claw-code/rust/crates/api/Cargo.toml

[package]
name = "api"
version.workspace = true
edition.workspace = true
license.workspace = true
publish.workspace = true

[dependencies]
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
runtime = { path = "../runtime" }
serde = { version = "1", features = ["derive"] }
serde_json = "1"
tokio = { version = "1", features = ["io-util", "macros", "net", "rt-multi-thread", "time"] }

[lints]
workspace = true
feat: Rust port of Claw Code CLI Crates: - api: Anthropic Messages API client with SSE streaming - tools: compatible tool implementations (Bash, Read, Write, Edit, Glob, Grep + extended suite) - runtime: conversation loop, session persistence, permissions, system prompt builder - claw-cli: terminal UI with markdown rendering, syntax highlighting, spinners - commands: subcommand definitions - compat-harness: upstream TS parity verification All crates pass cargo fmt/clippy/test. 2026-03-31 17:43:09 +00:00			`[package]`
			`name = "api"`
			`version.workspace = true`
			`edition.workspace = true`
			`license.workspace = true`
			`publish.workspace = true`

			`[dependencies]`
			`reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }`
Enable OAuth login without requiring API keys This adds an end-to-end OAuth PKCE login/logout path to the Rust CLI, persists OAuth credentials under the config home, and teaches the API client to use persisted bearer credentials with refresh support when env-based API credentials are absent. Constraint: Reuse existing runtime OAuth primitives and keep browser/callback orchestration in the CLI Constraint: Preserve auth precedence as API key, then auth-token env, then persisted OAuth credentials Rejected: Put browser launch and token exchange entirely in runtime \| caused boundary creep across shared crates Rejected: Duplicate credential parsing in CLI and api \| increased drift and refresh inconsistency Confidence: medium Scope-risk: moderate Reversibility: clean Directive: Keep logout non-destructive to unrelated credentials.json fields and do not silently fall back to stale expired tokens Tested: cargo fmt; cargo clippy --workspace --all-targets -- -D warnings; cargo test Not-tested: Manual live Anthropic OAuth browser flow against real authorize/token endpoints 2026-03-31 23:38:05 +00:00			`runtime = { path = "../runtime" }`
feat: Rust port of Claw Code CLI Crates: - api: Anthropic Messages API client with SSE streaming - tools: compatible tool implementations (Bash, Read, Write, Edit, Glob, Grep + extended suite) - runtime: conversation loop, session persistence, permissions, system prompt builder - claw-cli: terminal UI with markdown rendering, syntax highlighting, spinners - commands: subcommand definitions - compat-harness: upstream TS parity verification All crates pass cargo fmt/clippy/test. 2026-03-31 17:43:09 +00:00			`serde = { version = "1", features = ["derive"] }`
			`serde_json = "1"`
			`tokio = { version = "1", features = ["io-util", "macros", "net", "rt-multi-thread", "time"] }`

			`[lints]`
			`workspace = true`