@cortexkit/opencode-anthropic-auth 1.1.2 → 1.2.0

package/README.md

@@ -158,7 +158,7 @@ Example:
   "refresh": {
     "enabled": true,
     "intervalMinutes": 10,
-    "refreshBeforeExpiryMinutes": 30
+    "refreshBeforeExpiryMinutes": 240
   },
   "quota": {
     "enabled": true,
@@ -481,6 +481,25 @@ bun run lint
 bun run format:check
 ```
 
+### Build modes
+
+Two build modes are available:
+
+```bash
+bun run build      # Deploy: bun build → bundled dist/ with all deps inlined (core + xxhash-wasm)
+bun run build:dev  # Dev: tsc → individual dist/*.js files (requires workspace node_modules)
+```
+
+The default `build` uses `bun build` to bundle `@cortexkit/anthropic-auth-core` and all transitive dependencies into self-contained output files. No `node_modules/` needed at runtime — the plugin works via `file://` path in OpenCode config:
+
+```json
+{
+  "plugin": ["file:///path/to/anthropic-auth/packages/opencode"]
+}
+```
+
+`@opencode-ai/plugin` remains external (peer dep provided by OpenCode).
+
 Inspect package contents:
 
 ```bash

package/dist/cli.js

@@ -1,260 +1,12 @@
 #!/usr/bin/env node
-import { stdin as input, stdout as output } from 'node:process';
-import { createInterface } from 'node:readline/promises';
-import { authorize, exchange, generateRelayToken, getAccountStoragePath, loadAccounts, saveAccounts, WORKER_SCRIPT, } from '@cortexkit/anthropic-auth-core';
-function defaultStorage() {
-    return {
-        version: 1,
-        main: { type: 'opencode', provider: 'anthropic' },
-        fallbackOn: [401, 403, 429],
-        refresh: {
-            enabled: true,
-            intervalMinutes: 10,
-            refreshBeforeExpiryMinutes: 30,
-        },
-        quota: {
-            enabled: true,
-            checkIntervalMinutes: 5,
-            minimumRemaining: {
-                five_hour: 10,
-                seven_day: 20,
-            },
-            failClosedOnUnknownQuota: true,
-        },
-        accounts: [],
-    };
-}
-function usage() {
-    console.log(`Usage:
+import{l as y,m as w,o as l,p as u,q as m,ra as b,ta as k}from"./index-sebye7nt.js";import{stdin as A,stdout as $}from"node:process";import{createInterface as R}from"node:readline/promises";function v(){return{version:1,main:{type:"opencode",provider:"anthropic"},fallbackOn:[401,403,429],refresh:{enabled:!0,intervalMinutes:10,refreshBeforeExpiryMinutes:240},quota:{enabled:!0,checkIntervalMinutes:5,minimumRemaining:{five_hour:10,seven_day:20},failClosedOnUnknownQuota:!0},accounts:[]}}function h(){console.log(`Usage:
   opencode-anthropic-auth login [label]
   opencode-anthropic-auth list
   opencode-anthropic-auth relay setup
 
 Fallback accounts are stored in:
-  ${getAccountStoragePath()}`);
-}
-function requireText(value, name) {
-    const trimmed = value?.trim();
-    if (!trimmed)
-        throw new Error(`${name} is required`);
-    return trimmed;
-}
-async function cloudflareRequest(options) {
-    const response = await fetch(`https://api.cloudflare.com/client/v4${options.path}`, {
-        method: options.method,
-        headers: {
-            authorization: `Bearer ${options.token}`,
-            ...(options.body instanceof FormData
-                ? {}
-                : { 'content-type': 'application/json' }),
-            ...options.headers,
-        },
-        body: options.body,
-    });
-    const text = await response.text();
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        throw new Error(`Cloudflare API returned ${response.status}: ${text}`);
-    }
-    if (!response.ok || data.success === false) {
-        const message = data.errors
-            ?.map((error) => error.message)
-            .filter(Boolean)
-            .join('; ');
-        throw new Error(message || `Cloudflare API returned ${response.status}`);
-    }
-    return data.result;
-}
-async function createKvNamespace(token, accountId, title) {
-    return cloudflareRequest({
-        token,
-        method: 'POST',
-        path: `/accounts/${accountId}/storage/kv/namespaces`,
-        body: JSON.stringify({ title }),
-    });
-}
-async function uploadRelayWorker(options) {
-    const metadata = {
-        main_module: 'worker.js',
-        compatibility_date: '2026-04-28',
-        bindings: [
-            {
-                type: 'kv_namespace',
-                name: 'RELAY_STATE',
-                namespace_id: options.kvNamespaceId,
-            },
-            {
-                type: 'secret_text',
-                name: 'RELAY_TOKEN',
-                text: options.relayToken,
-            },
-        ],
-    };
-    const form = new FormData();
-    form.set('metadata', JSON.stringify(metadata));
-    form.set('worker.js', new Blob([WORKER_SCRIPT], { type: 'application/javascript+module' }), 'worker.js');
-    return cloudflareRequest({
-        token: options.token,
-        method: 'PUT',
-        path: `/accounts/${options.accountId}/workers/scripts/${options.scriptName}`,
-        body: form,
-    });
-}
-async function enableWorkersDev(token, accountId, scriptName) {
-    await cloudflareRequest({
-        token,
-        method: 'POST',
-        path: `/accounts/${accountId}/workers/scripts/${scriptName}/subdomain`,
-        body: JSON.stringify({ enabled: true, previews_enabled: false }),
-    });
-}
-async function getWorkersSubdomain(token, accountId) {
-    return cloudflareRequest({
-        token,
-        method: 'GET',
-        path: `/accounts/${accountId}/workers/subdomain`,
-    }).catch(() => null);
-}
-async function relaySetup() {
-    const storage = (await loadAccounts()) ?? defaultStorage();
-    const token = requireText(process.env.CLOUDFLARE_API_TOKEN?.trim() ||
-        (await prompt('Cloudflare API token: ')), 'Cloudflare API token');
-    const accountId = requireText(process.env.CLOUDFLARE_ACCOUNT_ID ||
-        (await prompt('Cloudflare account ID: ')), 'Cloudflare account ID');
-    const scriptName = (await prompt('Worker name [opencode-anthropic-relay]: ')) ||
-        'opencode-anthropic-relay';
-    const kvTitle = `${scriptName}-state`;
-    const relayToken = generateRelayToken();
-    console.log('Creating Cloudflare KV namespace...');
-    const namespace = await createKvNamespace(token, accountId, kvTitle);
-    console.log('Uploading relay Worker...');
-    await uploadRelayWorker({
-        token,
-        accountId,
-        scriptName,
-        kvNamespaceId: namespace.id,
-        relayToken,
-    });
-    await enableWorkersDev(token, accountId, scriptName).catch((error) => {
-        console.warn(`Could not enable workers.dev automatically: ${error instanceof Error ? error.message : String(error)}`);
-    });
-    const subdomain = await getWorkersSubdomain(token, accountId);
-    const defaultUrl = subdomain?.subdomain
-        ? `https://${scriptName}.${subdomain.subdomain}.workers.dev`
-        : '';
-    const url = defaultUrl ||
-        requireText(await prompt('Relay Worker URL: '), 'Relay Worker URL');
-    storage.relay = {
-        enabled: true,
-        url,
-        token: relayToken,
-        fallbackToDirect: true,
-        transport: 'http',
-    };
-    await saveAccounts(storage);
-    console.log(`Relay enabled at ${url}`);
-    console.log(`Config saved to ${getAccountStoragePath()}.`);
-}
-async function prompt(message) {
-    const rl = createInterface({ input, output });
-    try {
-        return (await rl.question(message)).trim();
-    }
-    finally {
-        rl.close();
-    }
-}
-function upsertAccount(storage, account) {
-    const index = storage.accounts.findIndex((candidate) => candidate.id === account.id ||
-        (account.label && candidate.label === account.label));
-    if (index >= 0) {
-        storage.accounts[index] = {
-            ...storage.accounts[index],
-            ...account,
-            addedAt: storage.accounts[index]?.addedAt ?? account.addedAt,
-            quota: account.quota,
-            lastRefreshedAt: account.lastRefreshedAt,
-            lastRefreshError: account.lastRefreshError,
-            lastQuotaRefreshError: account.lastQuotaRefreshError,
-        };
-        return;
-    }
-    storage.accounts.push(account);
-}
-async function login(labelArg) {
-    const storage = (await loadAccounts()) ?? defaultStorage();
-    const label = labelArg?.trim() || (await prompt('Fallback account label (optional): '));
-    const authorization = await authorize('max');
-    console.log('\nOpen this URL in your browser and complete Claude sign-in:\n');
-    console.log(`${authorization.url}\n`);
-    const code = await prompt('Paste the full callback URL or authorization code here: ');
-    const result = await exchange(code, authorization.verifier, authorization.redirectUri, authorization.state);
-    if (result.type === 'failed') {
-        throw new Error('Authentication failed');
-    }
-    const now = Date.now();
-    upsertAccount(storage, {
-        id: label || crypto.randomUUID(),
-        label: label || undefined,
-        type: 'oauth',
-        access: result.access,
-        refresh: result.refresh,
-        expires: result.expires,
-        enabled: true,
-        addedAt: now,
-        lastUsed: now,
-    });
-    await saveAccounts(storage);
-    console.log(`\nSaved fallback account${label ? ` "${label}"` : ''}.`);
-}
-async function listAccounts() {
-    const storage = await loadAccounts();
-    if (!storage?.accounts.length) {
-        console.log(`No fallback accounts found at ${getAccountStoragePath()}.`);
-        return;
-    }
-    for (const [index, account] of storage.accounts.entries()) {
-        const label = account.label || account.id;
-        const status = account.enabled === false ? 'disabled' : 'enabled';
-        const fiveHour = account.quota?.five_hour?.remainingPercent;
-        const sevenDay = account.quota?.seven_day?.remainingPercent;
-        const quota = fiveHour === undefined && sevenDay === undefined
-            ? 'quota unknown'
-            : `5h ${fiveHour ?? '?'}%, 1w ${sevenDay ?? '?'}% remaining`;
-        console.log(`${index + 1}. ${label} (${status}) — ${quota}`);
-    }
-}
-async function main() {
-    const [command, label] = process.argv.slice(2);
-    if (!command ||
-        command === 'help' ||
-        command === '--help' ||
-        command === '-h') {
-        usage();
-        return;
-    }
-    if (command === 'login') {
-        await login(label);
-        return;
-    }
-    if (command === 'list') {
-        await listAccounts();
-        return;
-    }
-    if (command === 'relay' && label === 'setup') {
-        await relaySetup();
-        return;
-    }
-    usage();
-    process.exitCode = 1;
-}
-try {
-    await main();
-}
-catch (error) {
-    console.error(error instanceof Error ? error.message : String(error));
-    process.exitCode = 1;
-}
+  ${l()}`)}function p(e,t){let a=e?.trim();if(!a)throw Error(`${t} is required`);return a}async function d(e){let t=await fetch(`https://api.cloudflare.com/client/v4${e.path}`,{method:e.method,headers:{authorization:`Bearer ${e.token}`,...e.body instanceof FormData?{}:{"content-type":"application/json"},...e.headers},body:e.body}),a=await t.text(),n;try{n=JSON.parse(a)}catch{throw Error(`Cloudflare API returned ${t.status}: ${a}`)}if(!t.ok||n.success===!1){let r=n.errors?.map((o)=>o.message).filter(Boolean).join("; ");throw Error(r||`Cloudflare API returned ${t.status}`)}return n.result}async function E(e,t,a){return d({token:e,method:"POST",path:`/accounts/${t}/storage/kv/namespaces`,body:JSON.stringify({title:a})})}async function I(e){let t={main_module:"worker.js",compatibility_date:"2026-04-28",bindings:[{type:"kv_namespace",name:"RELAY_STATE",namespace_id:e.kvNamespaceId},{type:"secret_text",name:"RELAY_TOKEN",text:e.relayToken}]},a=new FormData;return a.set("metadata",JSON.stringify(t)),a.set("worker.js",new Blob([k],{type:"application/javascript+module"}),"worker.js"),d({token:e.token,method:"PUT",path:`/accounts/${e.accountId}/workers/scripts/${e.scriptName}`,body:a})}async function T(e,t,a){await d({token:e,method:"POST",path:`/accounts/${t}/workers/scripts/${a}/subdomain`,body:JSON.stringify({enabled:!0,previews_enabled:!1})})}async function C(e,t){return d({token:e,method:"GET",path:`/accounts/${t}/workers/subdomain`}).catch(()=>null)}async function S(){let e=await u()??v(),t=p(process.env.CLOUDFLARE_API_TOKEN?.trim()||await c("Cloudflare API token: "),"Cloudflare API token"),a=p(process.env.CLOUDFLARE_ACCOUNT_ID||await c("Cloudflare account ID: "),"Cloudflare account ID"),n=await c("Worker name [opencode-anthropic-relay]: ")||"opencode-anthropic-relay",r=`${n}-state`,o=b();console.log("Creating Cloudflare KV namespace...");let s=await E(t,a,r);console.log("Uploading relay Worker..."),await I({token:t,accountId:a,scriptName:n,kvNamespaceId:s.id,relayToken:o}),await T(t,a,n).catch((f)=>{console.warn(`Could not enable workers.dev automatically: ${f instanceof Error?f.message:String(f)}`)});let i=await C(t,a),g=(i?.subdomain?`https://${n}.${i.subdomain}.workers.dev`:"")||p(await c("Relay Worker URL: "),"Relay Worker URL");e.relay={enabled:!0,url:g,token:o,fallbackToDirect:!0,transport:"http"},await m(e),console.log(`Relay enabled at ${g}`),console.log(`Config saved to ${l()}.`)}async function c(e){let t=R({input:A,output:$});try{return(await t.question(e)).trim()}finally{t.close()}}function O(e,t){let a=e.accounts.findIndex((n)=>n.id===t.id||t.label&&n.label===t.label);if(a>=0){e.accounts[a]={...e.accounts[a],...t,addedAt:e.accounts[a]?.addedAt??t.addedAt,quota:t.quota,lastRefreshedAt:t.lastRefreshedAt,lastRefreshError:t.lastRefreshError,lastQuotaRefreshError:t.lastQuotaRefreshError};return}e.accounts.push(t)}async function U(e){let t=await u()??v(),a=e?.trim()||await c("Fallback account label (optional): "),n=await y("max");console.log(`
+Open this URL in your browser and complete Claude sign-in:
+`),console.log(`${n.url}
+`);let r=await c("Paste the full callback URL or authorization code here: "),o=await w(r,n.verifier,n.redirectUri,n.state);if(o.type==="failed")throw Error("Authentication failed");let s=Date.now();O(t,{id:a||crypto.randomUUID(),label:a||void 0,type:"oauth",access:o.access,refresh:o.refresh,expires:o.expires,enabled:!0,addedAt:s,lastUsed:s}),await m(t),console.log(`
+Saved fallback account${a?` "${a}"`:""}.`)}async function _(){let e=await u();if(!e?.accounts.length){console.log(`No fallback accounts found at ${l()}.`);return}for(let[t,a]of e.accounts.entries()){let n=a.label||a.id,r=a.enabled===!1?"disabled":"enabled",o=a.quota?.five_hour?.remainingPercent,s=a.quota?.seven_day?.remainingPercent,i=o===void 0&&s===void 0?"quota unknown":`5h ${o??"?"}%, 1w ${s??"?"}% remaining`;console.log(`${t+1}. ${n} (${r}) — ${i}`)}}async function x(){let[e,t]=process.argv.slice(2);if(!e||e==="help"||e==="--help"||e==="-h"){h();return}if(e==="login"){await U(t);return}if(e==="list"){await _();return}if(e==="relay"&&t==="setup"){await S();return}h(),process.exitCode=1}try{await x()}catch(e){console.error(e instanceof Error?e.message:String(e)),process.exitCode=1}