jleibl/simple-ai-provider
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(claude-code): document oauthToken config and the macOS SDK bug #13

Closed
jleibl wants to merge 1 commits from fix/claude-code-oauth-token into main
pull from: fix/claude-code-oauth-token
merge into: jleibl:main
Conversation 0 Commits 1 Files Changed 3 +147 -25
jleibl commented 2026-05-21 13:11:44 +00:00
Owner
Copy Link

After investigating, the @anthropic-ai/claude-agent-sdk has a macOS-
specific upstream bug that breaks subscription auth: the SDK isolates
CLAUDE_CONFIG_DIR per invocation and tries to copy
~/.claude/.credentials.json, which doesn't exist on macOS (creds live
in the Keychain). The spawned CLI then misclassifies the OAuth token
as an API key and bills against API credits.

Changes:

  • ClaudeCodeConfig.oauthToken: new optional config field that exports
    CLAUDE_CODE_OAUTH_TOKEN before invoking the SDK. Wired up and ready
    for when the upstream bug is fixed; currently affected by it on macOS.
  • README, JSDoc: clearly document the limitation. API-key mode works
    reliably; subscription mode is broken on macOS pending upstream fix.
  • billing_error message: explain the bug and recommend ClaudeProvider +
    ANTHROPIC_API_KEY as the workaround so users can self-diagnose.
  • examples/claude-code.ts: read CLAUDE_CODE_OAUTH_TOKEN from env so the
    smoke test attempts the subscription path when configured.

No code changes silently in flight — when the SDK fixes the Keychain
handling, subscribers will Just Work without any code changes here.

After investigating, the @anthropic-ai/claude-agent-sdk has a macOS- specific upstream bug that breaks subscription auth: the SDK isolates CLAUDE_CONFIG_DIR per invocation and tries to copy ~/.claude/.credentials.json, which doesn't exist on macOS (creds live in the Keychain). The spawned CLI then misclassifies the OAuth token as an API key and bills against API credits. Changes: - ClaudeCodeConfig.oauthToken: new optional config field that exports CLAUDE_CODE_OAUTH_TOKEN before invoking the SDK. Wired up and ready for when the upstream bug is fixed; currently affected by it on macOS. - README, JSDoc: clearly document the limitation. API-key mode works reliably; subscription mode is broken on macOS pending upstream fix. - billing_error message: explain the bug and recommend ClaudeProvider + ANTHROPIC_API_KEY as the workaround so users can self-diagnose. - examples/claude-code.ts: read CLAUDE_CODE_OAUTH_TOKEN from env so the smoke test attempts the subscription path when configured. No code changes silently in flight — when the SDK fixes the Keychain handling, subscribers will Just Work without any code changes here.
jleibl added 1 commit 2026-05-21 13:11:45 +00:00
docs(claude-code): document oauthToken config and the macOS SDK bug 34b2f7314e 
After investigating, the @anthropic-ai/claude-agent-sdk has a macOS-
specific upstream bug that breaks subscription auth: the SDK isolates
CLAUDE_CONFIG_DIR per invocation and tries to copy
~/.claude/.credentials.json, which doesn't exist on macOS (creds live
in the Keychain). The spawned CLI then misclassifies the OAuth token
as an API key and bills against API credits.

Changes:

- ClaudeCodeConfig.oauthToken: new optional config field that exports
  CLAUDE_CODE_OAUTH_TOKEN before invoking the SDK. Wired up and ready
  for when the upstream bug is fixed; currently affected by it on macOS.
- README, JSDoc: clearly document the limitation. API-key mode works
  reliably; subscription mode is broken on macOS pending upstream fix.
- billing_error message: explain the bug and recommend ClaudeProvider +
  ANTHROPIC_API_KEY as the workaround so users can self-diagnose.
- examples/claude-code.ts: read CLAUDE_CODE_OAUTH_TOKEN from env so the
  smoke test attempts the subscription path when configured.

No code changes silently in flight — when the SDK fixes the Keychain
handling, subscribers will Just Work without any code changes here.
jleibl closed this pull request 2026-05-21 20:03:32 +00:00
jleibl deleted branch fix/claude-code-oauth-token 2026-05-21 20:03:32 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jleibl
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: jleibl/simple-ai-provider#13
Delete Branch "fix/claude-code-oauth-token"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?