@cortexkit/anthropic-auth-core 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ex Machina
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,8 @@
+# @cortexkit/anthropic-auth-core
+
+Shared Anthropic OAuth, quota, cache, relay, dump, and request-signing helpers used by CortexKit's OpenCode and Pi integrations.
+
+User-facing packages:
+
+- `@cortexkit/opencode-anthropic-auth` for OpenCode
+- `@cortexkit/pi-anthropic-auth` for Pi

package/dist/accounts.d.ts

@@ -0,0 +1,121 @@
+import { type Cache1hMode } from './constants.ts';
+export declare const ACCOUNT_FILE_NAME = "anthropic-auth.json";
+export declare const QUOTA_URL = "https://api.anthropic.com/api/oauth/usage";
+export type QuotaWindowName = 'five_hour' | 'seven_day';
+export type OAuthAccount = {
+    id: string;
+    label?: string;
+    type: 'oauth';
+    access?: string;
+    refresh: string;
+    expires?: number;
+    enabled?: boolean;
+    addedAt?: number;
+    lastUsed?: number;
+    lastRefreshedAt?: number;
+    lastRefreshError?: AccountOperationError;
+    lastQuotaRefreshError?: AccountOperationError;
+    quota?: Partial<Record<QuotaWindowName, AccountQuotaWindow>>;
+};
+export type AccountOperationError = {
+    message: string;
+    checkedAt: number;
+};
+export type AccountQuotaWindow = {
+    usedPercent: number;
+    remainingPercent: number;
+    resetsAt?: string;
+    checkedAt: number;
+};
+export type AccountStorage = {
+    version: 1;
+    main?: {
+        type: 'opencode';
+        provider: 'anthropic';
+    };
+    fallbackOn?: number[];
+    refresh?: {
+        enabled?: boolean;
+        intervalMinutes?: number;
+        refreshBeforeExpiryMinutes?: number;
+    };
+    quota?: {
+        enabled?: boolean;
+        checkIntervalMinutes?: number;
+        minimumRemaining?: Partial<Record<QuotaWindowName | '5h' | '1w', number>>;
+        failClosedOnUnknownQuota?: boolean;
+    };
+    claudeCache?: {
+        enabled?: boolean;
+        mode?: Cache1hMode;
+    };
+    dump?: {
+        enabled?: boolean;
+    };
+    relay?: {
+        enabled?: boolean;
+        url?: string;
+        token?: string;
+        fallbackToDirect?: boolean;
+        transport?: 'http' | 'websocket';
+    };
+    accounts: OAuthAccount[];
+};
+export type OAuthQuotaSnapshot = Partial<Record<QuotaWindowName, AccountQuotaWindow>>;
+export type AccountManagerOptions = {
+    now?: () => number;
+    fetchImpl?: typeof fetch;
+    configPath?: string;
+};
+export type AccountRefreshError = {
+    accountId: string;
+    message: string;
+};
+export declare function getAccountStoragePath(): string;
+export declare function loadAccounts(path?: string): Promise<AccountStorage | null>;
+export declare function saveAccounts(storage: AccountStorage, path?: string): Promise<void>;
+export declare function isCache1hPersistentlyEnabled(storage: AccountStorage | null): boolean;
+export declare function getCache1hPersistentMode(storage: AccountStorage | null): Cache1hMode;
+export declare function setCache1hPersistentEnabled(enabled: boolean, mode?: Cache1hMode, path?: string): Promise<AccountStorage>;
+export declare function setCache1hPersistentMode(mode: Cache1hMode, path?: string): Promise<AccountStorage>;
+export declare function isDumpPersistentlyEnabled(storage: AccountStorage | null): boolean;
+export declare function setDumpPersistentEnabled(enabled: boolean, path?: string): Promise<AccountStorage>;
+export declare function shouldFallbackStatus(status: number, storage: AccountStorage | null): boolean;
+export declare function getQuotaCheckIntervalMs(storage: AccountStorage | null): number;
+export declare function quotaSnapshotPassesPolicy(quota: OAuthQuotaSnapshot | undefined, storage: AccountStorage | null): boolean;
+export declare function getQuotaNextRefreshAt(quota: OAuthQuotaSnapshot | undefined, storage: AccountStorage | null, now: number): number;
+export declare function fetchOAuthQuotaSnapshot(input: {
+    accessToken: string;
+    fetchImpl?: typeof fetch;
+    now?: () => number;
+}): Promise<{
+    five_hour: AccountQuotaWindow | undefined;
+    seven_day: AccountQuotaWindow | undefined;
+}>;
+export declare class FallbackAccountManager {
+    private readonly now;
+    private readonly fetchImpl;
+    private readonly configPath;
+    private readonly refreshPromises;
+    private refreshTimer;
+    private quotaTimer;
+    constructor(options?: AccountManagerOptions);
+    load(): Promise<AccountStorage | null>;
+    save(storage: AccountStorage): Promise<void>;
+    startBackgroundRefresh(): void;
+    stopBackgroundRefresh(): void;
+    getUsableFallbackAccounts(): Promise<OAuthAccount[]>;
+    markUsed(account: OAuthAccount): Promise<void>;
+    accountPassesQuotaPolicy(account: OAuthAccount, storage: AccountStorage | null): boolean;
+    refreshDueAccounts(): Promise<void>;
+    refreshQuotaForDueAccounts(): Promise<void>;
+    refreshQuotaForAllAccounts(): Promise<{
+        storage: AccountStorage | null;
+        errors: AccountRefreshError[];
+    }>;
+    refreshAccount(account: OAuthAccount, storage: AccountStorage, options?: {
+        force?: boolean;
+    }): Promise<OAuthAccount>;
+    private refreshAccountNow;
+    refreshAccountQuota(account: OAuthAccount, storage: AccountStorage): Promise<OAuthAccount>;
+}