@cortexkit/opencode-anthropic-auth 1.22.0 → 2.0.0

package/dist/custody-dimensions.d.ts

@@ -0,0 +1,19 @@
+import { type AccountStorage, type CustodyStatusState } from '@cortexkit/anthropic-auth-core';
+/** Only the enrolled scoped roster can establish vault ownership. */
+export declare function isFallbackAccountVaultServed(accountId: string, storage: AccountStorage | null): boolean;
+export declare function fallbackCustodyDimensions(storage: AccountStorage | null): {
+    fallbacks: 'M';
+    evidence: 'N';
+} | {
+    fallbacks: "R" | "T";
+    evidence: 'V';
+};
+export declare function mainCustodyDimension(auth: {
+    type: string;
+    access?: string;
+    refresh?: string;
+}): "R" | "T" | "X";
+export declare function custodyStateFor(account: {
+    id: string;
+    role: 'main' | 'fallback';
+}, storage: AccountStorage | null): CustodyStatusState;

package/dist/custody-mode.d.ts

@@ -0,0 +1,46 @@
+export declare class CustodyStateMismatchError extends Error {
+    readonly verdict: string;
+    readonly dimensions: {
+        mode: 'L' | 'C';
+        main: 'R' | 'T' | 'X';
+        fallbacks: 'R' | 'T' | 'M';
+        evidence: 'V' | 'N';
+    };
+    readonly code = "custody_state_mismatch";
+    constructor(verdict: string, dimensions: {
+        mode: 'L' | 'C';
+        main: 'R' | 'T' | 'X';
+        fallbacks: 'R' | 'T' | 'M';
+        evidence: 'V' | 'N';
+    });
+    toJSON(): {
+        code: string;
+        verdict: string;
+        dimensions: {
+            mode: 'L' | 'C';
+            main: 'R' | 'T' | 'X';
+            fallbacks: 'R' | 'T' | 'M';
+            evidence: 'V' | 'N';
+        };
+    };
+}
+/**
+ * Check custody independently from account availability. Modes L/C mean local
+ * and Claustrum vault. Main R/T/X means a real login, inert tombstone, or no
+ * recognized OAuth marker; fallback R/T/M means local rows, token-free vault
+ * inventory, or missing roster. Evidence V/N means verified or unavailable.
+ * Local mode still requires completed migration and local account rows. Vault
+ * mode requires enrollment authority, the host marker and a readable roster,
+ * not an active primary. Each request separately authorizes its chosen account;
+ * the marker enables the provider but cannot authenticate it. Ordinary OpenCode
+ * API-key authentication remains outside this OAuth custody check.
+ */
+export declare function reconcileCustodyStartup(input: {
+    mode: 'L' | 'C';
+    main: 'R' | 'T' | 'X';
+    fallbacks: 'R' | 'T' | 'M';
+    evidence: 'V' | 'N';
+    authority?: 'committed' | 'retired';
+}): {
+    verdict: 'LOCAL_SERVE' | 'CLAUSTRUM_SERVE';
+};

package/dist/effort-history.d.ts

@@ -1,16 +1,21 @@
 import { type AdaptiveEffort } from '@cortexkit/anthropic-auth-core';
 export declare const EFFORT_MARKER_PREFIX = "<cortexkit-internal-effort-v2 ";
+export declare const EFFORT_ANCHOR_PREFIX = "<cortexkit-internal-effort-anchor-v1 ";
 export declare const EFFORT_PLAN_REQUEST_HEADER = "x-cortexkit-effort-plan";
 export type OpenCodeEffortMarkerPlan = {
     scope: string;
     baseline: AdaptiveEffort;
     markerCount: number;
     digest: string;
+    transitionTokens: readonly string[];
+    anchorToken?: string;
     sessionId: string;
     messageId: string;
 };
 export declare class EffortMarkerCorrelationError extends Error {
-    constructor(message: string);
+    readonly check: string;
+    readonly details: Record<string, unknown>;
+    constructor(message: string, check?: string, details?: Record<string, unknown>);
 }
 type OpenCodeMessageInfo = {
     id?: unknown;
@@ -40,12 +45,14 @@ export declare function encodeOpenCodeEffortPlan(plan: OpenCodeEffortMarkerPlan)
  */
 export declare function markOpenCodeEffortTransitions(messages: MutableOpenCodeMessage[]): OpenCodeEffortMarkerPlan | null;
 /** Consume request-correlated markers and insert Anthropic effort system messages. */
-export declare function applyOpenCodeEffortMarkers(body: Record<string, unknown>, enabled: boolean, requestPlanHeader?: string): {
+export declare function applyOpenCodeEffortMarkers(body: Record<string, unknown>, enabled: boolean, requestPlanHeader?: string, resolvedPlan?: OpenCodeEffortMarkerPlan): {
     found: number;
     inserted: number;
 };
 export declare class OpenCodeEffortPlanTracker {
     private readonly plans;
+    private readonly history;
+    private readonly historyByMessage;
     record(plan: OpenCodeEffortMarkerPlan): void;
     clear(sessionId: string, messageId: string): void;
     markHeaders(input: {
@@ -53,6 +60,8 @@ export declare class OpenCodeEffortPlanTracker {
         messageId: string;
         headers: Record<string, string>;
     }): boolean;
+    resolveHeader(value: string | undefined): OpenCodeEffortMarkerPlan | undefined;
+    private remember;
     private key;
 }
 export {};

package/dist/fable-fallback.d.ts

@@ -27,7 +27,7 @@ export type FableFallbackPlan = {
  * the same classifier refusal shape and recovery period. Mythos has no
  * classifiers and Sonnet 5 is not flagged — both stay outside this gate.
  */
-export type RecoverableRefusalFamily = 'fable-5' | 'fable-5-1' | 'opus-5';
+export type RecoverableRefusalFamily = 'fable-5' | 'fable-5-1' | 'opus-5' | 'opus-5-5';
 export declare function recoverableRefusalFamily(model: unknown): RecoverableRefusalFamily | null;
 export declare function isRecoverableRefusalModel(model: unknown): model is string;
 export declare class FableFallbackManager {

package/dist/index-1jkyhgyr.js

@@ -0,0 +1,2 @@
+var z=(f)=>f!==null&&typeof f==="object"&&!Array.isArray(f),G=(f)=>z(f)&&typeof f.sessionId==="string"&&f.sessionId.length>0,Z=(f)=>{if(!G(f)||!z(f)||f.command!=="claude"||typeof f.sectionId!=="string"||typeof f.actionId!=="string")return!1;if(f.itemId!==void 0&&typeof f.itemId!=="string")return!1;if(f.confirmed!==void 0&&typeof f.confirmed!=="boolean")return!1;if(f.values!==void 0&&(!z(f.values)||!Object.values(f.values).every((q)=>q===null||typeof q==="string"||typeof q==="boolean"||typeof q==="number"&&Number.isFinite(q))))return!1;return!0};function B(f){return{"~standard":{version:1,vendor:"cortexkit-native",validate:(q)=>f(q)?{value:q}:{issues:[{message:"Invalid native menu payload"}]}}}}var W=(f)=>z(f)&&f.command==="claude"&&z(f.menu)&&f.menu.command==="claude"&&typeof f.menu.title==="string"&&Array.isArray(f.menu.sections),$=(f)=>z(f)&&f.command==="claude"&&typeof f.ok==="boolean"&&typeof f.text==="string"&&z(f.menu)&&Array.isArray(f.menu.sections),A={id:"cortexkit-anthropic-native",methods:{open:{input:B(G),output:B(W)},apply:{input:B(Z),output:B($)}},events:{opened:{schema:B((f)=>G(f)&&W(f.payload))},notification:{schema:B((f)=>G(f)&&typeof f.message==="string"&&["info","warning","error"].includes(String(f.kind)))}}};async function L(f,q,X){let K=new AbortController,H=(j)=>({sessionId:j,notify(F,J="info"){D.events.emit("notification",{sessionId:j,message:F,kind:J}).catch(()=>{})}}),D=await f.rpc.register(A,{open:(j)=>q.open(H(j.sessionId)),apply:(j)=>q.apply(j,H(j.sessionId))}),Q;try{Q=await f.command.transform((j)=>j.add({name:"claude",description:"Native Claude accounts and settings",async execute(F){let J=await q.open(H(F.sessionID));await D.events.emit("opened",{sessionId:F.sessionID,payload:J})}}))}catch(j){throw await D.dispose(),j}let Y=(async()=>{try{for await(let j of f.event.subscribe({signal:K.signal}))if(j.type==="session.deleted")X.forgetSession(j.data.sessionID)}catch{}})(),S=!1;return{async dispose(){if(S)return;S=!0,K.abort(),await Promise.all([D.dispose(),Q.dispose(),Y])}}}
+export{A as s,L as t};

package/dist/{index-bx5hsgf8.js → index-2arfb1y3.js}

@@ -1,2 +1,2 @@
-var e=["claude-account","claude-cache","claude-cachekeep","claude-prime","claude-start","claude-quota","claude-dump","claude-fast","claude-routing","claude-killswitch","claude-logging"];
-export{e as pd};
+var t=["claude-account","claude-cache","claude-cachekeep","claude-prime","claude-start","claude-quota","claude-dump","claude-fast","claude-routing","claude-killswitch","claude-logging"];
+export{t as p};

package/dist/{index-926t2bzc.js → index-4ya27n12.js}

@@ -1,2 +1,2 @@
 import{mkdir as l,readdir as u,readFile as c,rename as p,unlink as m,writeFile as d}from"node:fs/promises";import{join as a}from"node:path";function f(t){try{return process.kill(t,0),!0}catch(r){return r.code==="EPERM"}}async function b(t,r){await l(t,{recursive:!0});let s={...r,startedAt:Date.now()},e=a(t,`port-${r.pid}.json`),i=`${e}.${process.pid}.tmp`;return await d(i,JSON.stringify(s),{encoding:"utf8",mode:384}),await p(i,e),e}async function h(t,r){let s;try{s=await u(t)}catch{return null}let e=[];for(let n of s){if(!n.startsWith("port-")||!n.endsWith(".json"))continue;try{let o=JSON.parse(await c(a(t,n),"utf8"));if(Number.isFinite(o.port))if(f(o.pid))e.push(o);else m(a(t,n)).catch(()=>{})}catch{}}if(e.length===0)return null;let i=r&&r>=1?e.filter((n)=>n.pid===r):[];return(i.length>0?i:e).sort((n,o)=>o.startedAt-n.startedAt)[0]??null}
-export{b as nd,h as od};
+export{b as pe,h as qe};

package/dist/{index-cgez4m0h.js → index-aaajxwzd.js}

@@ -1,2 +1,2 @@
 import{createRequire as q}from"node:module";var j=Object.create;var{getPrototypeOf:k,defineProperty:i,getOwnPropertyNames:l}=Object;var m=Object.prototype.hasOwnProperty;function n(a){return this[a]}var o,p,r=(a,b,d)=>{var f=a!=null&&typeof a==="object";if(f){var g=b?o??=new WeakMap:p??=new WeakMap,h=g.get(a);if(h)return h}d=a!=null?j(k(a)):{};let c=b||!a||!a.__esModule?i(d,"default",{value:a,enumerable:!0}):d;for(let e of l(a))if(!m.call(c,e))i(c,e,{get:n.bind(a,e),enumerable:!0});if(f)g.set(a,c);return c};var s=(a,b)=>()=>(b||a((b={exports:{}}).exports,b),b.exports);var u=q(import.meta.url);
-export{r as sd,s as td,u as ud};
+export{r as re,s as se,u as te};