Struct Anthropic 

pub struct Anthropic { /* private fields */ }

Calls the Anthropic Messages API.

The key is held here and never journaled — it is transport metadata in exactly the sense a peer credential is, and the same rule applies: a secret in a hash-chained record cannot be redacted afterwards, only discovered.

Implementations

impl Anthropic

pub const DEFAULT_TIMEOUT: Duration

pub const VERSION: &'static str = "2023-06-01"

The API version this driver speaks.

Pinned rather than tracking the newest: a provider that changes its response shape under a running plane changes what replay reads back.

pub fn new(key: impl Into<String>) -> Result<Self, ModelError>

A ceiling the request must carry, because the API requires one.

Deliberately not unbounded-by-default: an output limit is the cheapest spend control there is, and the budget ceilings in core::budget govern the run rather than the individual call.

Errors

If the HTTP client cannot be built.

pub const fn timeout(self, timeout: Duration) -> Self

Bound connection, generation, and response streaming as one operation.

pub fn base(self, base: impl Into<String>) -> Self

Point at a different host — a gateway, or a test server.

pub fn structured_via(self, mode: SchemaMode) -> Self

How to obtain a schema-conforming answer from this model.

Native constrained decoding is gated on particular models. Point this driver at one that predates it and the request is rejected outright — which is loud, but the fix is SchemaMode::ForcedTool, and it is here rather than discovered because the crate cannot ask a model what it supports without a network call on a path that must not make one.

pub fn structured_via_for( self, model: impl Into<String>, mode: SchemaMode, ) -> Self

How to obtain a schema-conforming answer from one model.

Takes precedence over the driver default. This is the knob that matches the shape of the problem: constrained decoding is gated per model, and one driver serves many.

pub fn egress(self, egress: Egress) -> Self

Restrict where this driver may connect.

Deny-by-default once set: a base URL whose host is not granted is refused before the request is built, so nothing leaves and nothing is metered. Unset means no egress control, spelled the same way an absent policy engine is — see Egress.

pub const fn buffered(self) -> Self

Ask for the whole response at once instead of streaming it.

The cost of turning streaming off is stated plainly because it is easy to reach for: a non-streaming response that dies in transit reports Unavailable — cost unknown, treated as safe to repeat, billed as zero. The streaming path reports what it actually burned. Reasons to do it anyway are real (a proxy that buffers SSE into uselessness, a gateway that does not forward it), which is why the knob exists rather than the behaviour being fixed.

Trait Implementations

impl Debug for Anthropic

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Redacts the key. Deriving Debug would print it into every log line and span that touches the provider.

impl ModelProvider for Anthropic

fn request_profile(&self, model: &ModelId) -> Value

Stable, non-secret configuration that changes the provider wire request.

fn complete<'life0, 'life1, 'async_trait>( &'life0 self, request: Request<'life1>, ) -> Pin<Box<dyn Future<Output = Result<Completion, ModelError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Complete a prompt.