@rulvar/anthropic 1.15.0 → 1.16.1

package/dist/index.d.ts

@@ -91,7 +91,16 @@ interface AnthropicAdapterOptions {
 * autoretries are disabled (max_retries 0): the core owns retries and
 * wall-clock. With no auth option at all, the underlying SDK resolves
 * credentials itself: `ANTHROPIC_API_KEY`, then bearer
-* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain.
+* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain. When
+* `sdkOptions` carries structured auth (`credentials`, `config`, or
+* `profile`) and no `apiKey`/`authToken` is set to a string anywhere,
+* ambient environment credentials are suppressed (explicit
+* `apiKey: null, authToken: null` are passed to the SDK), so the
+* configured provider is the one that authenticates; the SDK itself
+* would otherwise let an environment `ANTHROPIC_API_KEY` or
+* `ANTHROPIC_AUTH_TOKEN` win over the provider. An explicit
+* `apiKey: null` or `authToken: null` counts as absence for this rule,
+* never as a chosen credential.
 */
 declare function anthropic(options?: AnthropicAdapterOptions): ProviderAdapter;
 //#endregion

package/dist/index.js

@@ -675,8 +675,13 @@ function resolveAnthropicClient(options) {
 	const sdkOptions = options.sdkOptions ?? {};
 	if (options.apiKey !== void 0 && sdkOptions.apiKey !== void 0) throw new ConfigError("anthropic(): 'apiKey' and 'sdkOptions.apiKey' are both set; pick one place");
 	if (options.baseURL !== void 0 && sdkOptions.baseURL !== void 0) throw new ConfigError("anthropic(): 'baseURL' and 'sdkOptions.baseURL' are both set; pick one place");
+	const suppressAmbientEnv = (sdkOptions.credentials != null || sdkOptions.config != null || sdkOptions.profile != null) && options.apiKey == null && sdkOptions.apiKey == null && sdkOptions.authToken == null;
 	return new Anthropic({
 		...sdkOptions,
+		...suppressAmbientEnv ? {
+			apiKey: null,
+			authToken: null
+		} : {},
 		...options.apiKey === void 0 ? {} : { apiKey: options.apiKey },
 		...options.baseURL === void 0 ? {} : { baseURL: options.baseURL },
 		maxRetries: 0
@@ -687,7 +692,16 @@ function resolveAnthropicClient(options) {
 * autoretries are disabled (max_retries 0): the core owns retries and
 * wall-clock. With no auth option at all, the underlying SDK resolves
 * credentials itself: `ANTHROPIC_API_KEY`, then bearer
-* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain.
+* `ANTHROPIC_AUTH_TOKEN`, then its config-file credential chain. When
+* `sdkOptions` carries structured auth (`credentials`, `config`, or
+* `profile`) and no `apiKey`/`authToken` is set to a string anywhere,
+* ambient environment credentials are suppressed (explicit
+* `apiKey: null, authToken: null` are passed to the SDK), so the
+* configured provider is the one that authenticates; the SDK itself
+* would otherwise let an environment `ANTHROPIC_API_KEY` or
+* `ANTHROPIC_AUTH_TOKEN` win over the provider. An explicit
+* `apiKey: null` or `authToken: null` counts as absence for this rule,
+* never as a chosen credential.
 */
 function anthropic(options = {}) {
 	const client = resolveAnthropicClient(options);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/anthropic",
-  "version": "1.15.0",
+  "version": "1.16.1",
   "description": "Rulvar first-class provider adapter over @anthropic-ai/sdk.",
   "type": "module",
   "license": "Apache-2.0",
@@ -23,13 +23,13 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.110.0",
-    "@rulvar/core": "1.15.0"
+    "@rulvar/core": "1.16.1"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",
     "tsdown": "^0.22.3",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.15.0"
+    "@rulvar/testing": "1.16.1"
   },
   "repository": {
     "type": "git",