@xiaoso/dsh-tool-plus 0.1.5 → 0.1.7-beta.0

package/lib/anthropic-CDmj476p.mjs

@@ -1,262 +0,0 @@
-import { installBunShim as __installBunShim } from "./bun-shim.mjs";
-__installBunShim();
-import { r as __exportAll } from "./fs-promises-shim-Bx0fpxuk.mjs";
-import { V as ProviderHttpError, c as OAuthError } from "./error-C-f_Wnw4.mjs";
-import { t as OAuthCallbackFlow } from "./callback-server-CFJK-jvK.mjs";
-import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/providers/claude-code-fingerprint.ts
-/**
-* Cowork inference-fingerprint constants, kept in a leaf module so consumers
-* outside the provider (`registry/oauth/anthropic`, `usage/claude`) don't
-* import the heavy `providers/anthropic` module.
-*
-* That import edge was a live init cycle: `providers/anthropic` → `stream` →
-* `registry` → `registry/oauth/anthropic` → back into the still-initializing
-* provider module.
-*/
-/** Claude runtime version bundled by the current Cowork desktop release. */
-const claudeCodeVersion = "2.1.220";
-/** User-Agent emitted by Cowork's `claude-desktop` inference entrypoint. */
-const coworkUserAgent = `claude-cli/${claudeCodeVersion} (external, claude-desktop)`;
-/** Identity block prepended by Cowork's Claude runtime. */
-const claudeCodeSystemInstruction = "You are a Claude agent, built on Anthropic's Claude Agent SDK.";
-/** Cowork's per-request output-token ceiling. */
-const CLAUDE_CODE_MAX_OUTPUT_TOKENS = 64e3;
-//#endregion
-//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/anthropic.ts
-/**
-* Anthropic OAuth flow (Claude Pro/Max)
-*/
-var anthropic_exports = /* @__PURE__ */ __exportAll({
-	ANTHROPIC_OAUTH_GRANT_TTL_MS: () => ANTHROPIC_OAUTH_GRANT_TTL_MS,
-	AnthropicOAuthFlow: () => AnthropicOAuthFlow,
-	loginAnthropic: () => loginAnthropic,
-	refreshAnthropicToken: () => refreshAnthropicToken
-});
-const decode = (s) => atob(s);
-const CLIENT_ID = decode("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
-const AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
-const TOKEN_URL = "https://api.anthropic.com/v1/oauth/token";
-const BOOTSTRAP_URL = "https://api.anthropic.com/api/claude_cli/bootstrap";
-const CLAUDE_CODE_BOOTSTRAP_MODEL = "claude-opus-4-8";
-const CLAUDE_CODE_BOOTSTRAP_USER_AGENT = `claude-code/${claudeCodeVersion}`;
-const CALLBACK_PORT = 54545;
-const CALLBACK_PATH = "/callback";
-const SCOPES = "org:create_api_key user:profile user:inference user:sessions:claude_code user:mcp_servers user:file_upload";
-function formatErrorDetails(error) {
-	if (error instanceof Error) {
-		const details = [`${error.name}: ${error.message}`];
-		const errorWithCode = error;
-		if (errorWithCode.code) details.push(`code=${errorWithCode.code}`);
-		if (typeof errorWithCode.errno !== "undefined") details.push(`errno=${String(errorWithCode.errno)}`);
-		if (typeof error.cause !== "undefined") details.push(`cause=${formatErrorDetails(error.cause)}`);
-		if (error.stack) details.push(`stack=${error.stack}`);
-		return details.join("; ");
-	}
-	return String(error);
-}
-async function postJson(url, body, fetchImpl, extraHeaders) {
-	const response = await fetchImpl(url, {
-		method: "POST",
-		headers: {
-			...extraHeaders,
-			"Content-Type": "application/json"
-		},
-		body: JSON.stringify(body),
-		signal: AbortSignal.timeout(3e4)
-	});
-	const responseBody = await response.text();
-	if (!response.ok) throw new ProviderHttpError(`HTTP request failed. status=${response.status}; url=${url}; body=${responseBody}`, response.status);
-	return responseBody;
-}
-function nonEmpty(value) {
-	return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-function parseOAuthTokenResponse(responseBody, operation) {
-	try {
-		return JSON.parse(responseBody);
-	} catch (error) {
-		throw new OAuthError(`Anthropic ${operation} returned invalid JSON. url=${TOKEN_URL}; body=${responseBody}; details=${formatErrorDetails(error)}`, {
-			kind: "validation",
-			provider: "anthropic",
-			cause: error
-		});
-	}
-}
-/**
-* Lift the OAuth response's `account: { uuid, email_address }` and
-* `organization: { uuid, name }` blocks onto {@link OAuthCredentials} so
-* downstream identity propagation (e.g. `metadata.user_id.account_uuid`,
-* usage tracking, org-scoped credential identity) works without a separate
-* `/api/oauth/profile` round-trip. Returns `undefined` for any field the
-* response omits or carries as a non-string / empty value.
-*/
-function extractAccountFromTokenResponse(data) {
-	return {
-		accountId: nonEmpty(data.account?.uuid),
-		email: nonEmpty(data.account?.email_address),
-		orgId: nonEmpty(data.organization?.uuid),
-		orgName: nonEmpty(data.organization?.name)
-	};
-}
-async function fetchBootstrapIdentity(accessToken, fetchImpl) {
-	const url = `${BOOTSTRAP_URL}?entrypoint=cli&model=${encodeURIComponent(CLAUDE_CODE_BOOTSTRAP_MODEL)}`;
-	const response = await fetchImpl(url, {
-		method: "GET",
-		headers: {
-			Accept: "application/json, text/plain, */*",
-			Authorization: `Bearer ${accessToken}`,
-			"Content-Type": "application/json",
-			"User-Agent": CLAUDE_CODE_BOOTSTRAP_USER_AGENT,
-			"anthropic-beta": "oauth-2025-04-20"
-		},
-		signal: AbortSignal.timeout(3e4)
-	});
-	const responseBody = await response.text();
-	if (!response.ok) throw new ProviderHttpError(`HTTP request failed. status=${response.status}; url=${url}; body=${responseBody}`, response.status);
-	let data;
-	try {
-		data = JSON.parse(responseBody);
-	} catch (error) {
-		throw new OAuthError(`Anthropic bootstrap returned invalid JSON. url=${url}; body=${responseBody}; details=${formatErrorDetails(error)}`, {
-			kind: "validation",
-			provider: "anthropic",
-			cause: error
-		});
-	}
-	return {
-		accountId: nonEmpty(data.oauth_account?.account_uuid),
-		email: nonEmpty(data.oauth_account?.account_email),
-		orgId: nonEmpty(data.oauth_account?.organization_uuid),
-		orgName: nonEmpty(data.oauth_account?.organization_name)
-	};
-}
-/**
-* Resolve account (and optionally organization) identity for a token
-* response. `includeOrg` is login-only: the org an access token is scoped to
-* is captured once when the credential is created and deliberately never
-* refreshed afterwards — rewriting identity during background token
-* refreshes could silently re-key stored credentials.
-*/
-async function resolveAccountIdentity(data, fetchImpl, options) {
-	const identity = extractAccountFromTokenResponse(data);
-	const orgSatisfied = !options?.includeOrg || identity.orgId !== void 0;
-	if (identity.accountId && identity.email && orgSatisfied) return identity;
-	try {
-		const bootstrap = await fetchBootstrapIdentity(data.access_token, fetchImpl);
-		return {
-			accountId: identity.accountId ?? bootstrap.accountId,
-			email: identity.email ?? bootstrap.email,
-			orgId: identity.orgId ?? bootstrap.orgId,
-			orgName: identity.orgName ?? bootstrap.orgName
-		};
-	} catch {
-		return identity;
-	}
-}
-var AnthropicOAuthFlow = class extends OAuthCallbackFlow {
-	#verifier = "";
-	#challenge = "";
-	#fetch;
-	constructor(ctrl) {
-		super(ctrl, CALLBACK_PORT, CALLBACK_PATH);
-		this.#fetch = ctrl.fetch ?? fetch;
-	}
-	async generateAuthUrl(state, redirectUri) {
-		const pkce = await generatePKCE();
-		this.#verifier = pkce.verifier;
-		this.#challenge = pkce.challenge;
-		const authParams = new URLSearchParams({
-			code: "true",
-			client_id: CLIENT_ID,
-			response_type: "code",
-			redirect_uri: redirectUri,
-			scope: SCOPES,
-			code_challenge: this.#challenge,
-			code_challenge_method: "S256",
-			state
-		});
-		return {
-			url: `${AUTHORIZE_URL}?${authParams.toString()}`,
-			instructions: "Complete login in your browser. If the browser cannot reach this machine, paste the final redirect URL or authorization code when prompted."
-		};
-	}
-	async exchangeToken(code, state, redirectUri) {
-		let exchangeCode = code;
-		let exchangeState = state;
-		const codeFragmentIndex = code.indexOf("#");
-		if (codeFragmentIndex >= 0) {
-			exchangeCode = code.slice(0, codeFragmentIndex);
-			const codeFragmentState = code.slice(codeFragmentIndex + 1);
-			if (codeFragmentState.length > 0) exchangeState = codeFragmentState;
-		}
-		let responseBody;
-		try {
-			responseBody = await postJson(TOKEN_URL, {
-				grant_type: "authorization_code",
-				client_id: CLIENT_ID,
-				code: exchangeCode,
-				state: exchangeState,
-				redirect_uri: redirectUri,
-				code_verifier: this.#verifier
-			}, this.#fetch);
-		} catch (error) {
-			throw new OAuthError(`Token exchange request failed. url=${TOKEN_URL}; redirect_uri=${redirectUri}; response_type=authorization_code; details=${formatErrorDetails(error)}`, {
-				kind: "token-exchange",
-				provider: "anthropic",
-				cause: error
-			});
-		}
-		const tokenData = parseOAuthTokenResponse(responseBody, "token exchange");
-		const { accountId, email, orgId, orgName } = await resolveAccountIdentity(tokenData, this.#fetch, { includeOrg: true });
-		return {
-			refresh: tokenData.refresh_token,
-			access: tokenData.access_token,
-			expires: Date.now() + tokenData.expires_in * 1e3 - 3e5,
-			accountId,
-			email,
-			orgId,
-			orgName
-		};
-	}
-};
-/**
-* Login with Anthropic OAuth
-*/
-async function loginAnthropic(ctrl) {
-	return new AnthropicOAuthFlow(ctrl).login();
-}
-/**
-* Refresh Anthropic OAuth token
-*/
-async function refreshAnthropicToken(refreshToken, fetchOverride) {
-	const fetchImpl = fetchOverride ?? fetch;
-	let responseBody;
-	try {
-		responseBody = await postJson(TOKEN_URL, {
-			grant_type: "refresh_token",
-			client_id: CLIENT_ID,
-			refresh_token: refreshToken
-		}, fetchImpl, {
-			"anthropic-beta": "oauth-2025-04-20",
-			"User-Agent": "anthropic-sdk-typescript/0.94.0 userOAuthProvider"
-		});
-	} catch (error) {
-		throw new OAuthError(`Anthropic token refresh request failed. url=${TOKEN_URL}; details=${formatErrorDetails(error)}`, {
-			kind: "token-refresh",
-			provider: "anthropic",
-			cause: error
-		});
-	}
-	const data = parseOAuthTokenResponse(responseBody, "token refresh");
-	const { accountId, email } = await resolveAccountIdentity(data, fetchImpl);
-	return {
-		refresh: data.refresh_token || refreshToken,
-		access: data.access_token,
-		expires: Date.now() + data.expires_in * 1e3 - 3e5,
-		accountId,
-		email
-	};
-}
-//#endregion
-export { coworkUserAgent as a, claudeCodeVersion as i, CLAUDE_CODE_MAX_OUTPUT_TOKENS as n, claudeCodeSystemInstruction as r, anthropic_exports as t };