v0.4.0
What's new
Changed
- Subscription-first auth — subprocess no longer forwards
ANTHROPIC_API_KEYby default. SetCLAUDE_BRIDGE_USE_API_KEY=1to opt in to API key auth. Prevents accidental API credit consumption when subscription auth is available. - Secret redaction in error paths —
checkErrorPatternsnow usesredactSecrets()before throwing, preventing secret leakage in auth/quota/connection errors
Added
CLAUDE_BRIDGE_USE_API_KEYenv var for explicit API key auth opt-in- Extracted
DESIGN.mdandSECURITY.mdfrom README for better navigation - 190 tests (up from 186)
Full Changelog: v0.3.1...v0.4.0