thevoidforge 21.0.14 → 21.0.15

package/dist/wizard/api/credentials.js

@@ -1,6 +1,6 @@
 import { request as httpsRequest } from 'node:https';
 import { addRoute } from '../router.js';
-import { vaultSet, vaultExists, vaultUnlock, vaultKeys, vaultPath, vaultLock } from '../lib/vault.js';
+import { vaultSet, vaultGet, vaultExists, vaultUnlock, vaultKeys, vaultPath, vaultLock } from '../lib/vault.js';
 import { parseJsonBody } from '../lib/body-parser.js';
 import { clearModelCache } from '../lib/anthropic.js';
 import { sendJson } from '../lib/http-helpers.js';
@@ -183,11 +183,16 @@ addRoute('POST', '/api/credentials/unlock', async (req, res) => {
     clearVaultFailures(ip);
     sessionPassword = body.password;
     touchVaultAccess(); // SEC-R2-004: Start auto-lock timer
-    // Check what's already stored
+    // Check what's already stored + load API key into process.env for PTY sessions
     let hasAnthropic = false;
     try {
         const keys = await vaultKeys(sessionPassword);
         hasAnthropic = keys.includes('anthropic-api-key');
+        if (hasAnthropic) {
+            const storedKey = await vaultGet(sessionPassword, 'anthropic-api-key');
+            if (storedKey)
+                process.env['ANTHROPIC_API_KEY'] = storedKey;
+        }
     }
     catch {
         // Fresh vault
@@ -220,6 +225,8 @@ addRoute('POST', '/api/credentials/anthropic', async (req, res) => {
         return;
     }
     await vaultSet(sessionPassword, 'anthropic-api-key', apiKey);
+    // Make the key available to PTY sessions spawned by this server process
+    process.env['ANTHROPIC_API_KEY'] = apiKey;
     clearModelCache();
     sendJson(res, 200, { stored: true });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thevoidforge",
-  "version": "21.0.14",
+  "version": "21.0.15",
   "description": "From nothing, everything. A methodology framework for building with Claude Code.",
   "type": "module",
   "engines": {