@anyforge/control 0.2.0 → 0.2.1

package/README.md

@@ -32,6 +32,10 @@ Pick whichever suits the moment — the choices aren't mutually exclusive over t
 
 > The `.env` written in per-repo mode contains a live `ANYFORGE_API_KEY`. The CLI warns if your repo's `.gitignore` doesn't already exclude `.env`. **Add it before committing.**
 
+### Why `ANTHROPIC_AUTH_TOKEN`, not `ANTHROPIC_API_KEY`?
+
+Claude Code recognises both, but they behave differently. `ANTHROPIC_API_KEY` is sent as `X-Api-Key` and — when an OAuth Console login is also present — surfaces an "Auth conflict: Using ANTHROPIC_API_KEY instead of Anthropic Console key" warning, and can cascade into a "selected model may not exist" error. `ANTHROPIC_AUTH_TOKEN` is sent as `Authorization: Bearer …`, is documented for "routing through an LLM gateway or proxy", out-ranks the OAuth login cleanly, and matches the bearer-token shape AnyForge expects. We patch the token form, and on every install we explicitly delete any stale `ANTHROPIC_API_KEY` left behind by older versions.
+
 ## Commands
 
 | | |

package/dist/lib/configPatch.js

@@ -65,7 +65,12 @@ async function patchClaudeCode(opts) {
     }
     const env = (json.env ?? {});
     env.ANTHROPIC_BASE_URL = `${opts.endpoint}/v1/anthropic`;
-    env.ANTHROPIC_API_KEY = opts.apiKey;
+    env.ANTHROPIC_AUTH_TOKEN = opts.apiKey;
+    // Strip stale ANTHROPIC_API_KEY from prior installs — keeping
+    // both set re-triggers the auth-conflict warning even though
+    // ANTHROPIC_AUTH_TOKEN is what we actually want Claude Code
+    // to use.
+    delete env.ANTHROPIC_API_KEY;
     json.env = env;
     await fs.writeFile(path, JSON.stringify(json, null, 2) + '\n');
     // eslint-disable-next-line no-console
@@ -93,7 +98,7 @@ async function patchRepoEnv(opts) {
         SENTINEL_BEGIN,
         `ANYFORGE_API_KEY=${opts.apiKey}`,
         `ANTHROPIC_BASE_URL=${opts.endpoint}/v1/anthropic`,
-        `ANTHROPIC_API_KEY=${opts.apiKey}`,
+        `ANTHROPIC_AUTH_TOKEN=${opts.apiKey}`,
         `OPENAI_BASE_URL=${opts.endpoint}/v1/openai`,
         `OPENAI_API_KEY=${opts.apiKey}`,
         SENTINEL_END,
@@ -177,9 +182,10 @@ async function ensureShellRcExports(opts) {
         SENTINEL_BEGIN,
         `export ANYFORGE_API_KEY="${opts.apiKey}"`,
         `export ANTHROPIC_BASE_URL="${opts.endpoint}/v1/anthropic"`,
-        `export ANTHROPIC_API_KEY="${opts.apiKey}"`,
+        `export ANTHROPIC_AUTH_TOKEN="${opts.apiKey}"`,
         `export OPENAI_BASE_URL="${opts.endpoint}/v1/openai"`,
         `export OPENAI_API_KEY="${opts.apiKey}"`,
+        `unset ANTHROPIC_API_KEY 2>/dev/null || true`,
         SENTINEL_END,
         '',
     ].join('\n');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anyforge/control",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "AnyForge Control CLI — governed LLM proxy for Claude Code, Cursor, Cline, and any agent that talks to OpenAI- or Anthropic-shape APIs.",
   "license": "Apache-2.0",
   "homepage": "https://anyforge.ai",