@cortexkit/anthropic-auth-core 1.19.0 → 1.20.0

package/dist/accounts.d.ts

@@ -13,6 +13,7 @@ export type AccountBase = {
 };
 export type OAuthAccount = AccountBase & {
     type: 'oauth';
+    authLineageId?: string;
     access?: string;
     refresh: string;
     expires?: number;
@@ -21,6 +22,11 @@ export type OAuthAccount = AccountBase & {
     lastQuotaRefreshError?: AccountOperationError;
     quota?: OAuthQuotaSnapshot;
     profile?: OAuthAccountProfile;
+    /**
+     * Per-fallback cumulative prime counters. Lives in the runtime-state file
+     * (scoped under `accounts[id].prime`) and never in `anthropic-auth.json`.
+     */
+    prime?: PrimeUsageCounters;
 };
 export type ApiKeyAccount = AccountBase & {
     type: 'api';
@@ -94,6 +100,27 @@ export type OAuthQuotaSnapshot = Partial<Record<QuotaWindowName, AccountQuotaWin
     source?: 'poll' | 'headers';
     checkedAt?: number;
 };
+export type PrimeUsageCounters = {
+    count: number;
+    inputTokens: number;
+    outputTokens: number;
+    since: number;
+};
+export type PrimeUsageDelta = {
+    inputTokens?: number;
+    outputTokens?: number;
+};
+export type PrimeRuntimeState = {
+    enabled?: boolean;
+    mainAuthLineageId?: string;
+    mainAuthLineageRefreshTokenFingerprint?: string;
+    /**
+     * Main account prime counters. Persisted only on the main side of the
+     * runtime-state file — `configFromStorage()` never writes them to the config
+     * file so they cannot leak into `anthropic-auth.json`.
+     */
+    main?: PrimeUsageCounters;
+};
 export type RoutingMode = 'main-first' | 'fallback-first' | 'sticky-balanced';
 export type KillswitchThresholds = Partial<Record<QuotaWindowName | '5h' | '1w' | 'scoped', number>>;
 export type KillswitchConfig = {
@@ -164,6 +191,13 @@ export type AccountStorage = {
         endHour?: number;
         subagents?: boolean;
     };
+    /**
+     * Opt-in flag and runtime metadata for `/claude-prime`. The `enabled` flag
+     * belongs on the config side; counters and main lineage bindings live in the
+     * state file and must never appear in `anthropic-auth.json`. See
+     * `configFromStorage()` for the write-side filter.
+     */
+    prime?: PrimeRuntimeState;
     relay?: {
         enabled?: boolean;
         url?: string;
@@ -180,7 +214,7 @@ export type AccountStorage = {
  * (to display the provider's real model costs).
  */
 export declare function isCostZeroingEnabled(storage: Pick<AccountStorage, 'costZeroing'>): boolean;
-export type AccountRuntimeEntry = Partial<Pick<OAuthAccount, 'access' | 'refresh' | 'expires' | 'lastUsed' | 'lastRefreshedAt' | 'lastRefreshError' | 'lastQuotaRefreshError' | 'quota' | 'profile'> & Pick<ApiKeyAccount, 'apiKey' | 'lastUsed'>>;
+export type AccountRuntimeEntry = Partial<Pick<OAuthAccount, 'access' | 'authLineageId' | 'refresh' | 'expires' | 'lastUsed' | 'lastRefreshedAt' | 'lastRefreshError' | 'lastQuotaRefreshError' | 'quota' | 'profile' | 'prime'> & Pick<ApiKeyAccount, 'apiKey' | 'lastUsed'>>;
 export type AccountRuntimeState = {
     version: 1;
     main?: {
@@ -194,6 +228,9 @@ export type AccountRuntimeState = {
         refreshLeaseId?: string;
         refreshLeaseUntil?: number;
         refreshLeaseTokenHash?: string;
+        prime?: PrimeUsageCounters;
+        primeAuthLineageId?: string;
+        primeAuthLineageRefreshTokenFingerprint?: string;
     };
     accounts?: Record<string, AccountRuntimeEntry>;
 };
@@ -201,6 +238,7 @@ export type AccountStateSaveScope = {
     mainProfile?: boolean;
     mainQuota?: boolean;
     mainRefresh?: boolean;
+    mainPrime?: boolean;
     accounts?: true | string[];
 };
 export type AccountManagerOptions = {
@@ -209,6 +247,8 @@ export type AccountManagerOptions = {
     configPath?: string;
     quotaManager?: import('./quota-manager.ts').QuotaManager;
     onFallbackStorageChanged?: () => void;
+    setIntervalImpl?: typeof globalThis.setInterval;
+    clearIntervalImpl?: typeof globalThis.clearInterval;
 };
 export type AccountRefreshError = {
     accountId: string;
@@ -218,6 +258,8 @@ export declare function getAccountStoragePath(): string;
 export declare function getAccountStatePath(configPath?: string): string;
 export declare function createEmptyStorage(): AccountStorage;
 export declare function loadAccounts(path?: string): Promise<AccountStorage | null>;
+/** Returns the latest timestamp carried by any quota snapshot window. */
+export declare function quotaSnapshotCheckedAt(quota: OAuthQuotaSnapshot | undefined): number;
 export interface SaveAccountsOptions {
     /** Account ids intentionally removed by this mutation. */
     removedAccountIds?: readonly string[];
@@ -255,6 +297,28 @@ export declare function setCacheKeepPersistentAlways(path?: string): Promise<Acc
 export declare function setCacheKeepPersistentEnabled(enabled: boolean, path?: string): Promise<AccountStorage>;
 export declare function isCacheKeepSubagentsEnabled(storage: AccountStorage | null): boolean;
 export declare function setCacheKeepSubagentsEnabled(enabled: boolean, path?: string): Promise<AccountStorage>;
+export declare function isPrimePersistentlyEnabled(storage: AccountStorage | null): boolean;
+export declare function setPrimePersistentEnabled(enabled: boolean, path?: string): Promise<AccountStorage>;
+/**
+ * Return the stable prime marker identity for an OAuth account, seeding it in
+ * runtime state when older storage has no lineage yet. Main lookups return
+ * undefined when the live refresh token is unavailable and no lineage exists.
+ */
+export declare function getOrCreatePrimeAuthLineageId(accountId: 'main' | string, path?: string, mainRefreshToken?: string): Promise<string | undefined>;
+/** Advance a main lineage across a refresh performed by this plugin. */
+export declare function continueMainPrimeAuthLineageAfterRefresh(input: {
+    previousRefreshToken: string;
+    currentRefreshToken: string;
+}, path?: string): Promise<void>;
+/**
+ * Atomically increment an account's cumulative prime counters and persist via
+ * the scoped runtime-state path. The `main` account lives at state.main.prime;
+ * every other account lives at state.accounts[id].prime. Config-side writes
+ * are intentionally NOT triggered so prime counters cannot leak into
+ * `anthropic-auth.json`. Callers should not depend on this function to mutate
+ * the caller's storage object.
+ */
+export declare function incrementPrimeUsagePersistent(accountId: 'main' | string, usage: PrimeUsageDelta, path?: string, now?: number): Promise<PrimeUsageCounters>;
 export declare function shouldFallbackStatus(status: number, storage: AccountStorage | null): boolean;
 export declare function getQuotaMinimumRemainingThresholds(storage: AccountStorage | null): {
     five_hour: number;
@@ -286,6 +350,7 @@ export declare function buildRefreshOperationError(input: {
 export declare function isPermanentRefreshError(error: AccountOperationError | undefined): boolean;
 export declare function refreshBackoffActive(error: AccountOperationError | undefined, refreshToken: string | undefined, now: number): boolean;
 export declare function formatRefreshBackoffMessage(error: AccountOperationError, now: number): string;
+export declare function getFallbackReauthLabels(storage: AccountStorage | null | undefined): string[];
 export declare function isQuotaPolicyAuthError(error: unknown): boolean;
 export declare function buildQuotaOperationError(input: {
     error: unknown;
@@ -362,6 +427,8 @@ export declare class FallbackAccountManager {
     private quotaTimer;
     readonly quotaManager: import('./quota-manager.ts').QuotaManager | null;
     private readonly onFallbackStorageChanged;
+    private readonly setIntervalImpl;
+    private readonly clearIntervalImpl;
     constructor(options?: AccountManagerOptions);
     /**
      * Seed QuotaManager from persisted account.quota if no cache entry exists
@@ -399,5 +466,8 @@ export declare class FallbackAccountManager {
     }): Promise<OAuthAccount>;
     private waitForConcurrentFallbackRefresh;
     private refreshAccountNow;
-    refreshAccountQuota(account: OAuthAccount, storage: AccountStorage): Promise<OAuthAccount>;
+    refreshAccountQuota(account: OAuthAccount, storage: AccountStorage): Promise<{
+        account: OAuthAccount;
+        fetched: boolean;
+    }>;
 }