@cortexkit/anthropic-auth-core 1.2.0 → 1.2.2

package/dist/accounts.js

@@ -1,5 +1,5 @@
 import { createHash, randomUUID } from 'node:crypto';
-import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { mkdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { ClaudeOAuthRefreshError, refreshClaudeOAuthToken } from "./auth.js";
@@ -21,6 +21,7 @@ const DEFAULT_MINIMUM_REMAINING = {
 };
 const DEFAULT_FAIL_CLOSED_ON_UNKNOWN_QUOTA = true;
 const BACKGROUND_TICK_MS = 60_000;
+const BACKGROUND_TICK_JITTER_MS = 60_000;
 function getConfigDir() {
     if (process.env.OPENCODE_CONFIG_DIR?.trim()) {
         return process.env.OPENCODE_CONFIG_DIR.trim();
@@ -162,46 +163,64 @@ export async function saveAccounts(storage, path = getAccountStoragePath()) {
 }
 export async function acquireRefreshFileLock(options) {
     const accountPath = options.path ?? getAccountStoragePath();
-    const lockDir = `${accountPath}.${options.name}.lock`;
-    const ownerPath = join(lockDir, 'owner.json');
+    const lockPath = `${accountPath}.${options.name}.lock`;
+    const legacyOwnerPath = join(lockPath, 'owner.json');
     const ownerId = randomUUID();
     const now = options.now ?? Date.now;
+    async function readOwner() {
+        try {
+            return JSON.parse(await readFile(lockPath, 'utf8'));
+        }
+        catch (error) {
+            const code = error.code;
+            if (code !== 'EISDIR')
+                throw error;
+            return JSON.parse(await readFile(legacyOwnerPath, 'utf8'));
+        }
+    }
     async function tryAcquire() {
         try {
-            await mkdir(lockDir, { mode: 0o700 });
-            await writeFile(ownerPath, `${JSON.stringify({ ownerId, expiresAt: now() + options.ttlMs })}\n`, { encoding: 'utf8', mode: 0o600 });
+            await writeFile(lockPath, `${JSON.stringify({ ownerId, expiresAt: now() + options.ttlMs })}\n`, { encoding: 'utf8', mode: 0o600, flag: 'wx' });
             return true;
         }
         catch (error) {
-            if (error.code !== 'EEXIST')
-                throw error;
-            return false;
+            const code = error.code;
+            if (code === 'EEXIST' || code === 'EISDIR')
+                return false;
+            throw error;
         }
     }
     if (!(await tryAcquire())) {
         try {
-            const owner = JSON.parse(await readFile(ownerPath, 'utf8'));
+            const owner = await readOwner();
             if (Number(owner?.expiresAt) > now())
                 return null;
         }
         catch {
-            // Broken owner metadata is treated as stale.
+            try {
+                const current = await stat(lockPath);
+                if (current.mtimeMs + options.ttlMs > Date.now())
+                    return null;
+            }
+            catch {
+                return null;
+            }
         }
-        await rm(lockDir, { recursive: true, force: true }).catch(() => { });
+        await rm(lockPath, { recursive: true, force: true }).catch(() => { });
         if (!(await tryAcquire()))
             return null;
     }
     return {
         release: async () => {
             try {
-                const owner = JSON.parse(await readFile(ownerPath, 'utf8'));
+                const owner = await readOwner();
                 if (owner?.ownerId !== ownerId)
                     return;
             }
             catch {
                 return;
             }
-            await rm(lockDir, { recursive: true, force: true }).catch(() => { });
+            await rm(lockPath, { recursive: true, force: true }).catch(() => { });
         },
     };
 }
@@ -327,6 +346,9 @@ function quotaEnabled(storage) {
 function refreshEnabled(storage) {
     return storage?.refresh?.enabled !== false;
 }
+function jitterMs(maxMs) {
+    return Math.floor(Math.random() * Math.max(0, maxMs));
+}
 function refreshBeforeExpiryMs(storage) {
     const minutes = storage?.refresh?.refreshBeforeExpiryMinutes ??
         DEFAULT_REFRESH_BEFORE_EXPIRY_MINUTES;
@@ -531,7 +553,7 @@ export class FallbackAccountManager {
         if (!this.refreshTimer) {
             this.refreshTimer = setInterval(() => {
                 void run().catch(() => { });
-            }, BACKGROUND_TICK_MS);
+            }, BACKGROUND_TICK_MS + jitterMs(BACKGROUND_TICK_JITTER_MS));
             if ('unref' in this.refreshTimer)
                 this.refreshTimer.unref();
         }

package/dist/constants.d.ts

@@ -4,7 +4,7 @@ export declare const AUTHORIZE_URLS: {
     readonly max: "https://claude.ai/oauth/authorize";
 };
 export declare const CODE_CALLBACK_URL = "https://platform.claude.com/oauth/code/callback";
-export declare const TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
+export declare const TOKEN_URL = "https://api.anthropic.com/v1/oauth/token";
 export declare const OAUTH_SCOPES: string[];
 export declare const TOOL_PREFIX = "mcp_";
 export declare const REQUIRED_BETAS: string[];

package/dist/constants.js

@@ -4,7 +4,7 @@ export const AUTHORIZE_URLS = {
     max: 'https://claude.ai/oauth/authorize',
 };
 export const CODE_CALLBACK_URL = 'https://platform.claude.com/oauth/code/callback';
-export const TOKEN_URL = 'https://platform.claude.com/v1/oauth/token';
+export const TOKEN_URL = 'https://api.anthropic.com/v1/oauth/token';
 export const OAUTH_SCOPES = [
     'org:create_api_key',
     'user:profile',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/anthropic-auth-core",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "type": "module",
   "repository": {
     "type": "git",