alexion
6081e3e325
Imported as a linear vendor commit so forge rebases do not replay the upstream root tree. git-subtree-dir: third_party/pi git-subtree-split: 71023aec1546d6d677a65669c5665c0927ce0dd0
91 lines
3.0 KiB
TypeScript
91 lines
3.0 KiB
TypeScript
import { anthropicMessagesApi } from "../api/anthropic-messages.lazy.ts";
|
|
import { lazyOAuth } from "../auth/helpers.ts";
|
|
import { loadAnthropicOAuth } from "../auth/oauth/load.ts";
|
|
import type { ApiKeyAuth } from "../auth/types.ts";
|
|
import {
|
|
ANTHROPIC_API_KEY_ENV,
|
|
ANTHROPIC_AUTH_TOKEN_ENV,
|
|
ANTHROPIC_FEDERATION_RULE_ID_ENV,
|
|
ANTHROPIC_IDENTITY_TOKEN_FILE_ENV,
|
|
ANTHROPIC_OAUTH_TOKEN_ENV,
|
|
ANTHROPIC_ORGANIZATION_ID_ENV,
|
|
ANTHROPIC_SERVICE_ACCOUNT_ID_ENV,
|
|
ANTHROPIC_WORKSPACE_ID_ENV,
|
|
} from "../env-api-keys.ts";
|
|
import { createProvider, type Provider } from "../models.ts";
|
|
import type { ProviderEnv } from "../types.ts";
|
|
import { ANTHROPIC_MODELS } from "./anthropic.models.ts";
|
|
|
|
function anthropicApiKeyAuth(): ApiKeyAuth {
|
|
return {
|
|
name: "Anthropic API key",
|
|
login: async (interaction) => {
|
|
interaction.signal.throwIfAborted();
|
|
const key = await interaction.prompt({ type: "secret", message: "Enter Anthropic API key" });
|
|
interaction.signal.throwIfAborted();
|
|
return { type: "api_key", key };
|
|
},
|
|
resolve: async ({ ctx, credential, signal }) => {
|
|
signal.throwIfAborted();
|
|
if (credential?.key) {
|
|
return { auth: { apiKey: credential.key }, env: credential.env, source: "stored credential" };
|
|
}
|
|
|
|
const authToken = await ctx.env(ANTHROPIC_AUTH_TOKEN_ENV);
|
|
signal.throwIfAborted();
|
|
if (authToken) {
|
|
return {
|
|
auth: { headers: { Authorization: `Bearer ${authToken}` } },
|
|
source: ANTHROPIC_AUTH_TOKEN_ENV,
|
|
};
|
|
}
|
|
|
|
for (const envVar of [ANTHROPIC_OAUTH_TOKEN_ENV, ANTHROPIC_API_KEY_ENV]) {
|
|
const apiKey = await ctx.env(envVar);
|
|
signal.throwIfAborted();
|
|
if (apiKey) return { auth: { apiKey }, source: envVar };
|
|
}
|
|
|
|
// Workload identity federation: the Anthropic SDK exchanges the identity
|
|
// token for a short-lived access token and refreshes it itself. Last in
|
|
// line so keys and ANTHROPIC_AUTH_TOKEN keep winning, as in the SDK. The
|
|
// ids are provider config rather than auth, so they travel in `env`.
|
|
const federation: ProviderEnv = {};
|
|
for (const envVar of [
|
|
ANTHROPIC_FEDERATION_RULE_ID_ENV,
|
|
ANTHROPIC_ORGANIZATION_ID_ENV,
|
|
ANTHROPIC_IDENTITY_TOKEN_FILE_ENV,
|
|
]) {
|
|
const value = await ctx.env(envVar);
|
|
signal.throwIfAborted();
|
|
if (!value) return undefined;
|
|
federation[envVar] = value;
|
|
}
|
|
for (const envVar of [ANTHROPIC_SERVICE_ACCOUNT_ID_ENV, ANTHROPIC_WORKSPACE_ID_ENV]) {
|
|
const value = await ctx.env(envVar);
|
|
signal.throwIfAborted();
|
|
if (value) federation[envVar] = value;
|
|
}
|
|
return { auth: {}, env: federation, source: "workload identity federation" };
|
|
},
|
|
};
|
|
}
|
|
|
|
export function anthropicProvider(): Provider<"anthropic-messages"> {
|
|
return createProvider({
|
|
id: "anthropic",
|
|
name: "Anthropic",
|
|
baseUrl: "https://api.anthropic.com",
|
|
auth: {
|
|
apiKey: anthropicApiKeyAuth(),
|
|
oauth: lazyOAuth({
|
|
name: "Anthropic (Claude Pro/Max)",
|
|
isSubscription: true,
|
|
load: loadAnthropicOAuth,
|
|
}),
|
|
},
|
|
models: Object.values(ANTHROPIC_MODELS),
|
|
api: anthropicMessagesApi(),
|
|
});
|
|
}
|