@rulvar/anthropic 1.15.0 → 1.16.0

package/dist/index.d.ts

@@ -91,7 +91,13 @@ interface AnthropicAdapterOptions {
 * autoretries are disabled (max_retries 0): the core owns retries and
 * wall-clock. With no auth option at all, the underlying SDK resolves
 * credentials itself: `ANTHROPIC_API_KEY`, then bearer
-* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain.
+* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain. When
+* `sdkOptions` carries structured auth (`credentials`, `config`, or
+* `profile`) and no `apiKey`/`authToken` is set anywhere, ambient
+* environment credentials are suppressed (explicit `apiKey: null,
+* authToken: null` are passed to the SDK), so the configured provider
+* is the one that authenticates; the SDK itself would otherwise let an
+* environment `ANTHROPIC_API_KEY` win over the provider.
 */
 declare function anthropic(options?: AnthropicAdapterOptions): ProviderAdapter;
 //#endregion

package/dist/index.js

@@ -675,8 +675,13 @@ function resolveAnthropicClient(options) {
 	const sdkOptions = options.sdkOptions ?? {};
 	if (options.apiKey !== void 0 && sdkOptions.apiKey !== void 0) throw new ConfigError("anthropic(): 'apiKey' and 'sdkOptions.apiKey' are both set; pick one place");
 	if (options.baseURL !== void 0 && sdkOptions.baseURL !== void 0) throw new ConfigError("anthropic(): 'baseURL' and 'sdkOptions.baseURL' are both set; pick one place");
+	const suppressAmbientEnv = (sdkOptions.credentials != null || sdkOptions.config != null || sdkOptions.profile != null) && options.apiKey === void 0 && sdkOptions.apiKey === void 0 && sdkOptions.authToken === void 0;
 	return new Anthropic({
 		...sdkOptions,
+		...suppressAmbientEnv ? {
+			apiKey: null,
+			authToken: null
+		} : {},
 		...options.apiKey === void 0 ? {} : { apiKey: options.apiKey },
 		...options.baseURL === void 0 ? {} : { baseURL: options.baseURL },
 		maxRetries: 0
@@ -687,7 +692,13 @@ function resolveAnthropicClient(options) {
 * autoretries are disabled (max_retries 0): the core owns retries and
 * wall-clock. With no auth option at all, the underlying SDK resolves
 * credentials itself: `ANTHROPIC_API_KEY`, then bearer
-* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain.
+* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain. When
+* `sdkOptions` carries structured auth (`credentials`, `config`, or
+* `profile`) and no `apiKey`/`authToken` is set anywhere, ambient
+* environment credentials are suppressed (explicit `apiKey: null,
+* authToken: null` are passed to the SDK), so the configured provider
+* is the one that authenticates; the SDK itself would otherwise let an
+* environment `ANTHROPIC_API_KEY` win over the provider.
 */
 function anthropic(options = {}) {
 	const client = resolveAnthropicClient(options);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/anthropic",
-  "version": "1.15.0",
+  "version": "1.16.0",
   "description": "Rulvar first-class provider adapter over @anthropic-ai/sdk.",
   "type": "module",
   "license": "Apache-2.0",
@@ -23,13 +23,13 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.110.0",
-    "@rulvar/core": "1.15.0"
+    "@rulvar/core": "1.16.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",
     "tsdown": "^0.22.3",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.15.0"
+    "@rulvar/testing": "1.16.0"
   },
   "repository": {
     "type": "git",