@cortexkit/opencode-anthropic-auth 1.1.2 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/opencode-anthropic-auth",
-  "version": "1.1.2",
+  "version": "1.2.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
     "opencode-anthropic-auth": "dist/cli.js"
   },
   "engines": {
-    "bun": "1.3.11"
+    "bun": "1.3.14"
   },
   "files": [
     "dist",
@@ -27,7 +27,8 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "build": "rm -rf dist && bun build src/index.ts src/cli.ts --outdir dist --target node --format esm --splitting --external @opencode-ai/plugin --minify && tsc -p tsconfig.build.json --emitDeclarationOnly",
+    "build:dev": "rm -rf dist && tsc -p tsconfig.build.json",
     "dev": "bun ../../scripts/dev.ts",
     "dev:clean": "bun ../../scripts/dev-clean.ts",
     "extract": "bun ../../scripts/extract-system-prompt.ts",
@@ -40,6 +41,6 @@
     "@opencode-ai/plugin": "*"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "1.1.2"
+    "@cortexkit/anthropic-auth-core": "1.2.0"
   }
 }

package/dist/prompt-context.js

@@ -1,98 +0,0 @@
-function isRecord(value) {
-    return typeof value === 'object' && value !== null;
-}
-function extractMessages(response) {
-    if (Array.isArray(response))
-        return response;
-    if (isRecord(response) && Array.isArray(response.data))
-        return response.data;
-    return [];
-}
-function getRole(message) {
-    if (!isRecord(message) || !isRecord(message.info))
-        return undefined;
-    return typeof message.info.role === 'string' ? message.info.role : undefined;
-}
-function extractFromMessage(message) {
-    if (!isRecord(message) || !isRecord(message.info))
-        return null;
-    const info = message.info;
-    const modelInfo = isRecord(info.model) ? info.model : undefined;
-    const agent = typeof info.agent === 'string' ? info.agent : undefined;
-    const providerID = typeof modelInfo?.providerID === 'string'
-        ? modelInfo.providerID
-        : typeof info.providerID === 'string'
-            ? info.providerID
-            : undefined;
-    const modelID = typeof modelInfo?.modelID === 'string'
-        ? modelInfo.modelID
-        : typeof info.modelID === 'string'
-            ? info.modelID
-            : undefined;
-    const variant = typeof modelInfo?.variant === 'string'
-        ? modelInfo.variant
-        : typeof info.variant === 'string'
-            ? info.variant
-            : undefined;
-    if (!agent && (!providerID || !modelID) && !variant)
-        return null;
-    const context = {};
-    if (agent)
-        context.agent = agent;
-    if (providerID && modelID)
-        context.model = { providerID, modelID };
-    if (variant)
-        context.variant = variant;
-    return context;
-}
-function mergeContexts(base, patch) {
-    return {
-        agent: base.agent ?? patch.agent,
-        model: base.model ?? patch.model,
-        variant: base.variant ?? patch.variant,
-    };
-}
-function isComplete(context) {
-    return Boolean(context.agent && context.model && context.variant);
-}
-export async function resolvePromptContext(client, sessionId) {
-    if (!client || !sessionId)
-        return null;
-    const typedClient = client;
-    if (typeof typedClient.session?.messages !== 'function')
-        return null;
-    let messages = [];
-    try {
-        messages = extractMessages(await Promise.resolve(typedClient.session.messages({
-            path: { id: sessionId },
-            query: { limit: 100 },
-        })));
-    }
-    catch {
-        return null;
-    }
-    if (messages.length === 0)
-        return null;
-    let result = {};
-    for (let index = messages.length - 1; index >= 0; index--) {
-        if (getRole(messages[index]) !== 'assistant')
-            continue;
-        const context = extractFromMessage(messages[index]);
-        if (!context)
-            continue;
-        result = mergeContexts(result, context);
-        if (isComplete(result))
-            return result;
-    }
-    for (let index = messages.length - 1; index >= 0; index--) {
-        const context = extractFromMessage(messages[index]);
-        if (!context)
-            continue;
-        result = mergeContexts(result, context);
-        if (isComplete(result))
-            return result;
-    }
-    if (!result.agent && !result.model && !result.variant)
-        return null;
-    return result;
-}

package/dist/transform.js

@@ -1,498 +0,0 @@
-import { applyClaudeCodeHeaders, applyClaudeCodeMetadata, buildBillingHeaderValue, CLAUDE_CODE_ENTRYPOINT, CLAUDE_CODE_IDENTITY, FAST_MODE_BETA, isFastModeSupportedModel, mergeAnthropicBetas, OPENCODE_IDENTITY_PREFIX, orderClaudeCodeBody, PARAGRAPH_REMOVAL_ANCHORS, REQUIRED_BETAS, signRequestBody, TEXT_REPLACEMENTS, TOOL_PREFIX, } from '@cortexkit/anthropic-auth-core';
-/**
- * Prefix a tool name with TOOL_PREFIX and uppercase the first character.
- * Claude Code uses PascalCase tool names (e.g. mcp_Bash, mcp_Read);
- * lowercase names (mcp_bash, mcp_read) are flagged as non-Claude-Code clients.
- */
-function prefixName(name) {
-    return `${TOOL_PREFIX}${name.charAt(0).toUpperCase()}${name.slice(1)}`;
-}
-/**
- * Reverse prefixName: strip TOOL_PREFIX and restore the original leading case.
- */
-function unprefixName(name) {
-    // StructuredOutput is still used as StructuredOutput
-    if (name === 'StructuredOutput') {
-        return name;
-    }
-    return `${name.charAt(0).toLowerCase()}${name.slice(1)}`;
-}
-/**
- * Merge headers from a Request object and/or a RequestInit headers value
- * into a single Headers instance.
- */
-export function mergeHeaders(input, init) {
-    const headers = new Headers();
-    if (input instanceof Request) {
-        input.headers.forEach((value, key) => {
-            headers.set(key, value);
-        });
-    }
-    const initHeaders = init?.headers;
-    if (initHeaders) {
-        if (initHeaders instanceof Headers) {
-            initHeaders.forEach((value, key) => {
-                headers.set(key, value);
-            });
-        }
-        else if (Array.isArray(initHeaders)) {
-            for (const entry of initHeaders) {
-                const [key, value] = entry;
-                if (typeof value !== 'undefined') {
-                    headers.set(key, String(value));
-                }
-            }
-        }
-        else {
-            for (const [key, value] of Object.entries(initHeaders)) {
-                if (typeof value !== 'undefined') {
-                    headers.set(key, String(value));
-                }
-            }
-        }
-    }
-    return headers;
-}
-/**
- * Merge incoming beta headers with the required OAuth betas, deduplicating.
- */
-export function mergeBetaHeaders(headers) {
-    const incomingBeta = headers.get('anthropic-beta') || '';
-    const incomingBetasList = incomingBeta
-        .split(',')
-        .map((b) => b.trim())
-        .filter(Boolean);
-    return [...new Set([...REQUIRED_BETAS, ...incomingBetasList])].join(',');
-}
-export function addFastModeBetaHeader(headers) {
-    headers.set('anthropic-beta', mergeAnthropicBetas(headers.get('anthropic-beta'), [FAST_MODE_BETA]));
-    return headers;
-}
-/**
- * Set OAuth-required headers on the request: authorization, beta, user-agent.
- * Removes x-api-key since we're using OAuth.
- */
-export function setOAuthHeaders(headers, accessToken, options = {}) {
-    return applyClaudeCodeHeaders(headers, accessToken, options);
-}
-/**
- * Add TOOL_PREFIX to tool names in the request body.
- * Prefixes both tool definitions and tool_use blocks in messages.
- */
-export function prefixToolNames(parsed) {
-    if (parsed.tools && Array.isArray(parsed.tools)) {
-        parsed.tools = parsed.tools.map((tool) => ({
-            ...tool,
-            name: tool.name ? prefixName(tool.name) : tool.name,
-        }));
-    }
-    if (parsed.messages && Array.isArray(parsed.messages)) {
-        parsed.messages = parsed.messages.map((msg) => {
-            if (msg.content && Array.isArray(msg.content)) {
-                msg.content = msg.content.map((block) => {
-                    if (block.type === 'tool_use' && block.name) {
-                        return { ...block, name: prefixName(block.name) };
-                    }
-                    return block;
-                });
-            }
-            return msg;
-        });
-    }
-    return JSON.stringify(orderClaudeCodeBody(parsed));
-}
-/**
- * Strip TOOL_PREFIX from tool names in streaming response text.
- */
-export function stripToolPrefix(text) {
-    return text.replace(/"name"\s*:\s*"mcp_([^"]+)"/g, (_match, name) => `"name": "${unprefixName(name)}"`);
-}
-function splitToolPrefixRewriteBuffer(buffer, flush = false) {
-    if (flush)
-        return { ready: stripToolPrefix(buffer), pending: '' };
-    let keepFrom = buffer.length;
-    const marker = '"name"';
-    const partialMarkerStart = Math.max(0, buffer.length - marker.length + 1);
-    for (let index = partialMarkerStart; index < buffer.length; index++) {
-        if (marker.startsWith(buffer.slice(index))) {
-            keepFrom = Math.min(keepFrom, index);
-            break;
-        }
-    }
-    const lastName = buffer.lastIndexOf(marker);
-    if (lastName !== -1) {
-        const tail = buffer.slice(lastName);
-        if (/^"name"\s*(?::\s*(?:"[^"]*)?)?$/.test(tail)) {
-            keepFrom = Math.min(keepFrom, lastName);
-        }
-    }
-    if (keepFrom < buffer.length) {
-        return {
-            ready: stripToolPrefix(buffer.slice(0, keepFrom)),
-            pending: buffer.slice(keepFrom),
-        };
-    }
-    return { ready: stripToolPrefix(buffer), pending: '' };
-}
-/**
- * Check if TLS verification should be skipped for custom API endpoints.
- * Only effective when ANTHROPIC_BASE_URL is also set.
- */
-export function isInsecure() {
-    if (!process.env.ANTHROPIC_BASE_URL?.trim())
-        return false;
-    const raw = process.env.ANTHROPIC_INSECURE?.trim();
-    return raw === '1' || raw === 'true';
-}
-/**
- * Parse ANTHROPIC_BASE_URL from the environment.
- * Returns a valid HTTP(S) URL or null if unset/invalid.
- */
-function resolveBaseUrl() {
-    const raw = process.env.ANTHROPIC_BASE_URL?.trim();
-    if (!raw)
-        return null;
-    try {
-        const baseUrl = new URL(raw);
-        if ((baseUrl.protocol !== 'http:' && baseUrl.protocol !== 'https:') ||
-            baseUrl.username ||
-            baseUrl.password) {
-            return null;
-        }
-        return baseUrl;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Rewrite the request URL to add ?beta=true for /v1/messages requests.
- * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)
- * for all API requests flowing through the fetch wrapper.
- * Returns the modified input and URL (if applicable).
- */
-export function rewriteUrl(input) {
-    let requestUrl = null;
-    try {
-        if (typeof input === 'string' || input instanceof URL) {
-            requestUrl = new URL(input.toString());
-        }
-        else if (input instanceof Request) {
-            requestUrl = new URL(input.url);
-        }
-    }
-    catch {
-        requestUrl = null;
-    }
-    if (!requestUrl)
-        return { input, url: null };
-    const originalHref = requestUrl.href;
-    const baseUrl = resolveBaseUrl();
-    if (baseUrl) {
-        requestUrl.protocol = baseUrl.protocol;
-        requestUrl.host = baseUrl.host;
-    }
-    if (requestUrl.pathname === '/v1/messages' &&
-        !requestUrl.searchParams.has('beta')) {
-        requestUrl.searchParams.set('beta', 'true');
-    }
-    if (requestUrl.href === originalHref) {
-        return { input, url: requestUrl };
-    }
-    const newInput = input instanceof Request
-        ? new Request(requestUrl.toString(), input)
-        : requestUrl;
-    return { input: newInput, url: requestUrl };
-}
-/**
- * Sanitize OpenCode-branded strings from the system prompt text.
- *
- * 1. Removes the OPENCODE_IDENTITY paragraph.
- * 2. Removes any paragraph (text between blank lines) that contains
- *    one of the PARAGRAPH_REMOVAL_ANCHORS — typically URLs that
- *    identify OpenCode-specific content.
- * 3. Applies TEXT_REPLACEMENTS for inline occurrences of "OpenCode"
- *    inside paragraphs we want to keep.
- *
- * This approach is resilient to upstream rewording of the OpenCode
- * prompt — as long as the anchor strings (URLs, etc.) still appear
- * somewhere in the paragraph, the removal works.
- */
-export function sanitizeSystemText(text) {
-    // Split into paragraphs (separated by one or more blank lines)
-    const paragraphs = text.split(/\n\n+/);
-    const filtered = paragraphs.filter((paragraph) => {
-        if (paragraph.includes(OPENCODE_IDENTITY_PREFIX)) {
-            // If the paragraph contains the identity, drop it entirely
-            return false;
-        }
-        // Remove paragraphs containing any removal anchor
-        for (const anchor of PARAGRAPH_REMOVAL_ANCHORS) {
-            if (paragraph.includes(anchor))
-                return false;
-        }
-        return true;
-    });
-    let result = filtered.join('\n\n');
-    // Apply inline text replacements
-    for (const rule of TEXT_REPLACEMENTS) {
-        result = result.replace(rule.match, rule.replacement);
-    }
-    return result.trim();
-}
-function isRecord(value) {
-    return value != null && typeof value === 'object' && !Array.isArray(value);
-}
-/**
- * Sanitize system prompt and prepend Claude Code identity.
- * Handles all Anthropic API system formats: undefined, string, or array of text blocks.
- */
-export function prependClaudeCodeIdentity(system) {
-    const identityBlock = {
-        type: 'text',
-        text: CLAUDE_CODE_IDENTITY,
-    };
-    if (system == null)
-        return [identityBlock];
-    if (typeof system === 'string') {
-        const sanitized = sanitizeSystemText(system);
-        if (sanitized === CLAUDE_CODE_IDENTITY)
-            return [identityBlock];
-        return [identityBlock, { type: 'text', text: sanitized }];
-    }
-    if (isRecord(system)) {
-        const type = typeof system.type === 'string' ? system.type : 'text';
-        const text = typeof system.text === 'string' ? system.text : '';
-        return [identityBlock, { ...system, type, text: sanitizeSystemText(text) }];
-    }
-    if (!Array.isArray(system))
-        return [identityBlock];
-    const sanitized = system.map((item) => {
-        if (typeof item === 'string') {
-            return { type: 'text', text: sanitizeSystemText(item) };
-        }
-        if (isRecord(item) &&
-            item.type === 'text' &&
-            typeof item.text === 'string') {
-            return {
-                ...item,
-                type: 'text',
-                text: sanitizeSystemText(item.text),
-            };
-        }
-        return { type: 'text', text: String(item) };
-    });
-    // Idempotency: don't double-prepend if first block already has the identity
-    if (sanitized[0]?.text === CLAUDE_CODE_IDENTITY) {
-        return sanitized;
-    }
-    return [identityBlock, ...sanitized];
-}
-const CACHE_1H_CONTROL = { type: 'ephemeral', ttl: '1h' };
-function getCacheControl(value) {
-    if (isRecord(value.cache_control))
-        return value.cache_control;
-    if (isRecord(value.cacheControl))
-        return value.cacheControl;
-    return null;
-}
-function setWireCacheControl(value, withTtl) {
-    if (!isRecord(value))
-        return false;
-    delete value.cacheControl;
-    value.cache_control = withTtl
-        ? { ...CACHE_1H_CONTROL }
-        : { type: 'ephemeral' };
-    return true;
-}
-function removeCacheControl(value) {
-    if (!isRecord(value))
-        return;
-    delete value.cache_control;
-    delete value.cacheControl;
-}
-function normalizeContentToArray(content) {
-    if (Array.isArray(content))
-        return content;
-    if (typeof content === 'string')
-        return [{ type: 'text', text: content }];
-    return null;
-}
-function updateCacheControlTtl(value, cache1hEnabled) {
-    if (!isRecord(value))
-        return;
-    const cacheControl = getCacheControl(value);
-    if (!cacheControl || cacheControl.type !== 'ephemeral')
-        return;
-    if (cache1hEnabled) {
-        cacheControl.ttl = '1h';
-    }
-    else {
-        delete cacheControl.ttl;
-    }
-}
-function applyCache1hTtl(parsed, cache1hEnabled) {
-    if (Array.isArray(parsed.system)) {
-        for (const block of parsed.system)
-            updateCacheControlTtl(block, cache1hEnabled);
-    }
-    else {
-        updateCacheControlTtl(parsed.system, cache1hEnabled);
-    }
-    if (!Array.isArray(parsed.messages))
-        return;
-    for (const message of parsed.messages) {
-        updateCacheControlTtl(message, cache1hEnabled);
-        if (isRecord(message) && Array.isArray(message.content)) {
-            for (const block of message.content) {
-                updateCacheControlTtl(block, cache1hEnabled);
-            }
-        }
-    }
-}
-function walkCacheControlTargets(parsed, visitor) {
-    if (Array.isArray(parsed.system)) {
-        for (const block of parsed.system)
-            visitor(block);
-    }
-    else {
-        visitor(parsed.system);
-    }
-    if (!Array.isArray(parsed.messages))
-        return;
-    for (const message of parsed.messages) {
-        visitor(message);
-        if (isRecord(message) && Array.isArray(message.content)) {
-            for (const block of message.content)
-                visitor(block);
-        }
-    }
-}
-function removeAllCacheControls(parsed) {
-    removeCacheControl(parsed);
-    walkCacheControlTargets(parsed, removeCacheControl);
-}
-function applyAutomaticCache1h(parsed) {
-    removeAllCacheControls(parsed);
-    parsed.cache_control = { ...CACHE_1H_CONTROL };
-}
-function setMessageCacheAnchor(message) {
-    if (!isRecord(message))
-        return false;
-    const content = normalizeContentToArray(message.content);
-    if (!content?.length)
-        return setWireCacheControl(message, true);
-    message.content = content;
-    const lastCacheableBlock = [...content]
-        .reverse()
-        .find((block) => isRecord(block) && block.type !== 'thinking');
-    return setWireCacheControl(lastCacheableBlock ?? message, true);
-}
-function applyHybridCache1h(parsed) {
-    removeAllCacheControls(parsed);
-    if (Array.isArray(parsed.system)) {
-        const identityIndex = parsed.system.findIndex((block) => isRecord(block) && block.text === CLAUDE_CODE_IDENTITY);
-        const cacheableSystemBlocks = parsed.system
-            .slice(identityIndex >= 0 ? identityIndex + 1 : 0)
-            .filter(isRecord);
-        const lastSystemBlock = cacheableSystemBlocks[cacheableSystemBlocks.length - 1];
-        setWireCacheControl(lastSystemBlock, true);
-    }
-    else {
-        setWireCacheControl(parsed.system, true);
-    }
-    if (!Array.isArray(parsed.messages))
-        return;
-    setMessageCacheAnchor(parsed.messages[0]);
-    setMessageCacheAnchor(parsed.messages[1]);
-    const movingMessageIndex = parsed.messages.length - 2;
-    if (movingMessageIndex > 1) {
-        setMessageCacheAnchor(parsed.messages[movingMessageIndex]);
-    }
-}
-function applyCache1hStrategy(parsed, options) {
-    if (!options.enabled) {
-        applyCache1hTtl(parsed, false);
-        delete parsed.cache_control;
-        delete parsed.cacheControl;
-        return;
-    }
-    if (options.mode === 'automatic') {
-        applyAutomaticCache1h(parsed);
-        return;
-    }
-    if (options.mode === 'hybrid') {
-        applyHybridCache1h(parsed);
-        return;
-    }
-    applyCache1hTtl(parsed, true);
-    delete parsed.cacheControl;
-}
-/**
- * Rewrite the full request body: sanitize system prompt and prefix tool names.
- */
-export async function rewriteRequestBody(body, options = {}) {
-    try {
-        const parsed = JSON.parse(body);
-        const billingHeader = Array.isArray(parsed.messages) &&
-            parsed.messages.some((message) => message.role === 'user')
-            ? buildBillingHeaderValue(parsed.messages, undefined, CLAUDE_CODE_ENTRYPOINT)
-            : null;
-        // Sanitize system prompt and prepend Claude Code identity
-        parsed.system = prependClaudeCodeIdentity(parsed.system);
-        // Prepend the billing header as a separate system block so the
-        // final layout is: [billing header, identity, ...rest]
-        if (billingHeader && Array.isArray(parsed.system)) {
-            parsed.system.unshift({ type: 'text', text: billingHeader });
-        }
-        applyCache1hStrategy(parsed, {
-            enabled: options.cache1hEnabled ?? false,
-            mode: options.cache1hMode ?? 'explicit',
-        });
-        if (options.fastModeEnabled && isFastModeSupportedModel(parsed.model)) {
-            parsed.speed = 'fast';
-        }
-        else if (parsed.speed === 'fast') {
-            delete parsed.speed;
-        }
-        if (options.identity)
-            applyClaudeCodeMetadata(parsed, options.identity);
-        return await signRequestBody(prefixToolNames(parsed));
-    }
-    catch {
-        return body;
-    }
-}
-/**
- * Create a streaming response that strips the tool prefix from tool names.
- */
-export function createStrippedStream(response) {
-    if (!response.body)
-        return response;
-    const reader = response.body.getReader();
-    const decoder = new TextDecoder();
-    const encoder = new TextEncoder();
-    let pending = '';
-    const stream = new ReadableStream({
-        async pull(controller) {
-            const { done, value } = await reader.read();
-            if (done) {
-                const flushed = splitToolPrefixRewriteBuffer(`${pending}${decoder.decode()}`, true);
-                if (flushed.ready)
-                    controller.enqueue(encoder.encode(flushed.ready));
-                controller.close();
-                return;
-            }
-            const text = pending + decoder.decode(value, { stream: true });
-            const rewritten = splitToolPrefixRewriteBuffer(text);
-            pending = rewritten.pending;
-            if (rewritten.ready)
-                controller.enqueue(encoder.encode(rewritten.ready));
-        },
-    });
-    return new Response(stream, {
-        status: response.status,
-        statusText: response.statusText,
-        headers: response.headers,
-    });
-}