Anthropic SDK for PHP 0.45.0

Apply the PHP 8.5 baseline first. These rules cover anthropic-ai/sdk 0.45.0 on PHP 8.5, including optional beta helpers. The package accepts PHP ^8.1; that dependency constraint does not establish runtime security support.

Client and credential boundaries

• Construct Anthropic\Client in trusted server code with a nonempty, validated apiKey or authToken, or an explicitly selected credential provider. Fail deployment when the intended credential is missing; an otherwise unconfigured base client can discover profile or workload-identity credentials.
• Select the authentication mode deliberately: apiKey and authToken independently inherit ANTHROPIC_API_KEY and ANTHROPIC_AUTH_TOKEN, and both headers can be sent. Clear or explicitly suppress the unused source instead of inheriting an unrelated identity.
• Protect ANTHROPIC_PROFILE, ANTHROPIC_CONFIG_DIR, profile files, identity-token files, and OAuth refresh credentials when using discovery. Restrict file access yourself; the profile loader's permission warning does not prevent loading. Close credential-backed clients with close() when their lifecycle ends.
• Pin baseUrl to an approved HTTPS origin. Control ANTHROPIC_BASE_URL, profile base_url, and ANTHROPIC_CUSTOM_HEADERS as privileged deployment settings; keep caller input out of endpoint, proxy, transport, and factory selection.
• Use workspace-scoped credentials and separate clients where tenants or workloads require isolation. Derive any anthropic-workspace-id header from authorized server-side state; federated credentials select