The SDK now reports where an API key really came from, like the env var or an apiKeyHelper.
What's wrong with this entry?
The credential-source values in the SDK schema now lead with what current CLIs really emit: ANTHROPIC_API_KEY, apiKeyHelper, /login managed key and none. The previous set (user, project, org, temporary, oauth) remains only as documented legacy so existing types keep compiling.
'user' | 'project' | 'org' | 'temporary' | 'oauth' are legacy members that current CLIs never emit
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.224
Artifact tool now explains exactly which credential is blocking it
Both mention helper
-
v2.1.227
apiKeyHelper output is validated before it is sent
Both mention helper
-
v2.1.235
Wider environment scrubbing before a policy helper is spawned
Both mention helper