@ex-machina/opencode-anthropic-auth 0.0.17 → 0.1.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2025 SST
+Copyright (c) 2025 Ex Machina
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,4 +1,4 @@
-# @ex-machina/opencode-anthropic-auth
+# OpenCode Anthropic Auth Plugin
 
 An [OpenCode](https://github.com/anomalyco/opencode) plugin that provides Anthropic OAuth authentication, enabling Claude Pro/Max users to use their subscription directly with OpenCode.
 
@@ -8,12 +8,6 @@ An [OpenCode](https://github.com/anomalyco/opencode) plugin that provides Anthro
   ![renaming.jpg](images/renaming.jpg)
 </details>
 
-## Installation
-
-```bash
-npm install @ex-machina/opencode-anthropic-auth
-```
-
 ## Usage
 
 Add the plugin to your OpenCode configuration:

package/dist/auth.d.ts

@@ -0,0 +1,13 @@
+export declare function authorize(mode: 'max' | 'console'): Promise<{
+    url: string;
+    verifier: string;
+}>;
+export type ExchangeResult = {
+    type: 'success';
+    refresh: string;
+    access: string;
+    expires: number;
+} | {
+    type: 'failed';
+};
+export declare function exchange(code: string, verifier: string): Promise<ExchangeResult>;

package/dist/auth.js

@@ -0,0 +1,47 @@
+import { generatePKCE } from '@openauthjs/openauth/pkce';
+import { CLIENT_ID } from './constants';
+export async function authorize(mode) {
+    const pkce = await generatePKCE();
+    const url = new URL(`https://${mode === 'console' ? 'console.anthropic.com' : 'claude.ai'}/oauth/authorize`, import.meta.url);
+    url.searchParams.set('code', 'true');
+    url.searchParams.set('client_id', CLIENT_ID);
+    url.searchParams.set('response_type', 'code');
+    url.searchParams.set('redirect_uri', 'https://console.anthropic.com/oauth/code/callback');
+    url.searchParams.set('scope', 'org:create_api_key user:profile user:inference');
+    url.searchParams.set('code_challenge', pkce.challenge);
+    url.searchParams.set('code_challenge_method', 'S256');
+    url.searchParams.set('state', pkce.verifier);
+    return {
+        url: url.toString(),
+        verifier: pkce.verifier,
+    };
+}
+export async function exchange(code, verifier) {
+    const splits = code.split('#');
+    const result = await fetch('https://console.anthropic.com/v1/oauth/token', {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            code: splits[0],
+            state: splits[1],
+            grant_type: 'authorization_code',
+            client_id: CLIENT_ID,
+            redirect_uri: 'https://console.anthropic.com/oauth/code/callback',
+            code_verifier: verifier,
+        }),
+    });
+    if (!result.ok) {
+        return {
+            type: 'failed',
+        };
+    }
+    const json = (await result.json());
+    return {
+        type: 'success',
+        refresh: json.refresh_token,
+        access: json.access_token,
+        expires: Date.now() + json.expires_in * 1000,
+    };
+}

package/dist/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+export declare const TOOL_PREFIX = "mcp_";
+export declare const REQUIRED_BETAS: string[];

package/dist/constants.js

@@ -0,0 +1,6 @@
+export const CLIENT_ID = '9d1c250a-e61b-44d9-88ed-5944d1962f5e';
+export const TOOL_PREFIX = 'mcp_';
+export const REQUIRED_BETAS = [
+    'oauth-2025-04-20',
+    'interleaved-thinking-2025-05-14',
+];

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+import type { Plugin } from '@opencode-ai/plugin';
+export declare const AnthropicAuthPlugin: Plugin;

package/dist/index.js

@@ -0,0 +1,136 @@
+import { authorize, exchange } from './auth';
+import { CLIENT_ID } from './constants';
+import { createStrippedStream, mergeHeaders, prefixToolNames, rewriteUrl, setOAuthHeaders, } from './transform';
+export const AnthropicAuthPlugin = async ({ client }) => {
+    return {
+        'experimental.chat.system.transform': (input, output) => {
+            const prefix = "You are Claude Code, Anthropic's official CLI for Claude.";
+            if (input.model?.providerID === 'anthropic') {
+                output.system.unshift(prefix);
+                if (output.system[1])
+                    output.system[1] = `${prefix}\n\n${output.system[1]}`;
+            }
+        },
+        auth: {
+            provider: 'anthropic',
+            async loader(getAuth, provider) {
+                const auth = await getAuth();
+                if (auth.type === 'oauth') {
+                    // zero out cost for max plan
+                    for (const model of Object.values(provider.models)) {
+                        model.cost = {
+                            input: 0,
+                            output: 0,
+                            cache: {
+                                read: 0,
+                                write: 0,
+                            },
+                        };
+                    }
+                    return {
+                        apiKey: '',
+                        async fetch(input, init) {
+                            const auth = await getAuth();
+                            if (auth.type !== 'oauth')
+                                return fetch(input, init);
+                            if (!auth.access || !auth.expires || auth.expires < Date.now()) {
+                                const response = await fetch('https://console.anthropic.com/v1/oauth/token', {
+                                    method: 'POST',
+                                    headers: {
+                                        'Content-Type': 'application/json',
+                                    },
+                                    body: JSON.stringify({
+                                        grant_type: 'refresh_token',
+                                        refresh_token: auth.refresh,
+                                        client_id: CLIENT_ID,
+                                    }),
+                                });
+                                if (!response.ok) {
+                                    throw new Error(`Token refresh failed: ${response.status}`);
+                                }
+                                const json = (await response.json());
+                                // biome-ignore lint/suspicious/noExplicitAny: SDK types don't expose auth.set
+                                await client.auth.set({
+                                    path: {
+                                        id: 'anthropic',
+                                    },
+                                    body: {
+                                        type: 'oauth',
+                                        refresh: json.refresh_token,
+                                        access: json.access_token,
+                                        expires: Date.now() + json.expires_in * 1000,
+                                    },
+                                });
+                                auth.access = json.access_token;
+                            }
+                            const requestHeaders = mergeHeaders(input, init);
+                            // biome-ignore lint/style/noNonNullAssertion: access is guaranteed set above
+                            setOAuthHeaders(requestHeaders, auth.access);
+                            let body = init?.body;
+                            if (body && typeof body === 'string') {
+                                body = prefixToolNames(body);
+                            }
+                            const rewritten = rewriteUrl(input);
+                            const response = await fetch(rewritten.input, {
+                                ...init,
+                                body,
+                                headers: requestHeaders,
+                            });
+                            return createStrippedStream(response);
+                        },
+                    };
+                }
+                return {};
+            },
+            methods: [
+                {
+                    label: 'Claude Pro/Max',
+                    type: 'oauth',
+                    authorize: async () => {
+                        const { url, verifier } = await authorize('max');
+                        return {
+                            url: url,
+                            instructions: 'Paste the authorization code here: ',
+                            method: 'code',
+                            callback: async (code) => {
+                                const credentials = await exchange(code, verifier);
+                                return credentials;
+                            },
+                        };
+                    },
+                },
+                {
+                    label: 'Create an API Key',
+                    type: 'oauth',
+                    authorize: async () => {
+                        const { url, verifier } = await authorize('console');
+                        return {
+                            url: url,
+                            instructions: 'Paste the authorization code here: ',
+                            method: 'code',
+                            callback: async (code) => {
+                                const credentials = await exchange(code, verifier);
+                                if (credentials.type === 'failed')
+                                    return credentials;
+                                const result = await fetch(`https://api.anthropic.com/api/oauth/claude_cli/create_api_key`, {
+                                    method: 'POST',
+                                    headers: {
+                                        'Content-Type': 'application/json',
+                                        authorization: `Bearer ${credentials.access}`,
+                                    },
+                                }).then((r) => r.json());
+                                return { type: 'success', key: result.raw_key };
+                            },
+                        };
+                    },
+                },
+                {
+                    provider: 'anthropic',
+                    label: 'Manually enter API Key',
+                    type: 'api',
+                },
+            ],
+        },
+        // biome-ignore lint/suspicious/noExplicitAny: Plugin type doesn't include undocumented auth/hooks
+    };
+};

package/dist/transform.d.ts

@@ -0,0 +1,36 @@
+export type FetchInput = string | URL | Request;
+/**
+ * Merge headers from a Request object and/or a RequestInit headers value
+ * into a single Headers instance.
+ */
+export declare function mergeHeaders(input: FetchInput, init?: RequestInit): Headers;
+/**
+ * Merge incoming beta headers with the required OAuth betas, deduplicating.
+ */
+export declare function mergeBetaHeaders(headers: Headers): string;
+/**
+ * Set OAuth-required headers on the request: authorization, beta, user-agent.
+ * Removes x-api-key since we're using OAuth.
+ */
+export declare function setOAuthHeaders(headers: Headers, accessToken: string): Headers;
+/**
+ * Add TOOL_PREFIX to tool names in the request body.
+ * Prefixes both tool definitions and tool_use blocks in messages.
+ */
+export declare function prefixToolNames(body: string): string;
+/**
+ * Strip TOOL_PREFIX from tool names in streaming response text.
+ */
+export declare function stripToolPrefix(text: string): string;
+/**
+ * Rewrite the request URL to add ?beta=true for /v1/messages requests.
+ * Returns the modified input and URL (if applicable).
+ */
+export declare function rewriteUrl(input: FetchInput): {
+    input: FetchInput;
+    url: URL | null;
+};
+/**
+ * Create a streaming response that strips the tool prefix from tool names.
+ */
+export declare function createStrippedStream(response: Response): Response;

package/dist/transform.js

@@ -0,0 +1,155 @@
+import { REQUIRED_BETAS, TOOL_PREFIX } from './constants';
+/**
+ * Merge headers from a Request object and/or a RequestInit headers value
+ * into a single Headers instance.
+ */
+export function mergeHeaders(input, init) {
+    const headers = new Headers();
+    if (input instanceof Request) {
+        input.headers.forEach((value, key) => {
+            headers.set(key, value);
+        });
+    }
+    const initHeaders = init?.headers;
+    if (initHeaders) {
+        if (initHeaders instanceof Headers) {
+            initHeaders.forEach((value, key) => {
+                headers.set(key, value);
+            });
+        }
+        else if (Array.isArray(initHeaders)) {
+            for (const entry of initHeaders) {
+                const [key, value] = entry;
+                if (typeof value !== 'undefined') {
+                    headers.set(key, String(value));
+                }
+            }
+        }
+        else {
+            for (const [key, value] of Object.entries(initHeaders)) {
+                if (typeof value !== 'undefined') {
+                    headers.set(key, String(value));
+                }
+            }
+        }
+    }
+    return headers;
+}
+/**
+ * Merge incoming beta headers with the required OAuth betas, deduplicating.
+ */
+export function mergeBetaHeaders(headers) {
+    const incomingBeta = headers.get('anthropic-beta') || '';
+    const incomingBetasList = incomingBeta
+        .split(',')
+        .map((b) => b.trim())
+        .filter(Boolean);
+    return [...new Set([...REQUIRED_BETAS, ...incomingBetasList])].join(',');
+}
+/**
+ * Set OAuth-required headers on the request: authorization, beta, user-agent.
+ * Removes x-api-key since we're using OAuth.
+ */
+export function setOAuthHeaders(headers, accessToken) {
+    headers.set('authorization', `Bearer ${accessToken}`);
+    headers.set('anthropic-beta', mergeBetaHeaders(headers));
+    headers.set('user-agent', 'claude-cli/2.1.2 (external, cli)');
+    headers.delete('x-api-key');
+    return headers;
+}
+/**
+ * Add TOOL_PREFIX to tool names in the request body.
+ * Prefixes both tool definitions and tool_use blocks in messages.
+ */
+export function prefixToolNames(body) {
+    try {
+        const parsed = JSON.parse(body);
+        if (parsed.tools && Array.isArray(parsed.tools)) {
+            parsed.tools = parsed.tools.map((tool) => ({
+                ...tool,
+                name: tool.name ? `${TOOL_PREFIX}${tool.name}` : tool.name,
+            }));
+        }
+        if (parsed.messages && Array.isArray(parsed.messages)) {
+            parsed.messages = parsed.messages.map((msg) => {
+                if (msg.content && Array.isArray(msg.content)) {
+                    msg.content = msg.content.map((block) => {
+                        if (block.type === 'tool_use' && block.name) {
+                            return {
+                                ...block,
+                                name: `${TOOL_PREFIX}${block.name}`,
+                            };
+                        }
+                        return block;
+                    });
+                }
+                return msg;
+            });
+        }
+        return JSON.stringify(parsed);
+    }
+    catch {
+        return body;
+    }
+}
+/**
+ * Strip TOOL_PREFIX from tool names in streaming response text.
+ */
+export function stripToolPrefix(text) {
+    return text.replace(/"name"\s*:\s*"mcp_([^"]+)"/g, '"name": "$1"');
+}
+/**
+ * Rewrite the request URL to add ?beta=true for /v1/messages requests.
+ * Returns the modified input and URL (if applicable).
+ */
+export function rewriteUrl(input) {
+    let requestUrl = null;
+    try {
+        if (typeof input === 'string' || input instanceof URL) {
+            requestUrl = new URL(input.toString());
+        }
+        else if (input instanceof Request) {
+            requestUrl = new URL(input.url);
+        }
+    }
+    catch {
+        requestUrl = null;
+    }
+    if (requestUrl &&
+        requestUrl.pathname === '/v1/messages' &&
+        !requestUrl.searchParams.has('beta')) {
+        requestUrl.searchParams.set('beta', 'true');
+        const newInput = input instanceof Request
+            ? new Request(requestUrl.toString(), input)
+            : requestUrl;
+        return { input: newInput, url: requestUrl };
+    }
+    return { input, url: requestUrl };
+}
+/**
+ * Create a streaming response that strips the tool prefix from tool names.
+ */
+export function createStrippedStream(response) {
+    if (!response.body)
+        return response;
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    const encoder = new TextEncoder();
+    const stream = new ReadableStream({
+        async pull(controller) {
+            const { done, value } = await reader.read();
+            if (done) {
+                controller.close();
+                return;
+            }
+            let text = decoder.decode(value, { stream: true });
+            text = stripToolPrefix(text);
+            controller.enqueue(encoder.encode(text));
+        },
+    });
+    return new Response(stream, {
+        status: response.status,
+        statusText: response.statusText,
+        headers: response.headers,
+    });
+}

package/package.json

@@ -1,8 +1,18 @@
 {
   "name": "@ex-machina/opencode-anthropic-auth",
-  "version": "0.0.17",
-  "main": "./index.mjs",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
   "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "test": "bun test",
+    "types": "tsc",
+    "format": "biome format --write .",
+    "format:check": "biome format .",
+    "lint": "biome lint .",
     "bump": "bun script/bump.ts"
   },
   "repository": {
@@ -10,7 +20,12 @@
     "url": "https://github.com/ex-machina-co/opencode-anthropic-auth"
   },
   "devDependencies": {
-    "@opencode-ai/plugin": "^0.4.45"
+    "@biomejs/biome": "^2.4.7",
+    "@opencode-ai/plugin": "^0.4.45",
+    "@tsconfig/bun": "^1.0.10",
+    "@types/bun": "^1.3.10",
+    "lefthook": "^2.1.4",
+    "typescript": "^5.9.3"
   },
   "dependencies": {
     "@openauthjs/openauth": "^0.4.3"

package/.github/workflows/publish.yml

@@ -1,31 +0,0 @@
-name: Publish to npm
-
-on:
-  push:
-    branches:
-      - main
-    paths:
-      - "package.json"
-
-permissions:
-  id-token: write
-  contents: read
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: "24"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Install dependencies
-        run: npm install
-
-      - name: Publish
-        run: npm publish --access public --provenance

package/.idea/inspectionProfiles/Project_Default.xml

@@ -1,104 +0,0 @@
-<component name="InspectionProjectProfileManager">
-  <profile version="1.0">
-    <option name="myName" value="Project Default" />
-    <inspection_tool class="ES6PreferShortImport" enabled="true" level="INFORMATION" enabled_by_default="true" />
-    <inspection_tool class="Eslint" enabled="true" level="WARNING" enabled_by_default="true" />
-    <inspection_tool class="HtmlUnknownAttribute" enabled="true" level="WARNING" enabled_by_default="true">
-      <option name="myValues">
-        <value>
-          <list size="1">
-            <item index="0" class="java.lang.String" itemvalue="css" />
-          </list>
-        </value>
-      </option>
-      <option name="myCustomValuesEnabled" value="true" />
-    </inspection_tool>
-    <inspection_tool class="HtmlUnknownTag" enabled="true" level="INFORMATION" enabled_by_default="true">
-      <option name="myValues">
-        <value>
-          <list size="6">
-            <item index="0" class="java.lang.String" itemvalue="nobr" />
-            <item index="1" class="java.lang.String" itemvalue="noembed" />
-            <item index="2" class="java.lang.String" itemvalue="comment" />
-            <item index="3" class="java.lang.String" itemvalue="noscript" />
-            <item index="4" class="java.lang.String" itemvalue="embed" />
-            <item index="5" class="java.lang.String" itemvalue="script" />
-          </list>
-        </value>
-      </option>
-      <option name="myCustomValuesEnabled" value="true" />
-    </inspection_tool>
-    <inspection_tool class="HttpUrlsUsage" enabled="true" level="WEAK WARNING" enabled_by_default="true">
-      <option name="ignoredUrls">
-        <list>
-          <option value="http://localhost" />
-          <option value="http://127.0.0.1" />
-          <option value="http://0.0.0.0" />
-          <option value="http://www.w3.org/" />
-          <option value="http://json-schema.org/draft" />
-          <option value="http://java.sun.com/" />
-          <option value="http://xmlns.jcp.org/" />
-          <option value="http://javafx.com/javafx/" />
-          <option value="http://javafx.com/fxml" />
-          <option value="http://maven.apache.org/xsd/" />
-          <option value="http://maven.apache.org/POM/" />
-          <option value="http://www.springframework.org/schema/" />
-          <option value="http://www.springframework.org/tags" />
-          <option value="http://www.springframework.org/security/tags" />
-          <option value="http://www.thymeleaf.org" />
-          <option value="http://www.jboss.org/j2ee/schema/" />
-          <option value="http://www.jboss.com/xml/ns/" />
-          <option value="http://www.ibm.com/webservices/xsd" />
-          <option value="http://activemq.apache.org/schema/" />
-          <option value="http://schema.cloudfoundry.org/spring/" />
-          <option value="http://schemas.xmlsoap.org/" />
-          <option value="http://cxf.apache.org/schemas/" />
-          <option value="http://primefaces.org/ui" />
-          <option value="http://tiles.apache.org/" />
-          <option value="http://broker" />
-        </list>
-      </option>
-    </inspection_tool>
-    <inspection_tool class="JSUnusedGlobalSymbols" enabled="true" level="INFORMATION" enabled_by_default="true" editorAttributes="INFORMATION_ATTRIBUTES" />
-    <inspection_tool class="JSXUnresolvedComponent" enabled="true" level="INFORMATION" enabled_by_default="true" />
-    <inspection_tool class="MarkdownIncorrectTableFormatting" enabled="true" level="INFORMATION" enabled_by_default="true" />
-    <inspection_tool class="MarkdownIncorrectlyNumberedListItem" enabled="true" level="INFORMATION" enabled_by_default="true" />
-    <inspection_tool class="PyArgumentListInspection" enabled="true" level="TEXT ATTRIBUTES" enabled_by_default="true" editorAttributes="TEXT_STYLE_SUGGESTION" />
-    <inspection_tool class="PyClassVarInspection" enabled="true" level="TEXT ATTRIBUTES" enabled_by_default="true" editorAttributes="CONSIDERATION_ATTRIBUTES" />
-    <inspection_tool class="PyCompatibilityInspection" enabled="true" level="WARNING" enabled_by_default="true">
-      <option name="ourVersions">
-        <value>
-          <list size="3">
-            <item index="0" class="java.lang.String" itemvalue="3.12" />
-            <item index="1" class="java.lang.String" itemvalue="3.13" />
-            <item index="2" class="java.lang.String" itemvalue="3.14" />
-          </list>
-        </value>
-      </option>
-    </inspection_tool>
-    <inspection_tool class="PyMethodParametersInspection" enabled="true" level="WARNING" enabled_by_default="true" editorAttributes="WARNING_ATTRIBUTES" />
-    <inspection_tool class="PyPep8NamingInspection" enabled="true" level="WEAK WARNING" enabled_by_default="true">
-      <option name="ignoredErrors">
-        <list>
-          <option value="N806" />
-        </list>
-      </option>
-    </inspection_tool>
-    <inspection_tool class="PyShadowingBuiltinsInspection" enabled="true" level="WEAK WARNING" enabled_by_default="true">
-      <option name="ignoredNames">
-        <list>
-          <option value="id" />
-          <option value="input" />
-        </list>
-      </option>
-    </inspection_tool>
-    <inspection_tool class="PyShadowingNamesInspection" enabled="true" level="INFORMATION" enabled_by_default="true" editorAttributes="CONSIDERATION_ATTRIBUTES" />
-    <inspection_tool class="PyTypeHintsInspection" enabled="true" level="TEXT ATTRIBUTES" enabled_by_default="true" editorAttributes="CONSIDERATION_ATTRIBUTES" />
-    <inspection_tool class="PyUnresolvedReferencesInspection" enabled="true" level="ERROR" enabled_by_default="true" editorAttributes="ERRORS_ATTRIBUTES" />
-    <inspection_tool class="TypeScriptValidateJSTypes" enabled="false" level="WEAK WARNING" enabled_by_default="false" />
-    <inspection_tool class="UnnecessaryLocalVariableJS" enabled="true" level="INFORMATION" enabled_by_default="true" editorAttributes="INFO_ATTRIBUTES">
-      <option name="m_ignoreImmediatelyReturnedVariables" value="false" />
-      <option name="m_ignoreAnnotatedVariables" value="false" />
-    </inspection_tool>
-  </profile>
-</component>

package/.idea/misc.xml

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectRootManager" version="2" project-jdk-name="uv (trading)" project-jdk-type="Python SDK">
-    <output url="file://$PROJECT_DIR$/out" />
-  </component>
-</project>

package/.idea/modules.xml

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectModuleManager">
-    <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/opencode-anthropic-auth.iml" filepath="$PROJECT_DIR$/.idea/opencode-anthropic-auth.iml" />
-    </modules>
-  </component>
-</project>

package/.idea/opencode-anthropic-auth.iml

@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="JAVA_MODULE" version="4">
-  <component name="NewModuleRootManager" inherit-compiler-output="true">
-    <exclude-output />
-    <content url="file://$MODULE_DIR$" />
-    <orderEntry type="inheritedJdk" />
-    <orderEntry type="sourceFolder" forTests="false" />
-  </component>
-</module>

package/.idea/vcs.xml

@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
-  </component>
-</project>

package/bun.lock

@@ -1,43 +0,0 @@
-{
-  "lockfileVersion": 1,
-  "workspaces": {
-    "": {
-      "name": "opencode-anthropic-auth",
-      "dependencies": {
-        "@openauthjs/openauth": "^0.4.3",
-      },
-      "devDependencies": {
-        "@opencode-ai/plugin": "^0.4.45",
-      },
-    },
-  },
-  "packages": {
-    "@openauthjs/openauth": ["@openauthjs/openauth@0.4.3", "", { "dependencies": { "@standard-schema/spec": "1.0.0-beta.3", "aws4fetch": "1.0.20", "jose": "5.9.6" }, "peerDependencies": { "arctic": "^2.2.2", "hono": "^4.0.0" } }, "sha512-RlnjqvHzqcbFVymEwhlUEuac4utA5h4nhSK/i2szZuQmxTIqbGUxZ+nM+avM+VV4Ing+/ZaNLKILoXS3yrkOOw=="],
-
-    "@opencode-ai/plugin": ["@opencode-ai/plugin@0.4.45", "", { "dependencies": { "@opencode-ai/sdk": "0.4.19" } }, "sha512-TuD+FNmA6vN+/B82qayCvOyTXRuAtfvU0U95UKSZoNrYgIBhpD/sW/oS65iUv5QwQqzO8BxI4DYWjmLIqCz8uw=="],
-
-    "@opencode-ai/sdk": ["@opencode-ai/sdk@0.4.19", "", {}, "sha512-7V+wDR1+m+TQZAraAh/bOSObiA/uysG1YIXZVe6gl1sQAXDtkG2FYCzs0gTZ/ORdkUKEnr3vyQIk895Mu0CC/w=="],
-
-    "@oslojs/asn1": ["@oslojs/asn1@1.0.0", "", { "dependencies": { "@oslojs/binary": "1.0.0" } }, "sha512-zw/wn0sj0j0QKbIXfIlnEcTviaCzYOY3V5rAyjR6YtOByFtJiT574+8p9Wlach0lZH9fddD4yb9laEAIl4vXQA=="],
-
-    "@oslojs/binary": ["@oslojs/binary@1.0.0", "", {}, "sha512-9RCU6OwXU6p67H4NODbuxv2S3eenuQ4/WFLrsq+K/k682xrznH5EVWA7N4VFk9VYVcbFtKqur5YQQZc0ySGhsQ=="],
-
-    "@oslojs/crypto": ["@oslojs/crypto@1.0.1", "", { "dependencies": { "@oslojs/asn1": "1.0.0", "@oslojs/binary": "1.0.0" } }, "sha512-7n08G8nWjAr/Yu3vu9zzrd0L9XnrJfpMioQcvCMxBIiF5orECHe5/3J0jmXRVvgfqMm/+4oxlQ+Sq39COYLcNQ=="],
-
-    "@oslojs/encoding": ["@oslojs/encoding@1.1.0", "", {}, "sha512-70wQhgYmndg4GCPxPPxPGevRKqTIJ2Nh4OkiMWmDAVYsTQ+Ta7Sq+rPevXyXGdzr30/qZBnyOalCszoMxlyldQ=="],
-
-    "@oslojs/jwt": ["@oslojs/jwt@0.2.0", "", { "dependencies": { "@oslojs/encoding": "0.4.1" } }, "sha512-bLE7BtHrURedCn4Mco3ma9L4Y1GR2SMBuIvjWr7rmQ4/W/4Jy70TIAgZ+0nIlk0xHz1vNP8x8DCns45Sb2XRbg=="],
-
-    "@standard-schema/spec": ["@standard-schema/spec@1.0.0-beta.3", "", {}, "sha512-0ifF3BjA1E8SY9C+nUew8RefNOIq0cDlYALPty4rhUm8Rrl6tCM8hBT4bhGhx7I7iXD0uAgt50lgo8dD73ACMw=="],
-
-    "arctic": ["arctic@2.3.4", "", { "dependencies": { "@oslojs/crypto": "1.0.1", "@oslojs/encoding": "1.1.0", "@oslojs/jwt": "0.2.0" } }, "sha512-+p30BOWsctZp+CVYCt7oAean/hWGW42sH5LAcRQX56ttEkFJWbzXBhmSpibbzwSJkRrotmsA+oAoJoVsU0f5xA=="],
-
-    "aws4fetch": ["aws4fetch@1.0.20", "", {}, "sha512-/djoAN709iY65ETD6LKCtyyEI04XIBP5xVvfmNxsEP0uJB5tyaGBztSryRr4HqMStr9R06PisQE7m9zDTXKu6g=="],
-
-    "hono": ["hono@4.9.1", "", {}, "sha512-qfvdJ42t6CQE0N/iSCa8KsW8SQqYD67YB+TYbwPHlnALvX+s7ynh8otR1NEk5jXtUg73gpV/B82OSufDmwtX3w=="],
-
-    "jose": ["jose@5.9.6", "", {}, "sha512-AMlnetc9+CV9asI19zHmrgS/WYsWUwCn2R7RzlbJWD7F9eWYUTGyBmU9o6PxngtLGOiDGPRu+Uc4fhKzbpteZQ=="],
-
-    "@oslojs/jwt/@oslojs/encoding": ["@oslojs/encoding@0.4.1", "", {}, "sha512-hkjo6MuIK/kQR5CrGNdAPZhS01ZCXuWDRJ187zh6qqF2+yMHZpD9fAYpX8q2bOO6Ryhl3XpCT6kUX76N8hhm4Q=="],
-  }
-}

package/index.mjs

@@ -1,349 +0,0 @@
-import { generatePKCE } from "@openauthjs/openauth/pkce";
-
-const CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
-
-/**
- * @param {"max" | "console"} mode
- */
-async function authorize(mode) {
-  const pkce = await generatePKCE();
-
-  const url = new URL(
-    `https://${mode === "console" ? "console.anthropic.com" : "claude.ai"}/oauth/authorize`,
-    import.meta.url,
-  );
-  url.searchParams.set("code", "true");
-  url.searchParams.set("client_id", CLIENT_ID);
-  url.searchParams.set("response_type", "code");
-  url.searchParams.set(
-    "redirect_uri",
-    "https://console.anthropic.com/oauth/code/callback",
-  );
-  url.searchParams.set(
-    "scope",
-    "org:create_api_key user:profile user:inference",
-  );
-  url.searchParams.set("code_challenge", pkce.challenge);
-  url.searchParams.set("code_challenge_method", "S256");
-  url.searchParams.set("state", pkce.verifier);
-  return {
-    url: url.toString(),
-    verifier: pkce.verifier,
-  };
-}
-
-/**
- * @param {string} code
- * @param {string} verifier
- */
-async function exchange(code, verifier) {
-  const splits = code.split("#");
-  const result = await fetch("https://console.anthropic.com/v1/oauth/token", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify({
-      code: splits[0],
-      state: splits[1],
-      grant_type: "authorization_code",
-      client_id: CLIENT_ID,
-      redirect_uri: "https://console.anthropic.com/oauth/code/callback",
-      code_verifier: verifier,
-    }),
-  });
-  if (!result.ok)
-    return {
-      type: "failed",
-    };
-  const json = await result.json();
-  return {
-    type: "success",
-    refresh: json.refresh_token,
-    access: json.access_token,
-    expires: Date.now() + json.expires_in * 1000,
-  };
-}
-
-/**
- * @type {import('@opencode-ai/plugin').Plugin}
- */
-export async function AnthropicAuthPlugin({ client }) {
-  return {
-    "experimental.chat.system.transform": (input, output) => {
-      const prefix =
-        "You are Claude Code, Anthropic's official CLI for Claude.";
-      if (input.model?.providerID === "anthropic") {
-        output.system.unshift(prefix);
-        if (output.system[1])
-          output.system[1] = prefix + "\n\n" + output.system[1];
-      }
-    },
-    auth: {
-      provider: "anthropic",
-      async loader(getAuth, provider) {
-        const auth = await getAuth();
-        if (auth.type === "oauth") {
-          // zero out cost for max plan
-          for (const model of Object.values(provider.models)) {
-            model.cost = {
-              input: 0,
-              output: 0,
-              cache: {
-                read: 0,
-                write: 0,
-              },
-            };
-          }
-          return {
-            apiKey: "",
-            /**
-             * @param {any} input
-             * @param {any} init
-             */
-            async fetch(input, init) {
-              const auth = await getAuth();
-              if (auth.type !== "oauth") return fetch(input, init);
-              if (!auth.access || auth.expires < Date.now()) {
-                const response = await fetch(
-                  "https://console.anthropic.com/v1/oauth/token",
-                  {
-                    method: "POST",
-                    headers: {
-                      "Content-Type": "application/json",
-                    },
-                    body: JSON.stringify({
-                      grant_type: "refresh_token",
-                      refresh_token: auth.refresh,
-                      client_id: CLIENT_ID,
-                    }),
-                  },
-                );
-                if (!response.ok) {
-                  throw new Error(`Token refresh failed: ${response.status}`);
-                }
-                const json = await response.json();
-                await client.auth.set({
-                  path: {
-                    id: "anthropic",
-                  },
-                  body: {
-                    type: "oauth",
-                    refresh: json.refresh_token,
-                    access: json.access_token,
-                    expires: Date.now() + json.expires_in * 1000,
-                  },
-                });
-                auth.access = json.access_token;
-              }
-              const requestInit = init ?? {};
-
-              const requestHeaders = new Headers();
-              if (input instanceof Request) {
-                input.headers.forEach((value, key) => {
-                  requestHeaders.set(key, value);
-                });
-              }
-              if (requestInit.headers) {
-                if (requestInit.headers instanceof Headers) {
-                  requestInit.headers.forEach((value, key) => {
-                    requestHeaders.set(key, value);
-                  });
-                } else if (Array.isArray(requestInit.headers)) {
-                  for (const [key, value] of requestInit.headers) {
-                    if (typeof value !== "undefined") {
-                      requestHeaders.set(key, String(value));
-                    }
-                  }
-                } else {
-                  for (const [key, value] of Object.entries(
-                    requestInit.headers,
-                  )) {
-                    if (typeof value !== "undefined") {
-                      requestHeaders.set(key, String(value));
-                    }
-                  }
-                }
-              }
-
-              // Preserve all incoming beta headers while ensuring OAuth requirements
-              const incomingBeta = requestHeaders.get("anthropic-beta") || "";
-              const incomingBetasList = incomingBeta
-                .split(",")
-                .map((b) => b.trim())
-                .filter(Boolean);
-
-              const requiredBetas = [
-                "oauth-2025-04-20",
-                "interleaved-thinking-2025-05-14",
-              ];
-              const mergedBetas = [
-                ...new Set([...requiredBetas, ...incomingBetasList]),
-              ].join(",");
-
-              requestHeaders.set("authorization", `Bearer ${auth.access}`);
-              requestHeaders.set("anthropic-beta", mergedBetas);
-              requestHeaders.set(
-                "user-agent",
-                "claude-cli/2.1.2 (external, cli)",
-              );
-              requestHeaders.delete("x-api-key");
-
-              const TOOL_PREFIX = "mcp_";
-              let body = requestInit.body;
-              if (body && typeof body === "string") {
-                try {
-                  const parsed = JSON.parse(body);
-
-                  // Add prefix to tools definitions
-                  if (parsed.tools && Array.isArray(parsed.tools)) {
-                    parsed.tools = parsed.tools.map((tool) => ({
-                      ...tool,
-                      name: tool.name
-                        ? `${TOOL_PREFIX}${tool.name}`
-                        : tool.name,
-                    }));
-                  }
-                  // Add prefix to tool_use blocks in messages
-                  if (parsed.messages && Array.isArray(parsed.messages)) {
-                    parsed.messages = parsed.messages.map((msg) => {
-                      if (msg.content && Array.isArray(msg.content)) {
-                        msg.content = msg.content.map((block) => {
-                          if (block.type === "tool_use" && block.name) {
-                            return {
-                              ...block,
-                              name: `${TOOL_PREFIX}${block.name}`,
-                            };
-                          }
-                          return block;
-                        });
-                      }
-                      return msg;
-                    });
-                  }
-                  body = JSON.stringify(parsed);
-                } catch (e) {
-                  // ignore parse errors
-                }
-              }
-
-              let requestInput = input;
-              let requestUrl = null;
-              try {
-                if (typeof input === "string" || input instanceof URL) {
-                  requestUrl = new URL(input.toString());
-                } else if (input instanceof Request) {
-                  requestUrl = new URL(input.url);
-                }
-              } catch {
-                requestUrl = null;
-              }
-
-              if (
-                requestUrl &&
-                requestUrl.pathname === "/v1/messages" &&
-                !requestUrl.searchParams.has("beta")
-              ) {
-                requestUrl.searchParams.set("beta", "true");
-                requestInput =
-                  input instanceof Request
-                    ? new Request(requestUrl.toString(), input)
-                    : requestUrl;
-              }
-
-              const response = await fetch(requestInput, {
-                ...requestInit,
-                body,
-                headers: requestHeaders,
-              });
-
-              // Transform streaming response to rename tools back
-              if (response.body) {
-                const reader = response.body.getReader();
-                const decoder = new TextDecoder();
-                const encoder = new TextEncoder();
-
-                const stream = new ReadableStream({
-                  async pull(controller) {
-                    const { done, value } = await reader.read();
-                    if (done) {
-                      controller.close();
-                      return;
-                    }
-
-                    let text = decoder.decode(value, { stream: true });
-                    text = text.replace(
-                      /"name"\s*:\s*"mcp_([^"]+)"/g,
-                      '"name": "$1"',
-                    );
-                    controller.enqueue(encoder.encode(text));
-                  },
-                });
-
-                return new Response(stream, {
-                  status: response.status,
-                  statusText: response.statusText,
-                  headers: response.headers,
-                });
-              }
-
-              return response;
-            },
-          };
-        }
-
-        return {};
-      },
-      methods: [
-        {
-          label: "Claude Pro/Max",
-          type: "oauth",
-          authorize: async () => {
-            const { url, verifier } = await authorize("max");
-            return {
-              url: url,
-              instructions: "Paste the authorization code here: ",
-              method: "code",
-              callback: async (code) => {
-                const credentials = await exchange(code, verifier);
-                return credentials;
-              },
-            };
-          },
-        },
-        {
-          label: "Create an API Key",
-          type: "oauth",
-          authorize: async () => {
-            const { url, verifier } = await authorize("console");
-            return {
-              url: url,
-              instructions: "Paste the authorization code here: ",
-              method: "code",
-              callback: async (code) => {
-                const credentials = await exchange(code, verifier);
-                if (credentials.type === "failed") return credentials;
-                const result = await fetch(
-                  `https://api.anthropic.com/api/oauth/claude_cli/create_api_key`,
-                  {
-                    method: "POST",
-                    headers: {
-                      "Content-Type": "application/json",
-                      authorization: `Bearer ${credentials.access}`,
-                    },
-                  },
-                ).then((r) => r.json());
-                return { type: "success", key: result.raw_key };
-              },
-            };
-          },
-        },
-        {
-          provider: "anthropic",
-          label: "Manually enter API Key",
-          type: "api",
-        },
-      ],
-    },
-  };
-}

package/script/bump.ts

@@ -1,43 +0,0 @@
-#!/usr/bin/env bun
-/**
- * Bumps the version in package.json, commits, and pushes.
- * Pushing the version change to main triggers the CI publish workflow.
- *
- * Usage: bun script/bump.ts [patch|minor|major] [--dry-run]
- */
-
-import { $ } from "bun";
-
-const dir = new URL("..", import.meta.url).pathname;
-process.chdir(dir);
-
-const args = process.argv.slice(2).filter((a) => !a.startsWith("--"));
-const bumpType = args[0] || "patch";
-const dry = process.argv.includes("--dry-run");
-
-const log = (msg: string) => console.log(dry ? `[DRY RUN] ${msg}` : msg);
-
-// Read current version
-const currentPkg = await Bun.file("./package.json").json();
-log(`Current version: ${currentPkg.version}`);
-log(`Bumping ${bumpType}...`);
-
-// Bump version in package.json
-if (!dry) {
-  await $`npm version ${bumpType} --no-git-tag-version`;
-}
-
-// Read the new version
-const pkg = await Bun.file("./package.json").json();
-const version = pkg.version;
-
-log(`New version: ${version}`);
-
-// Commit and push — CI will handle npm publish
-if (!dry) {
-  await $`git add package.json`;
-  await $`git commit -m ${"chore: bump to " + version}`;
-  await $`git push`;
-}
-
-log(`Done!`);