svamp-cli 0.2.342 → 0.2.356

package/dist/claudeAuth-C0wc1GTM.mjs

@@ -0,0 +1,291 @@
+import { existsSync, readFileSync, mkdirSync, writeFileSync, chmodSync, renameSync, unlinkSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { w as withFileLock } from './fileLock-BMPwCrB6.mjs';
+import { e as envFlagEnabled } from './envFlag-COOuJ3AH.mjs';
+
+const EXAMPLE_HYPHA_PROXY_URL = "https://proxy.hypha.aicell.io";
+const MODE_KEY = "SVAMP_CLAUDE_PROXY";
+const HYPHA_PROXY_URL_KEY = "SVAMP_HYPHA_PROXY_URL";
+const MANAGED_KEYS = /* @__PURE__ */ new Set([
+  MODE_KEY,
+  HYPHA_PROXY_URL_KEY,
+  "ANTHROPIC_BASE_URL",
+  "ANTHROPIC_API_KEY",
+  // #1521: the daemon merges the 1M-context beta into ANTHROPIC_BETAS at spawn (see
+  // applyLongContext1M). It is spawn-env-only — never written to ~/.svamp/.env — but it is a
+  // key the daemon owns, so it belongs in the inspection allow-list.
+  "ANTHROPIC_BETAS"
+]);
+function normalizeProxyUrl(raw) {
+  const trimmed = raw.trim().replace(/\/+$/, "");
+  if (trimmed.endsWith("/v1")) {
+    throw new Error(
+      "Hypha proxy URL must not end in /v1 \u2014 the SDK appends it, producing double /v1/v1/messages"
+    );
+  }
+  return trimmed;
+}
+function resolveHyphaProxyUrl() {
+  const configured = (process.env[HYPHA_PROXY_URL_KEY] || "").trim();
+  if (!configured) return void 0;
+  try {
+    return normalizeProxyUrl(configured);
+  } catch {
+    return void 0;
+  }
+}
+function envFilePath() {
+  const svampHome = process.env.SVAMP_HOME || join(homedir(), ".svamp");
+  return join(svampHome, ".env");
+}
+function readEnvLines() {
+  const file = envFilePath();
+  if (!existsSync(file)) return [];
+  return readFileSync(file, "utf-8").split("\n");
+}
+function writeEnvLines(lines) {
+  const file = envFilePath();
+  const dir = join(file, "..");
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+  while (lines.length > 0 && lines[lines.length - 1].trim() === "") {
+    lines.pop();
+  }
+  const body = lines.join("\n") + "\n";
+  const tmp = `${file}.tmp.${process.pid}.${Math.random().toString(36).slice(2, 10)}`;
+  try {
+    writeFileSync(tmp, body, { encoding: "utf-8", mode: 384 });
+    try {
+      chmodSync(tmp, 384);
+    } catch {
+    }
+    renameSync(tmp, file);
+  } catch (err) {
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw err;
+  }
+  try {
+    chmodSync(file, 384);
+  } catch {
+  }
+}
+function updateEnvFile(updates) {
+  withFileLock(`${envFilePath()}.lock`, () => updateEnvFileUnlocked(updates), {
+    deadlineMs: 2e3,
+    breakOnDeadOwner: true
+  });
+}
+function updateEnvFileUnlocked(updates) {
+  const lines = readEnvLines();
+  const kept = [];
+  const remainingUpdates = new Map(Object.entries(updates));
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) {
+      kept.push(line);
+      continue;
+    }
+    const eq = trimmed.indexOf("=");
+    const key = eq === -1 ? trimmed : trimmed.slice(0, eq);
+    if (remainingUpdates.has(key)) {
+      const v = remainingUpdates.get(key);
+      remainingUpdates.delete(key);
+      if (v === void 0) continue;
+      kept.push(`${key}=${v}`);
+      continue;
+    }
+    kept.push(line);
+  }
+  for (const [key, v] of remainingUpdates) {
+    if (v === void 0) continue;
+    kept.push(`${key}=${v}`);
+  }
+  writeEnvLines(kept);
+}
+function currentMode() {
+  const raw = (process.env[MODE_KEY] || "").trim().toLowerCase();
+  if (raw === "hypha" || raw === "hypha-proxy") return "hypha";
+  if (raw === "custom") return "custom";
+  return "login";
+}
+function redactKey(key) {
+  if (!key) return void 0;
+  if (key.length <= 12) return "***";
+  return `${key.slice(0, 8)}\u2026${key.slice(-4)}`;
+}
+function getClaudeAuthStatus() {
+  const mode = currentMode();
+  if (mode === "hypha") {
+    const token = process.env.HYPHA_TOKEN;
+    const proxyUrl = resolveHyphaProxyUrl();
+    return {
+      mode,
+      baseUrl: proxyUrl,
+      apiKeyPreview: redactKey(token),
+      hyphaTokenMissing: !token,
+      hyphaProxyUrlMissing: !proxyUrl
+    };
+  }
+  if (mode === "custom") {
+    return {
+      mode,
+      baseUrl: process.env.ANTHROPIC_BASE_URL,
+      apiKeyPreview: redactKey(process.env.ANTHROPIC_API_KEY)
+    };
+  }
+  return { mode: "login" };
+}
+function setClaudeAuthHyphaProxy(url) {
+  if (!url || !url.trim()) {
+    throw new Error(
+      `A Hypha proxy URL is required (no default). Example: svamp daemon auth use-hypha-proxy ${EXAMPLE_HYPHA_PROXY_URL}`
+    );
+  }
+  updateEnvFile({
+    [MODE_KEY]: "hypha",
+    [HYPHA_PROXY_URL_KEY]: normalizeProxyUrl(url),
+    // Hypha mode resolves token live at spawn — no stored copy.
+    ANTHROPIC_BASE_URL: void 0,
+    ANTHROPIC_API_KEY: void 0
+  });
+}
+function setClaudeAuthLogin() {
+  updateEnvFile({
+    [MODE_KEY]: void 0,
+    [HYPHA_PROXY_URL_KEY]: void 0,
+    ANTHROPIC_BASE_URL: void 0,
+    ANTHROPIC_API_KEY: void 0
+  });
+}
+function setClaudeAuthCustom(baseUrl, apiKey) {
+  if (!baseUrl) throw new Error("ANTHROPIC_BASE_URL is required for custom mode");
+  if (!apiKey) throw new Error("ANTHROPIC_API_KEY is required for custom mode");
+  const trimmed = baseUrl.replace(/\/+$/, "");
+  if (trimmed.endsWith("/v1")) {
+    throw new Error(
+      "ANTHROPIC_BASE_URL must not end in /v1 \u2014 the SDK appends it, producing double /v1/v1/messages"
+    );
+  }
+  updateEnvFile({
+    [MODE_KEY]: "custom",
+    [HYPHA_PROXY_URL_KEY]: void 0,
+    ANTHROPIC_BASE_URL: trimmed,
+    ANTHROPIC_API_KEY: apiKey
+  });
+}
+function applyPromptCacheTtl(spawnEnv) {
+  if (envFlagEnabled(spawnEnv.FORCE_PROMPT_CACHING_5M) || envFlagEnabled(process.env.FORCE_PROMPT_CACHING_5M)) return;
+  const explicit1h = spawnEnv.ENABLE_PROMPT_CACHING_1H ?? process.env.ENABLE_PROMPT_CACHING_1H;
+  if (explicit1h === void 0) spawnEnv.ENABLE_PROMPT_CACHING_1H = "1";
+}
+const BETA_1M_TOKEN = "context-1m-2025-08-07";
+let longContext1MEntitlement = "unknown";
+function setLongContext1MEntitlement(state) {
+  longContext1MEntitlement = state;
+}
+function getLongContext1MEntitlement() {
+  return longContext1MEntitlement;
+}
+function isLongContextBetaUnavailableError(err) {
+  const text = typeof err === "string" ? err : err?.message ?? String(err ?? "");
+  return /long context beta is not (yet )?available/i.test(text);
+}
+const LONG_CONTEXT_ENTITLEMENT_RECHECK_MS = Number(process.env.SVAMP_1M_ENTITLEMENT_RECHECK_MS || 60 * 60 * 1e3);
+async function probeLongContext1MEntitlement(baseUrl, apiKey, fetchImpl = fetch) {
+  if (!baseUrl || !apiKey) return longContext1MEntitlement;
+  try {
+    const resp = await fetchImpl(`${baseUrl.replace(/\/$/, "")}/v1/messages`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${apiKey}`,
+        "anthropic-beta": BETA_1M_TOKEN
+      },
+      body: JSON.stringify({
+        model: "claude-haiku-4-5-20251001",
+        max_tokens: 1,
+        messages: [{ role: "user", content: "x" }]
+      }),
+      signal: AbortSignal.timeout(2e4)
+    });
+    if (resp.ok) {
+      setLongContext1MEntitlement("entitled");
+      return "entitled";
+    }
+    const text = await resp.text().catch(() => "");
+    if (isLongContextBetaUnavailableError(text)) {
+      setLongContext1MEntitlement("not-entitled");
+      return "not-entitled";
+    }
+    return longContext1MEntitlement;
+  } catch {
+    return longContext1MEntitlement;
+  }
+}
+function applyLongContext1M(spawnEnv) {
+  if (envFlagEnabled(spawnEnv.CLAUDE_CODE_DISABLE_1M_CONTEXT) || envFlagEnabled(process.env.CLAUDE_CODE_DISABLE_1M_CONTEXT)) return;
+  if (longContext1MEntitlement !== "entitled") return;
+  const existing = spawnEnv.ANTHROPIC_BETAS ?? process.env.ANTHROPIC_BETAS ?? "";
+  const betas = existing.split(",").map((b) => b.trim()).filter(Boolean);
+  if (!betas.includes(BETA_1M_TOKEN)) betas.push(BETA_1M_TOKEN);
+  spawnEnv.ANTHROPIC_BETAS = betas.join(",");
+}
+function applyTodoTools(spawnEnv) {
+  const override = spawnEnv.CLAUDE_CODE_ENABLE_TODO_TOOLS ?? process.env.CLAUDE_CODE_ENABLE_TODO_TOOLS;
+  if (override === void 0) spawnEnv.CLAUDE_CODE_ENABLE_TODO_TOOLS = "1";
+}
+function applyClaudeHygiene(spawnEnv) {
+  if ((spawnEnv.DISABLE_AUTOUPDATER ?? process.env.DISABLE_AUTOUPDATER) === void 0) {
+    spawnEnv.DISABLE_AUTOUPDATER = "1";
+  }
+  if ((spawnEnv.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC ?? process.env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC) === void 0) {
+    spawnEnv.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC = "1";
+  }
+}
+function applyClaudeProxyEnv(spawnEnv) {
+  const mode = currentMode();
+  applyTodoTools(spawnEnv);
+  applyClaudeHygiene(spawnEnv);
+  if (mode === "hypha") {
+    const proxyUrl = resolveHyphaProxyUrl();
+    if (!proxyUrl) {
+      delete spawnEnv.ANTHROPIC_BASE_URL;
+      delete spawnEnv.ANTHROPIC_API_KEY;
+      return `hypha mode but ${HYPHA_PROXY_URL_KEY} not configured \u2014 run \`svamp daemon auth use-hypha-proxy <URL>\`; falling back to login`;
+    }
+    const token = process.env.HYPHA_TOKEN;
+    if (!token) {
+      delete spawnEnv.ANTHROPIC_BASE_URL;
+      delete spawnEnv.ANTHROPIC_API_KEY;
+      return "hypha mode but HYPHA_TOKEN missing \u2014 falling back to login";
+    }
+    spawnEnv.ANTHROPIC_BASE_URL = proxyUrl;
+    spawnEnv.ANTHROPIC_API_KEY = token;
+    applyPromptCacheTtl(spawnEnv);
+    applyLongContext1M(spawnEnv);
+    return `hypha proxy (${proxyUrl}, 1h cache TTL, 1M context)`;
+  }
+  if (mode === "custom") {
+    const url = process.env.ANTHROPIC_BASE_URL;
+    const key = process.env.ANTHROPIC_API_KEY;
+    if (!url || !key) {
+      delete spawnEnv.ANTHROPIC_BASE_URL;
+      delete spawnEnv.ANTHROPIC_API_KEY;
+      return "custom mode but ANTHROPIC_BASE_URL/API_KEY missing \u2014 falling back to login";
+    }
+    spawnEnv.ANTHROPIC_BASE_URL = url;
+    spawnEnv.ANTHROPIC_API_KEY = key;
+    applyPromptCacheTtl(spawnEnv);
+    applyLongContext1M(spawnEnv);
+    return `custom proxy (${url}, 1h cache TTL, 1M context)`;
+  }
+  delete spawnEnv.ANTHROPIC_BASE_URL;
+  delete spawnEnv.ANTHROPIC_API_KEY;
+  return null;
+}
+const MANAGED_ENV_KEYS = Array.from(MANAGED_KEYS);
+
+export { BETA_1M_TOKEN, EXAMPLE_HYPHA_PROXY_URL, LONG_CONTEXT_ENTITLEMENT_RECHECK_MS, MANAGED_ENV_KEYS, applyClaudeProxyEnv, getClaudeAuthStatus, getLongContext1MEntitlement, isLongContextBetaUnavailableError, normalizeProxyUrl, probeLongContext1MEntitlement, resolveHyphaProxyUrl, setClaudeAuthCustom, setClaudeAuthHyphaProxy, setClaudeAuthLogin, setLongContext1MEntitlement, updateEnvFile };