teleportation-cli 1.0.0 → 1.0.1

package/lib/auth/claude-key-extractor.js

@@ -0,0 +1,196 @@
+/**
+ * Claude Code API Key Extractor
+ *
+ * Extracts the ANTHROPIC_API_KEY from the user's local Claude Code installation.
+ * Tries multiple methods to find the key.
+ */
+
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import fs from 'fs/promises';
+import os from 'os';
+import path from 'path';
+
+const execAsync = promisify(exec);
+
+/**
+ * Try to get API key from macOS keychain
+ */
+async function getFromKeychain() {
+  try {
+    // Try common keychain entries for Claude/Anthropic
+    const services = [
+      'claude.ai',
+      'anthropic.com',
+      'Claude',
+      'Anthropic',
+      'claude-code',
+    ];
+
+    for (const service of services) {
+      try {
+        const { stdout } = await execAsync(`security find-generic-password -s "${service}" -w 2>/dev/null`);
+        if (stdout && stdout.trim().startsWith('sk-ant-')) {
+          return stdout.trim();
+        }
+      } catch {}
+    }
+
+    // Try finding by account name
+    const accounts = ['api-key', 'apikey', 'token'];
+    for (const acct of accounts) {
+      try {
+        const { stdout } = await execAsync(`security find-generic-password -a "${acct}" -w 2>/dev/null`);
+        if (stdout && stdout.trim().startsWith('sk-ant-')) {
+          return stdout.trim();
+        }
+      } catch {}
+    }
+
+    return null;
+  } catch (error) {
+    return null;
+  }
+}
+
+/**
+ * Try to get API key from environment
+ */
+function getFromEnvironment() {
+  return process.env.ANTHROPIC_API_KEY ||
+         process.env.CLAUDE_API_KEY ||
+         process.env.CLAUDE_CODE_API_KEY ||
+         null;
+}
+
+/**
+ * Try to get API key from Claude Code config files
+ */
+async function getFromClaudeConfig() {
+  try {
+    const homeDir = os.homedir();
+    const configPaths = [
+      path.join(homeDir, '.claude', 'config.json'),
+      path.join(homeDir, '.claude', 'settings.json'),
+      path.join(homeDir, '.claude', 'credentials.json'),
+      path.join(homeDir, '.config', 'claude', 'config.json'),
+    ];
+
+    for (const configPath of configPaths) {
+      try {
+        const content = await fs.readFile(configPath, 'utf-8');
+        const config = JSON.parse(content);
+
+        // Check various possible key names
+        const key = config.apiKey ||
+                    config.anthropicApiKey ||
+                    config.ANTHROPIC_API_KEY ||
+                    config.api_key ||
+                    config.token;
+
+        if (key && key.startsWith('sk-ant-')) {
+          return key;
+        }
+      } catch {}
+    }
+
+    return null;
+  } catch (error) {
+    return null;
+  }
+}
+
+/**
+ * Try to get API key from running Claude Code process environment
+ */
+async function getFromRunningProcess() {
+  try {
+    // Get PID of running claude process
+    const { stdout: pids } = await execAsync(`pgrep -f "claude" 2>/dev/null || echo ""`);
+
+    if (!pids.trim()) {
+      return null;
+    }
+
+    // Try to read environment from process
+    for (const pid of pids.trim().split('\n')) {
+      if (!pid) continue;
+
+      try {
+        // On macOS, we can try to read process environment via ps
+        const { stdout } = await execAsync(`ps eww ${pid} 2>/dev/null | grep -o "ANTHROPIC_API_KEY=[^ ]*" | cut -d= -f2`);
+        if (stdout && stdout.trim().startsWith('sk-ant-')) {
+          return stdout.trim();
+        }
+      } catch {}
+    }
+
+    return null;
+  } catch (error) {
+    return null;
+  }
+}
+
+/**
+ * Main function to extract Claude Code API key
+ * Tries multiple methods in order of reliability
+ *
+ * @returns {Promise<string|null>} API key if found, null otherwise
+ */
+export async function extractClaudeApiKey() {
+  console.log('[claude-key-extractor] Attempting to extract API key from local Claude Code installation...');
+
+  // Method 1: Check environment first (fastest)
+  let apiKey = getFromEnvironment();
+  if (apiKey) {
+    console.log('[claude-key-extractor] ✅ Found API key in environment variables');
+    return apiKey;
+  }
+
+  // Method 2: Check Claude Code config files
+  apiKey = await getFromClaudeConfig();
+  if (apiKey) {
+    console.log('[claude-key-extractor] ✅ Found API key in Claude Code config');
+    return apiKey;
+  }
+
+  // Method 3: Check macOS keychain
+  apiKey = await getFromKeychain();
+  if (apiKey) {
+    console.log('[claude-key-extractor] ✅ Found API key in macOS keychain');
+    return apiKey;
+  }
+
+  // Method 4: Try to read from running process
+  apiKey = await getFromRunningProcess();
+  if (apiKey) {
+    console.log('[claude-key-extractor] ✅ Found API key in running Claude Code process');
+    return apiKey;
+  }
+
+  console.log('[claude-key-extractor] ⚠️  Could not find API key');
+  console.log('[claude-key-extractor] Please set ANTHROPIC_API_KEY environment variable');
+  return null;
+}
+
+/**
+ * Get API key with fallback message
+ */
+export async function getClaudeApiKeyOrPrompt() {
+  const apiKey = await extractClaudeApiKey();
+
+  if (!apiKey) {
+    console.log('\n' + '='.repeat(60));
+    console.log('ANTHROPIC_API_KEY not found!');
+    console.log('='.repeat(60));
+    console.log('\nPlease set your API key using one of these methods:\n');
+    console.log('1. Environment variable:');
+    console.log('   export ANTHROPIC_API_KEY="sk-ant-..."');
+    console.log('\n2. Get your key from: https://console.anthropic.com/settings/keys');
+    console.log('\n3. If you\'re logged into Claude Code, try:');
+    console.log('   claude config show  # (if supported)');
+    console.log('='.repeat(60) + '\n');
+  }
+
+  return apiKey;
+}

package/lib/auth/credentials.js

@@ -27,8 +27,13 @@ async function getEncryptionKey(keyPath = DEFAULT_KEY_PATH) {
   // For Windows: use Credential Manager or fallback to file
   
   const platform = process.platform;
-  
-  if (platform === 'darwin') {
+
+  // Only attempt keychain when using the default key path. This allows tests and
+  // advanced callers to provide a custom key path without depending on keychain
+  // availability/behavior.
+  const shouldUseKeychain = keyPath === DEFAULT_KEY_PATH;
+
+  if (shouldUseKeychain && platform === 'darwin') {
     // macOS - try to use keychain
     try {
       const { execSync } = await import('child_process');