ccqa 1.29.0 → 1.30.0

package/dist/bin/ccqa.mjs

@@ -871,10 +871,12 @@ function cloudProviderEnabled() {
 /**
 * Probe whether the host has any credential the Anthropic SDK can pick up:
 *   1. ANTHROPIC_API_KEY env var (CI / scripted use)
-*   2. CLAUDE_CODE_USE_BEDROCK / CLAUDE_CODE_USE_VERTEX (cloud-provider
+*   2. CLAUDE_CODE_OAUTH_TOKEN env var (a long-lived subscription token from
+*      `claude setup-token`, the headless-CI counterpart of a login)
+*   3. CLAUDE_CODE_USE_BEDROCK / CLAUDE_CODE_USE_VERTEX (cloud-provider
 *      endpoints authenticated by the cloud SDK's credential chain)
-*   3. ~/.claude/.credentials.json (Claude Code login, file-based platforms)
-*   4. macOS Keychain item "Claude Code-credentials" (Claude Code login on
+*   4. ~/.claude/.credentials.json (Claude Code login, file-based platforms)
+*   5. macOS Keychain item "Claude Code-credentials" (Claude Code login on
 *      darwin stores the OAuth credentials in the Keychain, not on disk)
 *
 * Claude-driven hooks are opt-in, so the caller only consults this after the
@@ -882,14 +884,16 @@ function cloudProviderEnabled() {
 * that surfaces as "analysis skipped".
 */
 function driftAuthAvailable() {
-	const key = process.env["ANTHROPIC_API_KEY"];
-	if (typeof key === "string" && key.length > 0) return { ok: true };
+	for (const key of ["ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"]) {
+		const value = process.env[key];
+		if (typeof value === "string" && value.length > 0) return { ok: true };
+	}
 	if (cloudProviderEnabled()) return { ok: true };
 	if (existsSync(join(homedir(), ".claude", ".credentials.json"))) return { ok: true };
 	if (process.platform === "darwin" && keychainHasClaudeCredentials()) return { ok: true };
 	return {
 		ok: false,
-		reason: "no ANTHROPIC_API_KEY / Bedrock or Vertex env / claude login"
+		reason: "no ANTHROPIC_API_KEY / CLAUDE_CODE_OAUTH_TOKEN / Bedrock or Vertex env / claude login"
 	};
 }
 /**
@@ -1509,18 +1513,27 @@ function resolveModel(explicit) {
 * - `ANTHROPIC_AUTH_TOKEN`    — sent as `Authorization: Bearer <token>`.
 * - `ANTHROPIC_API_KEY`       — API key, when used instead of a token.
 * - `ANTHROPIC_CUSTOM_HEADERS` — extra request headers.
+* - `CLAUDE_CODE_OAUTH_TOKEN` — long-lived subscription token from
+*   `claude setup-token`, the headless-CI counterpart of a login.
 */
 const ENDPOINT_ENV_KEYS = [
 	"ANTHROPIC_BASE_URL",
 	"ANTHROPIC_AUTH_TOKEN",
 	"ANTHROPIC_API_KEY",
-	"ANTHROPIC_CUSTOM_HEADERS"
+	"ANTHROPIC_CUSTOM_HEADERS",
+	"CLAUDE_CODE_OAUTH_TOKEN"
 ];
 /**
 * Collects the endpoint/auth variables set in the current process environment
 * so they can be forwarded, verbatim, to every Claude Code invocation. Returns
 * only the keys that are actually set (non-empty), so unset variables never
 * override the SDK's own defaults.
+*
+* When both credentials are present the OAuth token wins and the API key is
+* not forwarded. Left to the CLI the API key would win, which makes "switch a
+* CI job to the subscription token" require unwiring the key everywhere; with
+* the precedence here, adding the one variable is the whole switch, and
+* removing it is the whole rollback.
 */
 function resolveEndpointEnv() {
 	const endpointEnv = {};
@@ -1528,6 +1541,7 @@ function resolveEndpointEnv() {
 		const value = process.env[key];
 		if (value && value.length > 0) endpointEnv[key] = value;
 	}
+	if (endpointEnv["CLAUDE_CODE_OAUTH_TOKEN"]) delete endpointEnv["ANTHROPIC_API_KEY"];
 	return endpointEnv;
 }
 /**

package/dist/hub-client/index.d.mts

@@ -35,9 +35,9 @@ declare const RunSchema: z.ZodObject<{
     running: "running";
   }>;
   kind: z.ZodDefault<z.ZodEnum<{
-    record: "record";
     run: "run";
     drift: "drift";
+    record: "record";
   }>>;
   drift: z.ZodDefault<z.ZodNullable<z.ZodObject<{
     specs: z.ZodNumber;
@@ -621,9 +621,9 @@ type ReportSpecResult = z.infer<typeof ReportSpecResultSchema>;
 declare const RunReportDataSchema: z.ZodObject<{
   schemaVersion: z.ZodLiteral<1>;
   kind: z.ZodDefault<z.ZodEnum<{
-    record: "record";
     run: "run";
     drift: "drift";
+    record: "record";
   }>>;
   createdAt: z.ZodString;
   runId: z.ZodNullable<z.ZodString>;

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccqa",
-  "version": "1.29.0",
+  "version": "1.30.0",
   "type": "module",
   "description": "Browser test recorder powered by Claude Code and agent-browser",
   "repository": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccqa",
-  "version": "1.29.0",
+  "version": "1.30.0",
   "type": "module",
   "description": "Browser test recorder powered by Claude Code and agent-browser",
   "repository": {