@yolk-sdk/anthropic 0.0.1-canary.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Yolk SDK contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,67 @@
+# @yolk-sdk/anthropic
+
+Anthropic Claude OAuth mechanics and broker integration primitives.
+
+## Install
+
+```bash
+pnpm add @yolk-sdk/anthropic@canary @yolk-sdk/oauth@canary effect
+```
+
+Canary APIs are unstable. Keep all `@yolk-sdk/*` packages on the same version.
+
+## Subpaths
+
+| Subpath | Purpose |
+| --- | --- |
+| `@yolk-sdk/anthropic` | Anthropic Claude OAuth constants, auth URL helpers, broker helpers, and headers |
+
+## Imports
+
+```ts
+import {
+  anthropicClaudeAuthorizationHeaders,
+  anthropicClaudeProviderId,
+  makeAnthropicClaudeAuthorizationUrl,
+  makeAnthropicClaudeBrokerRequest,
+  parseAnthropicClaudeAuthorizationCode
+} from '@yolk-sdk/anthropic'
+```
+
+## OAuth URL
+
+```ts
+const url = makeAnthropicClaudeAuthorizationUrl({
+  state: 'opaque-state',
+  codeChallenge: 'pkce-code-challenge'
+})
+```
+
+Hosts own PKCE verifier storage and callback routes.
+
+## Callback parse
+
+```ts
+const parsed = parseAnthropicClaudeAuthorizationCode(callbackUrl)
+```
+
+## Broker request
+
+```ts
+const request = makeAnthropicClaudeBrokerRequest({
+  subject: 'opaque-host-subject',
+  minimumTtlMs: 60_000
+})
+```
+
+## Host responsibilities
+
+- Own OAuth verifier/state storage, callback handling, and refresh-token storage.
+- Provide hosted or local credential sources through `@yolk-sdk/oauth`.
+- Own provider requests, telemetry, and product permissions.
+
+## Boundaries
+
+- No app users, sessions, DB, Better Auth, routes, or Durable Objects.
+- No Anthropic SDK dependency.
+- API-key mode can be added later without changing OAuth contracts.

package/dist/claude.d.mts

@@ -0,0 +1,53 @@
+import * as Schema from "effect/Schema";
+import { OAuthAccessToken, TokenBrokerClient, TokenBrokerRequest } from "@yolk-sdk/oauth";
+
+//#region src/claude.d.ts
+declare const anthropicClaudeProviderId = "anthropic-claude";
+declare const anthropicClaudeClientId = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+declare const anthropicClaudeAuthorizeUrl = "https://claude.ai/oauth/authorize";
+declare const anthropicClaudeTokenEndpoint = "https://console.anthropic.com/v1/oauth/token";
+declare const anthropicClaudeRedirectUri = "https://console.anthropic.com/oauth/code/callback";
+declare const anthropicClaudeScopes = "org:create_api_key user:profile user:inference";
+declare const anthropicClaudeOAuthUserAgent = "claude-cli/2.1.2 (external, cli)";
+declare const anthropicClaudeRefreshBufferMs: number;
+declare const AnthropicClaudeOAuthToken_base: Schema.Class<AnthropicClaudeOAuthToken, Schema.Struct<{
+  readonly accessToken: Schema.String;
+  readonly refreshToken: Schema.String;
+  readonly expiresAt: Schema.Number;
+  readonly accountId: Schema.optional<Schema.String>;
+}>, {}>;
+declare class AnthropicClaudeOAuthToken extends AnthropicClaudeOAuthToken_base {}
+declare const AnthropicClaudeTokenBrokerResponse_base: Schema.Class<AnthropicClaudeTokenBrokerResponse, Schema.Struct<{
+  readonly accessToken: Schema.String;
+  readonly expiresAt: Schema.Number;
+  readonly accountId: Schema.optional<Schema.String>;
+}>, {}>;
+declare class AnthropicClaudeTokenBrokerResponse extends AnthropicClaudeTokenBrokerResponse_base {}
+declare const toAnthropicClaudeOAuthAccessToken: (token: AnthropicClaudeTokenBrokerResponse) => OAuthAccessToken;
+declare const makeAnthropicClaudeBrokerRequest: (input: {
+  readonly subjectId: string;
+  readonly minTtlSeconds?: number;
+  readonly forceRefresh?: boolean;
+}) => TokenBrokerRequest;
+declare const anthropicClaudeAuthorizationHeaders: (token: OAuthAccessToken) => {
+  authorization: string;
+};
+declare const makeAnthropicClaudeTokenBrokerClient: (broker: TokenBrokerClient) => {
+  getAccessToken: (input: {
+    readonly subjectId: string;
+    readonly minTtlSeconds?: number;
+    readonly forceRefresh?: boolean;
+  }) => import("effect/Effect").Effect<OAuthAccessToken, import("@yolk-sdk/oauth").OAuthError, never>;
+};
+declare const makeAnthropicClaudeAuthorizationUrl: (input: {
+  readonly codeChallenge: string;
+  readonly state: string;
+}) => string;
+type ParsedAnthropicClaudeAuthorizationCode = {
+  readonly code: string;
+  readonly state: string;
+};
+declare const parseAnthropicClaudeAuthorizationCode: (value: string) => ParsedAnthropicClaudeAuthorizationCode | undefined;
+//#endregion
+export { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, ParsedAnthropicClaudeAuthorizationCode, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken };
+//# sourceMappingURL=claude.d.mts.map

package/dist/claude.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.mts","names":[],"sources":["../src/claude.ts"],"mappings":";;;;cAGa,yBAAA;AAAA,cACA,uBAAA;AAAA,cACA,2BAAA;AAAA,cACA,4BAAA;AAAA,cACA,0BAAA;AAAA,cACA,qBAAA;AAAA,cACA,6BAAA;AAAA,cACA,8BAAA;AAAA,cAA8C,8BAAA;;;;;;cAE9C,yBAAA,SAAkC,8BAO7C;AAAA,cAAG,uCAAA;;;;;cAEQ,kCAAA,SAA2C,uCAMtD;AAAA,cAEW,iCAAA,GAAqC,KAAA,EAAO,kCAAA,KAAkC,gBAMvF;AAAA,cAES,gCAAA,GAAoC,KAAA;EAAA,SACtC,SAAA;EAAA,SACA,aAAA;EAAA,SACA,YAAA;AAAA,MACV,kBAMG;AAAA,cAES,mCAAA,GAAuC,KAAA,EAAO,gBAAgB;;;cAI9D,oCAAA,GAAwC,MAAA,EAAQ,iBAAA;;aAEhD,SAAA;IAAA,SACA,aAAA;IAAA,SACA,YAAA;EAAA,8BACV,MAAA,CAAA,gBAAA,4BAAA,UAAA;AAAA;AAAA,cAGU,mCAAA,GAAuC,KAAA;EAAA,SACzC,aAAA;EAAA,SACA,KAAA;AAAA;AAAA,KAeC,sCAAA;EAAA,SACD,IAAA;EAAA,SACA,KAAK;AAAA;AAAA,cAGH,qCAAA,GACX,KAAA,aACC,sCAAsC"}

package/dist/claude.mjs

@@ -0,0 +1,88 @@
+import * as Schema from "effect/Schema";
+import { OAuthAccessToken, TokenBrokerRequest } from "@yolk-sdk/oauth";
+//#region src/claude.ts
+const anthropicClaudeProviderId = "anthropic-claude";
+const anthropicClaudeClientId = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+const anthropicClaudeAuthorizeUrl = "https://claude.ai/oauth/authorize";
+const anthropicClaudeTokenEndpoint = "https://console.anthropic.com/v1/oauth/token";
+const anthropicClaudeRedirectUri = "https://console.anthropic.com/oauth/code/callback";
+const anthropicClaudeScopes = "org:create_api_key user:profile user:inference";
+const anthropicClaudeOAuthUserAgent = "claude-cli/2.1.2 (external, cli)";
+const anthropicClaudeRefreshBufferMs = 300 * 1e3;
+var AnthropicClaudeOAuthToken = class extends Schema.Class("AnthropicClaudeOAuthToken")({
+	accessToken: Schema.String,
+	refreshToken: Schema.String,
+	expiresAt: Schema.Number,
+	accountId: Schema.optional(Schema.String)
+}) {};
+var AnthropicClaudeTokenBrokerResponse = class extends Schema.Class("AnthropicClaudeTokenBrokerResponse")({
+	accessToken: Schema.String,
+	expiresAt: Schema.Number,
+	accountId: Schema.optional(Schema.String)
+}) {};
+const toAnthropicClaudeOAuthAccessToken = (token) => new OAuthAccessToken({
+	provider: anthropicClaudeProviderId,
+	accessToken: token.accessToken,
+	expiresAt: token.expiresAt,
+	accountId: token.accountId
+});
+const makeAnthropicClaudeBrokerRequest = (input) => new TokenBrokerRequest({
+	provider: anthropicClaudeProviderId,
+	subjectId: input.subjectId,
+	minTtlSeconds: input.minTtlSeconds,
+	forceRefresh: input.forceRefresh
+});
+const anthropicClaudeAuthorizationHeaders = (token) => ({ authorization: `Bearer ${token.accessToken}` });
+const makeAnthropicClaudeTokenBrokerClient = (broker) => ({ getAccessToken: (input) => broker.getAccessToken(makeAnthropicClaudeBrokerRequest(input)) });
+const makeAnthropicClaudeAuthorizationUrl = (input) => {
+	const authUrl = new URL(anthropicClaudeAuthorizeUrl);
+	authUrl.searchParams.set("code", "true");
+	authUrl.searchParams.set("client_id", anthropicClaudeClientId);
+	authUrl.searchParams.set("response_type", "code");
+	authUrl.searchParams.set("redirect_uri", anthropicClaudeRedirectUri);
+	authUrl.searchParams.set("scope", anthropicClaudeScopes);
+	authUrl.searchParams.set("code_challenge", input.codeChallenge);
+	authUrl.searchParams.set("code_challenge_method", "S256");
+	authUrl.searchParams.set("state", input.state);
+	return authUrl.toString();
+};
+const parseAnthropicClaudeAuthorizationCode = (value) => {
+	const trimmed = value.trim();
+	if (trimmed.length === 0) return;
+	const parseFromUrl = () => {
+		try {
+			const url = new URL(trimmed);
+			const code = url.searchParams.get("code") ?? void 0;
+			const state = url.searchParams.get("state") ?? void 0;
+			if (code === void 0 || state === void 0) return;
+			return {
+				code,
+				state
+			};
+		} catch {
+			return;
+		}
+	};
+	const fromUrl = parseFromUrl();
+	if (fromUrl !== void 0) return fromUrl;
+	if (trimmed.includes("#")) {
+		const [code, state] = trimmed.split("#", 2);
+		if (code !== void 0 && code.length > 0 && state !== void 0 && state.length > 0) return {
+			code,
+			state
+		};
+	}
+	if (trimmed.includes("code=")) {
+		const params = new URLSearchParams(trimmed);
+		const code = params.get("code") ?? void 0;
+		const state = params.get("state") ?? void 0;
+		if (code !== void 0 && state !== void 0) return {
+			code,
+			state
+		};
+	}
+};
+//#endregion
+export { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken };
+
+//# sourceMappingURL=claude.mjs.map

package/dist/claude.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.mjs","names":[],"sources":["../src/claude.ts"],"sourcesContent":["import * as Schema from 'effect/Schema'\nimport { OAuthAccessToken, TokenBrokerRequest, type TokenBrokerClient } from '@yolk-sdk/oauth'\n\nexport const anthropicClaudeProviderId = 'anthropic-claude'\nexport const anthropicClaudeClientId = '9d1c250a-e61b-44d9-88ed-5944d1962f5e'\nexport const anthropicClaudeAuthorizeUrl = 'https://claude.ai/oauth/authorize'\nexport const anthropicClaudeTokenEndpoint = 'https://console.anthropic.com/v1/oauth/token'\nexport const anthropicClaudeRedirectUri = 'https://console.anthropic.com/oauth/code/callback'\nexport const anthropicClaudeScopes = 'org:create_api_key user:profile user:inference'\nexport const anthropicClaudeOAuthUserAgent = 'claude-cli/2.1.2 (external, cli)'\nexport const anthropicClaudeRefreshBufferMs = 5 * 60 * 1000\n\nexport class AnthropicClaudeOAuthToken extends Schema.Class<AnthropicClaudeOAuthToken>(\n  'AnthropicClaudeOAuthToken'\n)({\n  accessToken: Schema.String,\n  refreshToken: Schema.String,\n  expiresAt: Schema.Number,\n  accountId: Schema.optional(Schema.String)\n}) {}\n\nexport class AnthropicClaudeTokenBrokerResponse extends Schema.Class<AnthropicClaudeTokenBrokerResponse>(\n  'AnthropicClaudeTokenBrokerResponse'\n)({\n  accessToken: Schema.String,\n  expiresAt: Schema.Number,\n  accountId: Schema.optional(Schema.String)\n}) {}\n\nexport const toAnthropicClaudeOAuthAccessToken = (token: AnthropicClaudeTokenBrokerResponse) =>\n  new OAuthAccessToken({\n    provider: anthropicClaudeProviderId,\n    accessToken: token.accessToken,\n    expiresAt: token.expiresAt,\n    accountId: token.accountId\n  })\n\nexport const makeAnthropicClaudeBrokerRequest = (input: {\n  readonly subjectId: string\n  readonly minTtlSeconds?: number\n  readonly forceRefresh?: boolean\n}) =>\n  new TokenBrokerRequest({\n    provider: anthropicClaudeProviderId,\n    subjectId: input.subjectId,\n    minTtlSeconds: input.minTtlSeconds,\n    forceRefresh: input.forceRefresh\n  })\n\nexport const anthropicClaudeAuthorizationHeaders = (token: OAuthAccessToken) => ({\n  authorization: `Bearer ${token.accessToken}`\n})\n\nexport const makeAnthropicClaudeTokenBrokerClient = (broker: TokenBrokerClient) => ({\n  getAccessToken: (input: {\n    readonly subjectId: string\n    readonly minTtlSeconds?: number\n    readonly forceRefresh?: boolean\n  }) => broker.getAccessToken(makeAnthropicClaudeBrokerRequest(input))\n})\n\nexport const makeAnthropicClaudeAuthorizationUrl = (input: {\n  readonly codeChallenge: string\n  readonly state: string\n}) => {\n  const authUrl = new URL(anthropicClaudeAuthorizeUrl)\n  authUrl.searchParams.set('code', 'true')\n  authUrl.searchParams.set('client_id', anthropicClaudeClientId)\n  authUrl.searchParams.set('response_type', 'code')\n  authUrl.searchParams.set('redirect_uri', anthropicClaudeRedirectUri)\n  authUrl.searchParams.set('scope', anthropicClaudeScopes)\n  authUrl.searchParams.set('code_challenge', input.codeChallenge)\n  authUrl.searchParams.set('code_challenge_method', 'S256')\n  authUrl.searchParams.set('state', input.state)\n\n  return authUrl.toString()\n}\n\nexport type ParsedAnthropicClaudeAuthorizationCode = {\n  readonly code: string\n  readonly state: string\n}\n\nexport const parseAnthropicClaudeAuthorizationCode = (\n  value: string\n): ParsedAnthropicClaudeAuthorizationCode | undefined => {\n  const trimmed = value.trim()\n\n  if (trimmed.length === 0) {\n    return undefined\n  }\n\n  const parseFromUrl = () => {\n    try {\n      const url = new URL(trimmed)\n      const code = url.searchParams.get('code') ?? undefined\n      const state = url.searchParams.get('state') ?? undefined\n\n      if (code === undefined || state === undefined) {\n        return undefined\n      }\n\n      return { code, state }\n    } catch {\n      return undefined\n    }\n  }\n\n  const fromUrl = parseFromUrl()\n\n  if (fromUrl !== undefined) {\n    return fromUrl\n  }\n\n  if (trimmed.includes('#')) {\n    const [code, state] = trimmed.split('#', 2)\n\n    if (code !== undefined && code.length > 0 && state !== undefined && state.length > 0) {\n      return { code, state }\n    }\n  }\n\n  if (trimmed.includes('code=')) {\n    const params = new URLSearchParams(trimmed)\n    const code = params.get('code') ?? undefined\n    const state = params.get('state') ?? undefined\n\n    if (code !== undefined && state !== undefined) {\n      return { code, state }\n    }\n  }\n\n  return undefined\n}\n"],"mappings":";;;AAGA,MAAa,4BAA4B;AACzC,MAAa,0BAA0B;AACvC,MAAa,8BAA8B;AAC3C,MAAa,+BAA+B;AAC5C,MAAa,6BAA6B;AAC1C,MAAa,wBAAwB;AACrC,MAAa,gCAAgC;AAC7C,MAAa,iCAAiC,MAAS;AAEvD,IAAa,4BAAb,cAA+C,OAAO,MACpD,2BACF,EAAE;CACA,aAAa,OAAO;CACpB,cAAc,OAAO;CACrB,WAAW,OAAO;CAClB,WAAW,OAAO,SAAS,OAAO,MAAM;AAC1C,CAAC,EAAE,CAAC;AAEJ,IAAa,qCAAb,cAAwD,OAAO,MAC7D,oCACF,EAAE;CACA,aAAa,OAAO;CACpB,WAAW,OAAO;CAClB,WAAW,OAAO,SAAS,OAAO,MAAM;AAC1C,CAAC,EAAE,CAAC;AAEJ,MAAa,qCAAqC,UAChD,IAAI,iBAAiB;CACnB,UAAU;CACV,aAAa,MAAM;CACnB,WAAW,MAAM;CACjB,WAAW,MAAM;AACnB,CAAC;AAEH,MAAa,oCAAoC,UAK/C,IAAI,mBAAmB;CACrB,UAAU;CACV,WAAW,MAAM;CACjB,eAAe,MAAM;CACrB,cAAc,MAAM;AACtB,CAAC;AAEH,MAAa,uCAAuC,WAA6B,EAC/E,eAAe,UAAU,MAAM,cACjC;AAEA,MAAa,wCAAwC,YAA+B,EAClF,iBAAiB,UAIX,OAAO,eAAe,iCAAiC,KAAK,CAAC,EACrE;AAEA,MAAa,uCAAuC,UAG9C;CACJ,MAAM,UAAU,IAAI,IAAI,2BAA2B;CACnD,QAAQ,aAAa,IAAI,QAAQ,MAAM;CACvC,QAAQ,aAAa,IAAI,aAAa,uBAAuB;CAC7D,QAAQ,aAAa,IAAI,iBAAiB,MAAM;CAChD,QAAQ,aAAa,IAAI,gBAAgB,0BAA0B;CACnE,QAAQ,aAAa,IAAI,SAAS,qBAAqB;CACvD,QAAQ,aAAa,IAAI,kBAAkB,MAAM,aAAa;CAC9D,QAAQ,aAAa,IAAI,yBAAyB,MAAM;CACxD,QAAQ,aAAa,IAAI,SAAS,MAAM,KAAK;CAE7C,OAAO,QAAQ,SAAS;AAC1B;AAOA,MAAa,yCACX,UACuD;CACvD,MAAM,UAAU,MAAM,KAAK;CAE3B,IAAI,QAAQ,WAAW,GACrB;CAGF,MAAM,qBAAqB;EACzB,IAAI;GACF,MAAM,MAAM,IAAI,IAAI,OAAO;GAC3B,MAAM,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,KAAA;GAC7C,MAAM,QAAQ,IAAI,aAAa,IAAI,OAAO,KAAK,KAAA;GAE/C,IAAI,SAAS,KAAA,KAAa,UAAU,KAAA,GAClC;GAGF,OAAO;IAAE;IAAM;GAAM;EACvB,QAAQ;GACN;EACF;CACF;CAEA,MAAM,UAAU,aAAa;CAE7B,IAAI,YAAY,KAAA,GACd,OAAO;CAGT,IAAI,QAAQ,SAAS,GAAG,GAAG;EACzB,MAAM,CAAC,MAAM,SAAS,QAAQ,MAAM,KAAK,CAAC;EAE1C,IAAI,SAAS,KAAA,KAAa,KAAK,SAAS,KAAK,UAAU,KAAA,KAAa,MAAM,SAAS,GACjF,OAAO;GAAE;GAAM;EAAM;CAEzB;CAEA,IAAI,QAAQ,SAAS,OAAO,GAAG;EAC7B,MAAM,SAAS,IAAI,gBAAgB,OAAO;EAC1C,MAAM,OAAO,OAAO,IAAI,MAAM,KAAK,KAAA;EACnC,MAAM,QAAQ,OAAO,IAAI,OAAO,KAAK,KAAA;EAErC,IAAI,SAAS,KAAA,KAAa,UAAU,KAAA,GAClC,OAAO;GAAE;GAAM;EAAM;CAEzB;AAGF"}

package/dist/index.d.mts

@@ -0,0 +1,2 @@
+import { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, ParsedAnthropicClaudeAuthorizationCode, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken } from "./claude.mjs";
+export { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, type ParsedAnthropicClaudeAuthorizationCode, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken };

package/dist/index.mjs

@@ -0,0 +1,2 @@
+import { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken } from "./claude.mjs";
+export { AnthropicClaudeOAuthToken, AnthropicClaudeTokenBrokerResponse, anthropicClaudeAuthorizationHeaders, anthropicClaudeAuthorizeUrl, anthropicClaudeClientId, anthropicClaudeOAuthUserAgent, anthropicClaudeProviderId, anthropicClaudeRedirectUri, anthropicClaudeRefreshBufferMs, anthropicClaudeScopes, anthropicClaudeTokenEndpoint, makeAnthropicClaudeAuthorizationUrl, makeAnthropicClaudeBrokerRequest, makeAnthropicClaudeTokenBrokerClient, parseAnthropicClaudeAuthorizationCode, toAnthropicClaudeOAuthAccessToken };

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@yolk-sdk/anthropic",
+  "version": "0.0.1-canary.0",
+  "description": "Anthropic Claude OAuth and provider mechanics for Yolk hosts.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/magoz/yolk-sdk.git",
+    "directory": "packages/anthropic"
+  },
+  "bugs": {
+    "url": "https://github.com/magoz/yolk-sdk/issues"
+  },
+  "homepage": "https://github.com/magoz/yolk-sdk#readme",
+  "keywords": [
+    "anthropic",
+    "claude",
+    "oauth",
+    "agent",
+    "effect"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    }
+  },
+  "files": [
+    "src/**/*.ts",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
+    "dist/**/*",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "effect": "4.0.0-beta.65",
+    "@yolk-sdk/oauth": "^0.0.1-canary.0"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "check": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:run": "vitest run --passWithNoTests"
+  }
+}

package/src/claude.ts

@@ -0,0 +1,134 @@
+import * as Schema from 'effect/Schema'
+import { OAuthAccessToken, TokenBrokerRequest, type TokenBrokerClient } from '@yolk-sdk/oauth'
+
+export const anthropicClaudeProviderId = 'anthropic-claude'
+export const anthropicClaudeClientId = '9d1c250a-e61b-44d9-88ed-5944d1962f5e'
+export const anthropicClaudeAuthorizeUrl = 'https://claude.ai/oauth/authorize'
+export const anthropicClaudeTokenEndpoint = 'https://console.anthropic.com/v1/oauth/token'
+export const anthropicClaudeRedirectUri = 'https://console.anthropic.com/oauth/code/callback'
+export const anthropicClaudeScopes = 'org:create_api_key user:profile user:inference'
+export const anthropicClaudeOAuthUserAgent = 'claude-cli/2.1.2 (external, cli)'
+export const anthropicClaudeRefreshBufferMs = 5 * 60 * 1000
+
+export class AnthropicClaudeOAuthToken extends Schema.Class<AnthropicClaudeOAuthToken>(
+  'AnthropicClaudeOAuthToken'
+)({
+  accessToken: Schema.String,
+  refreshToken: Schema.String,
+  expiresAt: Schema.Number,
+  accountId: Schema.optional(Schema.String)
+}) {}
+
+export class AnthropicClaudeTokenBrokerResponse extends Schema.Class<AnthropicClaudeTokenBrokerResponse>(
+  'AnthropicClaudeTokenBrokerResponse'
+)({
+  accessToken: Schema.String,
+  expiresAt: Schema.Number,
+  accountId: Schema.optional(Schema.String)
+}) {}
+
+export const toAnthropicClaudeOAuthAccessToken = (token: AnthropicClaudeTokenBrokerResponse) =>
+  new OAuthAccessToken({
+    provider: anthropicClaudeProviderId,
+    accessToken: token.accessToken,
+    expiresAt: token.expiresAt,
+    accountId: token.accountId
+  })
+
+export const makeAnthropicClaudeBrokerRequest = (input: {
+  readonly subjectId: string
+  readonly minTtlSeconds?: number
+  readonly forceRefresh?: boolean
+}) =>
+  new TokenBrokerRequest({
+    provider: anthropicClaudeProviderId,
+    subjectId: input.subjectId,
+    minTtlSeconds: input.minTtlSeconds,
+    forceRefresh: input.forceRefresh
+  })
+
+export const anthropicClaudeAuthorizationHeaders = (token: OAuthAccessToken) => ({
+  authorization: `Bearer ${token.accessToken}`
+})
+
+export const makeAnthropicClaudeTokenBrokerClient = (broker: TokenBrokerClient) => ({
+  getAccessToken: (input: {
+    readonly subjectId: string
+    readonly minTtlSeconds?: number
+    readonly forceRefresh?: boolean
+  }) => broker.getAccessToken(makeAnthropicClaudeBrokerRequest(input))
+})
+
+export const makeAnthropicClaudeAuthorizationUrl = (input: {
+  readonly codeChallenge: string
+  readonly state: string
+}) => {
+  const authUrl = new URL(anthropicClaudeAuthorizeUrl)
+  authUrl.searchParams.set('code', 'true')
+  authUrl.searchParams.set('client_id', anthropicClaudeClientId)
+  authUrl.searchParams.set('response_type', 'code')
+  authUrl.searchParams.set('redirect_uri', anthropicClaudeRedirectUri)
+  authUrl.searchParams.set('scope', anthropicClaudeScopes)
+  authUrl.searchParams.set('code_challenge', input.codeChallenge)
+  authUrl.searchParams.set('code_challenge_method', 'S256')
+  authUrl.searchParams.set('state', input.state)
+
+  return authUrl.toString()
+}
+
+export type ParsedAnthropicClaudeAuthorizationCode = {
+  readonly code: string
+  readonly state: string
+}
+
+export const parseAnthropicClaudeAuthorizationCode = (
+  value: string
+): ParsedAnthropicClaudeAuthorizationCode | undefined => {
+  const trimmed = value.trim()
+
+  if (trimmed.length === 0) {
+    return undefined
+  }
+
+  const parseFromUrl = () => {
+    try {
+      const url = new URL(trimmed)
+      const code = url.searchParams.get('code') ?? undefined
+      const state = url.searchParams.get('state') ?? undefined
+
+      if (code === undefined || state === undefined) {
+        return undefined
+      }
+
+      return { code, state }
+    } catch {
+      return undefined
+    }
+  }
+
+  const fromUrl = parseFromUrl()
+
+  if (fromUrl !== undefined) {
+    return fromUrl
+  }
+
+  if (trimmed.includes('#')) {
+    const [code, state] = trimmed.split('#', 2)
+
+    if (code !== undefined && code.length > 0 && state !== undefined && state.length > 0) {
+      return { code, state }
+    }
+  }
+
+  if (trimmed.includes('code=')) {
+    const params = new URLSearchParams(trimmed)
+    const code = params.get('code') ?? undefined
+    const state = params.get('state') ?? undefined
+
+    if (code !== undefined && state !== undefined) {
+      return { code, state }
+    }
+  }
+
+  return undefined
+}

package/src/index.ts

@@ -0,0 +1,19 @@
+export {
+  AnthropicClaudeOAuthToken,
+  AnthropicClaudeTokenBrokerResponse,
+  anthropicClaudeAuthorizationHeaders,
+  anthropicClaudeAuthorizeUrl,
+  anthropicClaudeClientId,
+  anthropicClaudeOAuthUserAgent,
+  anthropicClaudeProviderId,
+  anthropicClaudeRedirectUri,
+  anthropicClaudeRefreshBufferMs,
+  anthropicClaudeScopes,
+  anthropicClaudeTokenEndpoint,
+  makeAnthropicClaudeAuthorizationUrl,
+  makeAnthropicClaudeBrokerRequest,
+  makeAnthropicClaudeTokenBrokerClient,
+  parseAnthropicClaudeAuthorizationCode,
+  toAnthropicClaudeOAuthAccessToken,
+  type ParsedAnthropicClaudeAuthorizationCode
+} from './claude.ts'