(a[TU5nO#[TR5R5nUnTR(dUn[[URU5[55nUb3UVs/sH&n[!UR5U5(dM$UPM( nnU(dgUR#[$SS 9 S R'S US[(55$![an[SU35UeSnAff=f![[4an[SU35UeSnAff=fs snf7f) z1List files matching a glob pattern, newest first.Nz$glob: absolute pattern not permitted/z..z*glob: '..' is not permitted in the patternzglob: no matchesT)keyreverserc38# UHn[U5v M g7frR)r).0ms r7 /beta_glob_tool..glob..}sE)DAQ)Ds)r rr[r$lstripr partsr+rrYrlistrrAWALK_MAX_ENTRIESrrsortr?r GLOB_RESULT_LIMIT) patternpathconfinerpatrNmatchesrIrs r7rAbeta_glob_tool..globVs#' = $ $ & &)) FGG9D..%C ))dmG6L6R6R.R LMM9'T2DCKK(002C)) 16$))C.2BCDG  #*K'QWQYY['-Jq'GK  6yyE1C2C)DEEE+"9#fQCL1q89G$ 1fQCL)q 0 1 Ls`BG E9&9G (FG#G6G<=G9 FFFGF>*F99F>>GrRrRrrSr rr)r&r )rrAs` r7r1r1Us.&/]^&F&F_&FP Kr9c>^[S[S9SSU4Sjjj5nU$)Ngreprc ># U(a [TU5O"[TR5R5n[ R"S5=n(a[R"USSSUS[U5/SS 9IShvN nURS :Xag URS :wa%[ S URRSS935eURRSS9n[U5[ :aUS[ S[ S3-nU$["R$"U5n[)Xr5$![an[ SU35UeSnAff=fN!["R&an[ SU35UeSnAff=f7f)z.Search file contents for a regular expression.zgrep: Nrgz-nz --no-headingz-ez--F)checkrrDrzgrep: rg failed: rrz [output truncated at  bytes]zgrep: invalid regex: )r+r rYrrr$rxwhichr run_processrrrrrrGREP_OUTPUT_LIMITrecompileerror _walk_grep) rRrSsearchrNr\resultrrxrs r7rZbeta_grep_tool..greps{ 104\#t,$s{{:K:S:S:UFd# #2 #!,,T>4$F LF  A%#  A%"3FMM4H4HPY4H4Z3[ \]]--&&i&8C3x++,,-2IJ[I\\c0ddJ @G$B"%%/ 1fQCL)q 0 1 xx @3A378a ? @sYE=6D/AE=EB E=E$ E=/ E 9EE  E=E:&E55E::E=rRrX)r&r!)rrZs` r7r2r2s*&/]^&&_&: Kr9cL^^ ^ ^ /m [m SU U 4Sjjm S U U4SjjnUR5(a U"U5 OSn[R"U5HupEnUVs/sH/owS;dM [ U5U- R 5(aM-UPM1 snUSS&UHbn[ U5U- n U R 5(aM(US- nU[ :dU"U 5(aMFT (aSRT 5OSs s $ M T (aSRT 5$S$s snf) Nc>T[U5S--mTS:aTRS[S35 gTRU5 g)Nrrz[output truncated at r^FT)rappendra)linebudgethitss r7push_walk_grep..pushsF#d)a- A: KK/0A/B'J K Dr9c >URS5nSURS5;a SSS5 gURS5 [US5Houp#[ U5[ :aMUR SS9RS 5nTRU5(dMPT"US US U35(aMg SSS5 g SSS5 g!,(df  g=f![a gf=f) NrbiTrrrrz :F) openrseek enumeraterGREP_MAX_LINE_LENGTHrrrfr)rfirawrmrprhs r7scan_walk_grep..scans 4AaffSk)!q '1oFA3x"66 ::Y:7>>vFDyyttfAaS$4H/I/I$!. !!   sQCC CA)C !C 8C 9CC C CCC C+*C+r)z.git node_modulesrrrD)rmrrrZ)rr rrZ)rais_filer<walkr is_symlinkrOr ) rhrfr}seendirpathdirnames filenamesdrrrnrorps ` @@@r7reresD F&~~ V ,.GGFO (Gy$#a0H'HRVW^R_bcRcQoQoQq8HQK"G}t+??$$ **$t**.2499T? D" -<#499T?4 4s D!,D!D!c~[U5[U5[U5[U5[ U5[ U5/$)uReturn the ``agent_toolset_20260401`` implementations bound to ``ctx``. The result is a plain list of :class:`~anthropic.lib.tools.BetaAsyncFunctionTool` instances — *async* function tools, so it is for the **async** runners only: the ``AsyncAnthropic`` ``client.beta.messages.tool_runner`` and ``client.beta.sessions.events.tool_runner`` (always async). The sync ``Anthropic`` ``messages.tool_runner`` takes ``BetaRunnableTool``, which excludes the async function tools this returns. Filter or extend it before passing it on:: tools = [*beta_agent_toolset_20260401(ctx), my_custom_tool] tools = [t for t in beta_agent_toolset_20260401(ctx) if t.name != "grep"] )r-r.r/r0r1r2)rs r7r,r,s> sssss  r9)r6r`rz int | None)rzdict[str, str])rLrrMrrNrrr$)rrf)rr(rrrr )rr(rzBetaAsyncFunctionTool[Any])rr rr)rhzre.Pattern[str]rfr rr)rr(rz list[BetaAsyncFunctionTool[Any]])Zr __future__rr<rbrrxloggingrrrtypingrrrrr r pathlibr r functoolsr itertoolsr contextlibr dataclassesrrcollections.abcrrrrr anyio.abcanyio.to_threadr_skillsrr_typesrr_utilsr types.betarrr r!r"r#_beta_functionsr$r%r&_clientr'__all__rrr5READ_MAX_BYTESraryrQrOrcrr8 getLoggerr{rBrPrTr(r+r*r)r-r.r/r0r?r1r2rer,rSr9r7rsIB# GG'*(GG $5)ON) #' /0J;<S"5* g)g) g)T* 8 8 FFR8v$N$'T*ZD35lr9