@cleocode/adapters 2026.5.74 → 2026.5.75

package/dist/providers/claude-sdk/spawn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../../src/providers/claude-sdk/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAmD3F;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAE/C;;;;;;;;;OASG;IACG,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAIlC;;;;;;;;OAQG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAwGxD;;;;;;;OAOG;IACG,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAU3C;;;;;;;;;OASG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGnD"}
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../../src/providers/claude-sdk/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAS3F;;;;;;;;;;;;;;GAcG;AACH,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAE/C;;;;;;;;;OASG;IACG,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAIlC;;;;;;;;OAQG;IACG,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAwGxD;;;;;;;OAOG;IACG,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAU3C;;;;;;;;;OASG;IACG,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGnD"}

package/dist/providers/shared/credentials.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Anthropic credential resolver for adapter packages (D-ph4-02 · T9357).
+ *
+ * This module is the canonical credential resolver for adapter packages that
+ * cannot import `@cleocode/core` due to the `core → adapters` dependency.
+ * It mirrors the first 3 tiers of `core/llm/credentials.ts resolveCredentials()`
+ * using only Node.js builtins and `@cleocode/contracts` helpers.
+ *
+ * ## Resolution tiers (first non-empty match wins)
+ * 1. `ANTHROPIC_API_KEY` environment variable
+ * 2. `~/.local/share/cleo/anthropic-key` (XDG-aware legacy flat-key file)
+ * 3. `~/.claude/.credentials.json` OAuth bearer token
+ *
+ * Call-sites use the same `resolveCredentials('anthropic').apiKey` pattern
+ * as the full 6-tier resolver in `@cleocode/core`, making future migration
+ * to the canonical resolver transparent.
+ *
+ * @module shared/credentials
+ * @task T9357
+ * @see D-ph4-02
+ */
+/**
+ * Result returned by {@link resolveCredentials}.
+ *
+ * The shape intentionally matches the subset of `CredentialResult` from
+ * `@cleocode/core` that adapter call-sites need, so that if this module is
+ * ever replaced by a direct core import the call-sites require no changes.
+ */
+export interface ResolvedCredential {
+    /** API key or OAuth bearer token, or `null` when no credential was found. */
+    apiKey: string | null;
+}
+/**
+ * Resolve the Anthropic API key using a 3-tier priority chain.
+ *
+ * Drop-in compatible with `@cleocode/core` `resolveCredentials('anthropic')`
+ * for the subset of fields adapters use (`.apiKey`).
+ *
+ * Resolution order (first non-empty match wins):
+ * 1. `ANTHROPIC_API_KEY` environment variable
+ * 2. `~/.local/share/cleo/anthropic-key` (XDG-aware stored key)
+ * 3. `~/.claude/.credentials.json` Claude Code OAuth token
+ *
+ * Never throws — all filesystem errors are caught and treated as "not found".
+ *
+ * @param provider - Currently only `'anthropic'` is supported.
+ * @returns `{ apiKey }` where `apiKey` is `null` when no credential was found.
+ *
+ * @example
+ * ```ts
+ * import { resolveCredentials } from '../../shared/credentials.js';
+ *
+ * const { apiKey } = resolveCredentials('anthropic');
+ * if (!apiKey) throw new Error('No Anthropic credential available');
+ * ```
+ */
+export declare function resolveCredentials(_provider: 'anthropic'): ResolvedCredential;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/providers/shared/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/providers/shared/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAWH;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAMD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,WAAW,GAAG,kBAAkB,CA6B7E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/adapters",
-  "version": "2026.5.74",
+  "version": "2026.5.75",
   "description": "Unified provider adapters for CLEO (Claude Code, OpenCode, Cursor)",
   "type": "module",
   "main": "dist/index.js",
@@ -15,9 +15,9 @@
     "@ai-sdk/anthropic": "^3.0.69",
     "@ai-sdk/openai": "^2.0.53",
     "ai": "^6.0.168",
-    "@cleocode/caamp": "2026.5.74",
-    "@cleocode/contracts": "2026.5.74",
-    "@cleocode/paths": "2026.5.74"
+    "@cleocode/caamp": "2026.5.75",
+    "@cleocode/contracts": "2026.5.75",
+    "@cleocode/paths": "2026.5.75"
   },
   "license": "MIT",
   "engines": {
@@ -30,7 +30,7 @@
   "devDependencies": {
     "@types/node": "^22.19.15",
     "vitest": "^4.1.4",
-    "@cleocode/playbooks": "2026.5.74"
+    "@cleocode/playbooks": "2026.5.75"
   },
   "repository": {
     "type": "git",

package/src/providers/claude-sdk/spawn.ts

@@ -23,57 +23,12 @@
  * @see ADR-052 — SDK consolidation decision
  */
 
-import { existsSync, readFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
 import type { AdapterSpawnProvider, SpawnContext, SpawnResult } from '@cleocode/contracts';
-import { getErrorMessage, parseClaudeCodeCredentials } from '@cleocode/contracts';
+import { getErrorMessage } from '@cleocode/contracts';
+import { resolveCredentials } from '../shared/credentials.js';
 import { SessionStore } from './session-store.js';
 import { resolveTools } from './tool-bridge.js';
 
-// ---------------------------------------------------------------------------
-// 3-tier Anthropic key resolver
-// ---------------------------------------------------------------------------
-
-/**
- * Resolve the Anthropic API key using a 3-tier priority chain:
- * 1. `ANTHROPIC_API_KEY` environment variable
- * 2. `~/.local/share/cleo/anthropic-key` (user-stored via cleo config)
- * 3. `~/.claude/.credentials.json` → claudeAiOauth.accessToken (Claude Code OAuth)
- *
- * @returns The key/token string, or null if unavailable.
- */
-function resolveAnthropicApiKey(): string | null {
-  // 1. Explicit env var
-  const envKey = process.env['ANTHROPIC_API_KEY'];
-  if (envKey?.trim()) return envKey;
-
-  // 2. CLEO global stored key
-  try {
-    const xdg = process.env['XDG_DATA_HOME'] ?? join(homedir(), '.local', 'share');
-    const keyFile = join(xdg, 'cleo', 'anthropic-key');
-    if (existsSync(keyFile)) {
-      const stored = readFileSync(keyFile, 'utf-8').trim();
-      if (stored) return stored;
-    }
-  } catch {
-    // Not available — continue
-  }
-
-  // 3. Claude Code OAuth token — parsed by the shared contracts helper
-  try {
-    const credPath = join(homedir(), '.claude', '.credentials.json');
-    if (!existsSync(credPath)) return null;
-    const raw = readFileSync(credPath, 'utf-8');
-    const cred = parseClaudeCodeCredentials(raw);
-    return cred?.accessToken ?? null;
-  } catch {
-    // Credentials file missing or unreadable — not an error
-  }
-
-  return null;
-}
-
 /** Model used when no model is specified in spawn options. */
 const DEFAULT_MODEL = 'claude-sonnet-4-5';
 
@@ -107,7 +62,7 @@ export class ClaudeSDKSpawnProvider implements AdapterSpawnProvider {
    * @returns `true` when any Anthropic credential is available
    */
   async canSpawn(): Promise<boolean> {
-    return !!resolveAnthropicApiKey();
+    return !!resolveCredentials('anthropic').apiKey;
   }
 
   /**
@@ -153,7 +108,7 @@ export class ClaudeSDKSpawnProvider implements AdapterSpawnProvider {
       const { createAnthropic } = await import('@ai-sdk/anthropic');
       const { generateText } = await import('ai');
 
-      const apiKey = resolveAnthropicApiKey();
+      const apiKey = resolveCredentials('anthropic').apiKey;
       if (!apiKey) {
         this.sessions.remove(instanceId);
         return {

package/src/providers/shared/credentials.ts

@@ -0,0 +1,101 @@
+/**
+ * Anthropic credential resolver for adapter packages (D-ph4-02 · T9357).
+ *
+ * This module is the canonical credential resolver for adapter packages that
+ * cannot import `@cleocode/core` due to the `core → adapters` dependency.
+ * It mirrors the first 3 tiers of `core/llm/credentials.ts resolveCredentials()`
+ * using only Node.js builtins and `@cleocode/contracts` helpers.
+ *
+ * ## Resolution tiers (first non-empty match wins)
+ * 1. `ANTHROPIC_API_KEY` environment variable
+ * 2. `~/.local/share/cleo/anthropic-key` (XDG-aware legacy flat-key file)
+ * 3. `~/.claude/.credentials.json` OAuth bearer token
+ *
+ * Call-sites use the same `resolveCredentials('anthropic').apiKey` pattern
+ * as the full 6-tier resolver in `@cleocode/core`, making future migration
+ * to the canonical resolver transparent.
+ *
+ * @module shared/credentials
+ * @task T9357
+ * @see D-ph4-02
+ */
+
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { parseClaudeCodeCredentials } from '@cleocode/contracts';
+
+// ---------------------------------------------------------------------------
+// Types
+// ---------------------------------------------------------------------------
+
+/**
+ * Result returned by {@link resolveCredentials}.
+ *
+ * The shape intentionally matches the subset of `CredentialResult` from
+ * `@cleocode/core` that adapter call-sites need, so that if this module is
+ * ever replaced by a direct core import the call-sites require no changes.
+ */
+export interface ResolvedCredential {
+  /** API key or OAuth bearer token, or `null` when no credential was found. */
+  apiKey: string | null;
+}
+
+// ---------------------------------------------------------------------------
+// Resolver
+// ---------------------------------------------------------------------------
+
+/**
+ * Resolve the Anthropic API key using a 3-tier priority chain.
+ *
+ * Drop-in compatible with `@cleocode/core` `resolveCredentials('anthropic')`
+ * for the subset of fields adapters use (`.apiKey`).
+ *
+ * Resolution order (first non-empty match wins):
+ * 1. `ANTHROPIC_API_KEY` environment variable
+ * 2. `~/.local/share/cleo/anthropic-key` (XDG-aware stored key)
+ * 3. `~/.claude/.credentials.json` Claude Code OAuth token
+ *
+ * Never throws — all filesystem errors are caught and treated as "not found".
+ *
+ * @param provider - Currently only `'anthropic'` is supported.
+ * @returns `{ apiKey }` where `apiKey` is `null` when no credential was found.
+ *
+ * @example
+ * ```ts
+ * import { resolveCredentials } from '../../shared/credentials.js';
+ *
+ * const { apiKey } = resolveCredentials('anthropic');
+ * if (!apiKey) throw new Error('No Anthropic credential available');
+ * ```
+ */
+export function resolveCredentials(_provider: 'anthropic'): ResolvedCredential {
+  // Tier 1 — explicit env var
+  const envKey = process.env['ANTHROPIC_API_KEY'];
+  if (envKey?.trim()) return { apiKey: envKey.trim() };
+
+  // Tier 2 — XDG-aware legacy flat-key file (~/.local/share/cleo/anthropic-key)
+  try {
+    const xdg = process.env['XDG_DATA_HOME'] ?? join(homedir(), '.local', 'share');
+    const keyFile = join(xdg, 'cleo', 'anthropic-key');
+    if (existsSync(keyFile)) {
+      const stored = readFileSync(keyFile, 'utf-8').trim();
+      if (stored) return { apiKey: stored };
+    }
+  } catch {
+    // Not available — continue to next tier
+  }
+
+  // Tier 3 — Claude Code OAuth token (~/.claude/.credentials.json)
+  try {
+    const credPath = join(homedir(), '.claude', '.credentials.json');
+    if (!existsSync(credPath)) return { apiKey: null };
+    const raw = readFileSync(credPath, 'utf-8');
+    const cred = parseClaudeCodeCredentials(raw);
+    return { apiKey: cred?.accessToken ?? null };
+  } catch {
+    // Credentials file missing or unreadable — not an error
+  }
+
+  return { apiKey: null };
+}