@cortexkit/pi-anthropic-auth 2.2.7 → 2.3.0

package/dist/native.js

@@ -30,6 +30,18 @@ function requestPolicy(routeId, modelId) {
 }
 const runtimes = new Map();
 const RUNTIME_LIMIT = 16;
+const closingRuntimes = new Map();
+function closeRuntime(entry) {
+    const closing = entry.runtime.close();
+    const pending = closingRuntimes.get(entry.storagePath) ?? new Set();
+    closingRuntimes.set(entry.storagePath, pending);
+    pending.add(closing);
+    void closing.then(() => {
+        pending.delete(closing);
+        if (!pending.size)
+            closingRuntimes.delete(entry.storagePath);
+    }, () => { });
+}
 function runtimeCacheKey(storagePath) {
     const enrollment = getHostClaustrumEnrollmentPaths('pi');
     return JSON.stringify([
@@ -316,19 +328,22 @@ export function getPiNativeRuntime(storagePath = getPiAccountStoragePath(), opti
         const oldest = runtimes.keys().next().value;
         if (oldest === undefined)
             break;
-        void runtimes.get(oldest)?.runtime.close();
+        const evicted = runtimes.get(oldest);
+        if (evicted)
+            closeRuntime(evicted);
         runtimes.delete(oldest);
     }
     runtimes.set(key, { contextKey, storagePath: resolve(storagePath), runtime });
     return runtime;
 }
 export function closePiNativeRuntime(storagePath = getPiAccountStoragePath()) {
-    const closing = [];
     for (const [key, entry] of runtimes) {
         if (entry.storagePath !== resolve(storagePath))
             continue;
         runtimes.delete(key);
-        closing.push(entry.runtime.close());
+        closeRuntime(entry);
     }
-    return Promise.all(closing).then(() => { });
+    // Eviction removes cache entries before their quota drain finishes. Shutdown
+    // must also join those closes, not only the runtimes still in the cache.
+    return Promise.all(closingRuntimes.get(resolve(storagePath)) ?? []).then(() => { });
 }

package/dist/transport.js

@@ -1,30 +1,16 @@
-const ANTHROPIC_ORIGIN = 'https://api.anthropic.com';
+import { createAnthropicOAuthFetch, requireAnthropicOAuthOrigin, } from '@cortexkit/anthropic-auth-core';
+// Pi keeps its own refusal wording; Core supplies the origin rule itself.
+const PI_OAUTH_ORIGIN = {
+    refusal: (reason) => new Error(reason === 'unparseable'
+        ? 'Native OAuth requires the official Anthropic HTTPS origin'
+        : 'Native OAuth requires the official Anthropic HTTPS origin without URL userinfo'),
+};
 /** Model base URLs and remembered cache-warm URLs must send OAuth tokens only to Anthropic’s HTTPS server. */
 export function requirePiOAuthOrigin(value) {
-    let url;
-    try {
-        url = new URL(value);
-    }
-    catch {
-        throw new Error('Native OAuth requires the official Anthropic HTTPS origin');
-    }
-    if (url.protocol !== 'https:' ||
-        url.origin !== ANTHROPIC_ORIGIN ||
-        url.username ||
-        url.password)
-        throw new Error('Native OAuth requires the official Anthropic HTTPS origin without URL userinfo');
-    return url;
+    return requireAnthropicOAuthOrigin(value, PI_OAUTH_ORIGIN);
 }
 export function buildPiOAuthMessagesUrl(baseUrl) {
     return new URL('/v1/messages?beta=true', requirePiOAuthOrigin(baseUrl));
 }
 /** Reject redirects rather than letting an approved OAuth destination forward the request. */
-export const fetchPiOAuth = Object.assign(async (input, init) => {
-    requirePiOAuthOrigin(input instanceof Request ? input.url : String(input));
-    return fetch(input, { ...init, redirect: 'error' });
-}, {
-    preconnect: (...args) => {
-        requirePiOAuthOrigin(String(args[0]));
-        return fetch.preconnect(...args);
-    },
-});
+export const fetchPiOAuth = createAnthropicOAuthFetch(PI_OAUTH_ORIGIN);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/pi-anthropic-auth",
-  "version": "2.2.7",
+  "version": "2.3.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -36,7 +36,7 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "2.2.7"
+    "@cortexkit/anthropic-auth-core": "2.3.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": ">=0.86.1 <2",