@gotgenes/pi-anthropic-auth 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Christopher D. Lasher
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,125 @@
+# pi-anthropic-auth
+
+Minimal Pi extension package for Anthropic Claude Pro/Max OAuth compatibility.
+
+## Purpose
+
+This package minimally overrides Pi's built-in `anthropic` provider to improve Claude Pro/Max OAuth compatibility while preserving Pi's normal Anthropic behavior wherever possible.
+
+The design goal is to preserve:
+
+1. built-in provider name: `anthropic`
+2. built-in model list
+3. normal Anthropic API-key behavior
+4. native `/login anthropic` UX
+
+## Current Behavior
+
+The extension currently does the following:
+
+1. re-registers the built-in `anthropic` provider with only an `oauth` override
+2. reuses Pi's native Anthropic login and refresh helpers from `@mariozechner/pi-ai/oauth`
+3. preserves the old refresh token when refresh responses omit `refresh_token`
+4. shapes OAuth Anthropic request payloads through `before_provider_request`
+5. prepends the Anthropic billing/content-consistency header block to `system[]`
+6. avoids adding `cache_control` to the injected billing block
+7. normalizes assistant `[tool_use..., text]` ordering for Anthropic OAuth payloads
+8. replaces Pi's default prompt body with a minimal neutral prompt for Anthropic OAuth when the default Pi harness prompt is detected, while preserving project context
+
+The extension does not currently replace Pi's built-in Anthropic streaming transport.
+
+## Requirements
+
+1. `pnpm`
+2. a local `pi` installation
+3. Anthropic OAuth credentials configured through Pi
+
+## Install Dependencies
+
+```bash
+pnpm install
+```
+
+## Development
+
+Typecheck:
+
+```bash
+pnpm run build
+```
+
+Run tests:
+
+```bash
+pnpm test
+```
+
+Run both:
+
+```bash
+pnpm run check
+```
+
+## Load In Pi
+
+You can load the extension directly from the local source file:
+
+```bash
+pi -e /absolute/path/to/pi-anthropic-auth/src/index.ts
+```
+
+Example:
+
+```bash
+pi -e /Users/chris/development/pi-anthropic-auth/src/index.ts
+```
+
+## Fast Repro Loop
+
+The most useful non-interactive repro loop is:
+
+```bash
+pi \
+  --model anthropic/claude-sonnet-4-6 \
+  --no-session \
+  --tools read,grep,find,ls \
+  -e /Users/chris/development/pi-anthropic-auth/src/index.ts \
+  -p "How many lines are in @AGENTS.md ?"
+```
+
+That path was used to validate:
+
+1. simple prompts
+2. tool use
+3. multi-turn continuation
+4. structured output
+5. expired-token refresh
+
+## Usage Notes
+
+1. `/login anthropic` should continue using Pi's native Anthropic UX.
+2. API-key Anthropic behavior should remain the baseline behavior.
+3. The extension's compatibility logic is intended to affect only Anthropic OAuth requests.
+
+## Project Skills
+
+Project-local skills live in `.agents/skills/`:
+
+1. `anthropic`: Anthropic OAuth debugging workflow and lessons learned
+2. `pi-cli-repro`: repeatable `pi -p ... -e ...` repro workflow
+3. `frontmatter`: Pi skill frontmatter template and rules
+
+## Key Files
+
+1. `src/index.ts`
+2. `src/anthropic-oauth.ts`
+3. `src/request-shaping.ts`
+4. `src/system-prompt-shaping.ts`
+5. `docs/plans/minimal-anthropic-override.md`
+6. `docs/plans/gap-analysis-and-next-steps.md`
+7. `AGENTS.md`
+8. `.agents/skills/`
+
+## License
+
+MIT

package/dist/anthropic-oauth.d.ts

@@ -0,0 +1,8 @@
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@mariozechner/pi-ai";
+export declare function mergeRefreshedCredentials(credentials: OAuthCredentials, refreshed: Partial<OAuthCredentials>): OAuthCredentials;
+export declare const anthropicOAuthOverride: {
+    readonly name: "Anthropic (Claude Pro/Max)";
+    readonly login: (callbacks: OAuthLoginCallbacks) => Promise<OAuthCredentials>;
+    readonly refreshToken: (credentials: OAuthCredentials) => Promise<OAuthCredentials>;
+    readonly getApiKey: (credentials: OAuthCredentials) => string;
+};

package/dist/anthropic-oauth.js

@@ -0,0 +1,24 @@
+import { loginAnthropic, refreshAnthropicToken, } from "@mariozechner/pi-ai/oauth";
+export function mergeRefreshedCredentials(credentials, refreshed) {
+    return {
+        ...credentials,
+        ...refreshed,
+        refresh: typeof refreshed.refresh === "string" &&
+            refreshed.refresh.trim().length > 0
+            ? refreshed.refresh
+            : credentials.refresh,
+    };
+}
+export const anthropicOAuthOverride = {
+    name: "Anthropic (Claude Pro/Max)",
+    login(callbacks) {
+        return loginAnthropic(callbacks);
+    },
+    async refreshToken(credentials) {
+        const refreshed = await refreshAnthropicToken(credentials.refresh);
+        return mergeRefreshedCredentials(credentials, refreshed);
+    },
+    getApiKey(credentials) {
+        return credentials.access;
+    },
+};

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+import type { ExtensionAPI } from "@mariozechner/pi-coding-agent";
+export default function (pi: ExtensionAPI): void;

package/dist/index.js

@@ -0,0 +1,16 @@
+import { anthropicOAuthOverride } from "./anthropic-oauth.js";
+import { shapeAnthropicOAuthPayload } from "./request-shaping.js";
+import { shapeAnthropicOAuthSystemPrompt } from "./system-prompt-shaping.js";
+export default function (pi) {
+    pi.registerProvider("anthropic", {
+        oauth: anthropicOAuthOverride,
+    });
+    pi.on("before_agent_start", (event) => {
+        return {
+            systemPrompt: shapeAnthropicOAuthSystemPrompt(event.systemPrompt),
+        };
+    });
+    pi.on("before_provider_request", (event) => {
+        return shapeAnthropicOAuthPayload(event.payload);
+    });
+}

package/dist/request-shaping.d.ts

@@ -0,0 +1 @@
+export declare function shapeAnthropicOAuthPayload(payload: unknown): unknown;

package/dist/request-shaping.js

@@ -0,0 +1,149 @@
+import { createHash } from "node:crypto";
+const ANTHROPIC_OAUTH_BETAS = ["claude-code-20250219", "oauth-2025-04-20"];
+const BILLING_HEADER_SALT = "59cf53e54c78";
+const BILLING_HEADER_POSITIONS = [4, 7, 20];
+const CLAUDE_CODE_VERSION = "2.1.87";
+const CLAUDE_CODE_ENTRYPOINT = "sdk-cli";
+const CLAUDE_CODE_IDENTITY_PREFIX = "You are Claude Code, Anthropic's official CLI";
+const PI_MINIMAL_ANTHROPIC_PROMPT_PREFIX = "You are an expert coding assistant.";
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isAnthropicMessagesPayload(payload) {
+    return (isRecord(payload) &&
+        typeof payload.model === "string" &&
+        Array.isArray(payload.messages) &&
+        typeof payload.stream === "boolean");
+}
+function isOAuthAnthropicPayload(payload) {
+    if (!Array.isArray(payload.system)) {
+        return false;
+    }
+    return payload.system.some(hasOAuthAnthropicSystemMarker);
+}
+function hasOAuthAnthropicSystemMarker(block) {
+    if (!isRecord(block) ||
+        block.type !== "text" ||
+        typeof block.text !== "string") {
+        return false;
+    }
+    return (block.text.includes(CLAUDE_CODE_IDENTITY_PREFIX) ||
+        block.text.includes("x-anthropic-billing-header:") ||
+        block.text.startsWith(PI_MINIMAL_ANTHROPIC_PROMPT_PREFIX));
+}
+function _hasClaudeCodeIdentity(block) {
+    return (isRecord(block) &&
+        block.type === "text" &&
+        typeof block.text === "string" &&
+        block.text.includes(CLAUDE_CODE_IDENTITY_PREFIX));
+}
+function getFirstUserText(messages) {
+    const firstUserMessage = messages.find((message) => message.role === "user");
+    if (!firstUserMessage)
+        return "";
+    if (typeof firstUserMessage.content === "string") {
+        return firstUserMessage.content;
+    }
+    if (!Array.isArray(firstUserMessage.content)) {
+        return "";
+    }
+    const firstTextBlock = firstUserMessage.content.find((block) => block?.type === "text" && typeof block.text === "string");
+    return typeof firstTextBlock?.text === "string" ? firstTextBlock.text : "";
+}
+function buildBillingHeaderValue(messages) {
+    const messageText = getFirstUserText(messages);
+    if (!messageText) {
+        return undefined;
+    }
+    const cch = createHash("sha256")
+        .update(messageText)
+        .digest("hex")
+        .slice(0, 5);
+    const sampledCharacters = BILLING_HEADER_POSITIONS.map((index) => messageText[index] || "0").join("");
+    const suffix = createHash("sha256")
+        .update(`${BILLING_HEADER_SALT}${sampledCharacters}${CLAUDE_CODE_VERSION}`)
+        .digest("hex")
+        .slice(0, 3);
+    return [
+        "x-anthropic-billing-header:",
+        `cc_version=${CLAUDE_CODE_VERSION}.${suffix};`,
+        `cc_entrypoint=${CLAUDE_CODE_ENTRYPOINT};`,
+        `cch=${cch};`,
+    ].join(" ");
+}
+function normalizeSystemBlock(block) {
+    if (typeof block === "string") {
+        return { type: "text", text: block };
+    }
+    if (isRecord(block) && typeof block.text === "string") {
+        return {
+            ...block,
+            type: block.type === "text" ? "text" : "text",
+            text: block.text,
+        };
+    }
+    return { type: "text", text: String(block ?? "") };
+}
+function prependBillingHeader(system, messages) {
+    const billingHeader = buildBillingHeaderValue(messages);
+    if (!billingHeader) {
+        return system;
+    }
+    const systemBlocks = Array.isArray(system)
+        ? system.map(normalizeSystemBlock)
+        : system == null
+            ? []
+            : [normalizeSystemBlock(system)];
+    if (systemBlocks.some((block) => block.text.includes("x-anthropic-billing-header:"))) {
+        return systemBlocks;
+    }
+    const billingBlock = { type: "text", text: billingHeader };
+    return [billingBlock, ...systemBlocks];
+}
+function mergeAnthropicBetas(betaHeader) {
+    const existing = (betaHeader ?? "")
+        .split(",")
+        .map((value) => value.trim())
+        .filter(Boolean);
+    return [...new Set([...ANTHROPIC_OAUTH_BETAS, ...existing])].join(",");
+}
+function splitAssistantToolUseTrailingContent(messages) {
+    return messages.flatMap((message) => {
+        if (message.role !== "assistant" || !Array.isArray(message.content)) {
+            return [message];
+        }
+        const firstToolUseIndex = message.content.findIndex((block) => block?.type === "tool_use");
+        if (firstToolUseIndex === -1) {
+            return [message];
+        }
+        const trailingBlocks = message.content.slice(firstToolUseIndex);
+        if (!trailingBlocks.some((block) => block?.type !== "tool_use")) {
+            return [message];
+        }
+        const nonToolUseBlocks = message.content.filter((block) => block?.type !== "tool_use");
+        const toolUseBlocks = message.content.filter((block) => block?.type === "tool_use");
+        return [
+            { ...message, content: nonToolUseBlocks },
+            { ...message, content: toolUseBlocks },
+        ];
+    });
+}
+export function shapeAnthropicOAuthPayload(payload) {
+    if (!isAnthropicMessagesPayload(payload)) {
+        return payload;
+    }
+    const messages = payload.messages;
+    if (!isOAuthAnthropicPayload(payload)) {
+        return payload;
+    }
+    const normalizedMessages = splitAssistantToolUseTrailingContent(messages);
+    const shapedPayload = {
+        ...payload,
+        messages: normalizedMessages,
+        system: prependBillingHeader(payload.system, normalizedMessages),
+    };
+    if (typeof payload["anthropic-beta"] === "string") {
+        shapedPayload["anthropic-beta"] = mergeAnthropicBetas(payload["anthropic-beta"]);
+    }
+    return shapedPayload;
+}

package/dist/system-prompt-shaping.d.ts

@@ -0,0 +1 @@
+export declare function shapeAnthropicOAuthSystemPrompt(systemPrompt: string): string;

package/dist/system-prompt-shaping.js

@@ -0,0 +1,21 @@
+const PI_DEFAULT_PROMPT_PREFIX = "You are an expert coding assistant operating inside pi, a coding agent harness.";
+const MINIMAL_ANTHROPIC_OAUTH_PROMPT = [
+    "You are an expert coding assistant.",
+    "Be concise and helpful.",
+    "Use the available tools to answer the user's request.",
+    "Show file paths clearly when working with files.",
+].join("\n");
+function findProjectContextStart(systemPrompt) {
+    const marker = "\n\n# Project Context\n\n";
+    return systemPrompt.indexOf(marker);
+}
+export function shapeAnthropicOAuthSystemPrompt(systemPrompt) {
+    if (!systemPrompt.includes(PI_DEFAULT_PROMPT_PREFIX)) {
+        return systemPrompt;
+    }
+    const projectContextStart = findProjectContextStart(systemPrompt);
+    if (projectContextStart === -1) {
+        return MINIMAL_ANTHROPIC_OAUTH_PROMPT;
+    }
+    return `${MINIMAL_ANTHROPIC_OAUTH_PROMPT}${systemPrompt.slice(projectContextStart)}`;
+}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@gotgenes/pi-anthropic-auth",
+  "version": "0.1.0",
+  "description": "Pi extension package for Anthropic OAuth compatibility",
+  "author": {
+    "name": "Chris Lasher"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "pi",
+    "pi-package",
+    "anthropic",
+    "oauth"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gotgenes/pi-anthropic-auth.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "check": "tsc -p tsconfig.json --noEmit",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "lint:md": "markdownlint-cli2 '*.md'",
+    "lint:all": "pnpm run lint && pnpm run lint:md",
+    "format": "biome format --write .",
+    "test": "tsx --test test/**/*.test.ts"
+  },
+  "pi": {
+    "extensions": [
+      "./dist/index.js"
+    ]
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.52.0",
+    "@mariozechner/pi-ai": "^0.68.0",
+    "@mariozechner/pi-coding-agent": "^0.68.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.4.12",
+    "markdownlint-cli2": "^0.22.0",
+    "tsx": "^4.20.6",
+    "typescript": "^5.9.3"
+  }
+}