Function mapPrincipalSource

src/auth/runtime/AuthRuntime.ts:122–185

(params: {
  apiKeySource: ReturnType<typeof getAnthropicApiKeyWithSource>['source']
  authTokenSource: ReturnType<typeof getAuthTokenSource>['source']
  hasStoredManagedPrincipal: boolean
  using3P: boolean
})

}

function mapPrincipalSource(params: {
  apiKeySource: ReturnType<typeof getAnthropicApiKeyWithSource>['source']
  authTokenSource: ReturnType<typeof getAuthTokenSource>['source']
  hasStoredManagedPrincipal: boolean
  using3P: boolean
}): PrincipalSource {
  const { apiKeySource, authTokenSource, hasStoredManagedPrincipal, using3P } = params

  if (using3P) {
    return 'third_party_provider'
  }

  if (
    process.env.NCODE_REMOTE_RUNTIME_TOKEN_TRANSPORT ===
      'static_api_key_env' &&
    isDirectApiKeyEnvVarName(apiKeySource)
  ) {
    return 'direct_api_key_env'
  }

  if (
    process.env.NCODE_REMOTE_RUNTIME_PROVIDER_MODE === 'byok' &&
    apiKeySource === 'ANTHROPIC_API_KEY'
  ) {
    return 'direct_api_key_env'
  }
  if (
    process.env.NCODE_REMOTE_RUNTIME_PROVIDER_MODE === 'byok_openai' &&
    apiKeySource === 'OPENAI_API_KEY'
  ) {
    return 'direct_api_key_env'
  }

  if (authTokenSource === 'ANTHROPIC_AUTH_TOKEN') {
    return 'external_bearer_compat'
  }
  if (
    authTokenSource === 'NCODE_OAUTH_TOKEN' ||
    authTokenSource === 'CLAUDE_CODE_OAUTH_TOKEN'
  ) {
    return 'service_oauth_env'
  }
  if (
    authTokenSource === 'NCODE_OAUTH_TOKEN_FILE_DESCRIPTOR' ||
    authTokenSource === 'CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR' ||
    authTokenSource === 'CCR_OAUTH_TOKEN_FILE'
  ) {
    return 'service_oauth_fd'
  }
  if (isDirectApiKeyEnvVarName(apiKeySource)) {
    return 'direct_api_key_env'
  }
  if (hasStoredManagedPrincipal || authTokenSource === 'noumena.com') {
    return 'managed_oauth'
  }
  if (apiKeySource === '/login managed key') {
    return 'console_api_key'
  }