@cortexkit/pi-anthropic-auth 2.2.6 → 2.2.8

package/dist/stream.js

@@ -1032,7 +1032,7 @@ async function executeWithFallback(options) {
                     type: 'error',
                     error: {
                         type: 'rate_limit_error',
-                        message: 'Sticky OAuth account five-hour quota resets shortly; retaining session affinity.',
+                        message: 'Sticky OAuth account quota resets shortly; retaining session affinity.',
                     },
                 }), {
                     status: 429,
@@ -1083,7 +1083,7 @@ async function executeWithFallback(options) {
                         type: 'error',
                         error: {
                             type: 'rate_limit_error',
-                            message: 'Sticky OAuth account five-hour quota resets shortly; retaining session affinity.',
+                            message: 'Sticky OAuth account quota resets shortly; retaining session affinity.',
                         },
                     }), { status: 429, headers }));
                 }

package/dist/transport.js

@@ -1,30 +1,16 @@
-const ANTHROPIC_ORIGIN = 'https://api.anthropic.com';
+import { createAnthropicOAuthFetch, requireAnthropicOAuthOrigin, } from '@cortexkit/anthropic-auth-core';
+// Pi keeps its own refusal wording; Core supplies the origin rule itself.
+const PI_OAUTH_ORIGIN = {
+    refusal: (reason) => new Error(reason === 'unparseable'
+        ? 'Native OAuth requires the official Anthropic HTTPS origin'
+        : 'Native OAuth requires the official Anthropic HTTPS origin without URL userinfo'),
+};
 /** Model base URLs and remembered cache-warm URLs must send OAuth tokens only to Anthropic’s HTTPS server. */
 export function requirePiOAuthOrigin(value) {
-    let url;
-    try {
-        url = new URL(value);
-    }
-    catch {
-        throw new Error('Native OAuth requires the official Anthropic HTTPS origin');
-    }
-    if (url.protocol !== 'https:' ||
-        url.origin !== ANTHROPIC_ORIGIN ||
-        url.username ||
-        url.password)
-        throw new Error('Native OAuth requires the official Anthropic HTTPS origin without URL userinfo');
-    return url;
+    return requireAnthropicOAuthOrigin(value, PI_OAUTH_ORIGIN);
 }
 export function buildPiOAuthMessagesUrl(baseUrl) {
     return new URL('/v1/messages?beta=true', requirePiOAuthOrigin(baseUrl));
 }
 /** Reject redirects rather than letting an approved OAuth destination forward the request. */
-export const fetchPiOAuth = Object.assign(async (input, init) => {
-    requirePiOAuthOrigin(input instanceof Request ? input.url : String(input));
-    return fetch(input, { ...init, redirect: 'error' });
-}, {
-    preconnect: (...args) => {
-        requirePiOAuthOrigin(String(args[0]));
-        return fetch.preconnect(...args);
-    },
-});
+export const fetchPiOAuth = createAnthropicOAuthFetch(PI_OAUTH_ORIGIN);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/pi-anthropic-auth",
-  "version": "2.2.6",
+  "version": "2.2.8",
   "type": "module",
   "repository": {
     "type": "git",
@@ -36,7 +36,7 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "2.2.6"
+    "@cortexkit/anthropic-auth-core": "2.2.8"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": ">=0.86.1 <2",