@ex-machina/opencode-anthropic-auth 1.0.4 → 1.1.1

package/README.md

@@ -12,6 +12,19 @@ Add the plugin to your OpenCode configuration:
 }
 ```
 
+> [!TIP]
+> It is STRONGLY advised that you pin the plugin to a version. This will keep you from getting automatic updates; however, this will protect you from nefarious updates.
+>
+> This holds true for ANY OpenCode plugin. If you do not pin them, OpenCode will automatically update them on startup. It's a massive vulnerability waiting to happen.
+
+#### Example of pinned version
+
+```json
+{
+  "plugin": ["@ex-machina/opencode-anthropic-auth@1.1.1"]
+}
+```
+
 ## Authentication Methods
 
 The plugin provides three authentication options:

package/dist/index.js

@@ -1,6 +1,6 @@
 import { authorize, exchange } from './auth';
 import { CLIENT_ID, TOKEN_URL } from './constants';
-import { createStrippedStream, mergeHeaders, prefixToolNames, rewriteUrl, setOAuthHeaders, } from './transform';
+import { createStrippedStream, isInsecure, mergeHeaders, prefixToolNames, rewriteUrl, setOAuthHeaders, } from './transform';
 export const AnthropicAuthPlugin = async ({ client }) => {
     return {
         'experimental.chat.system.transform': (input, output) => {
@@ -117,6 +117,8 @@ export const AnthropicAuthPlugin = async ({ client }) => {
                                 ...init,
                                 body,
                                 headers: requestHeaders,
+                                // biome-ignore lint/suspicious/noExplicitAny: tls option is Bun-specific, not in standard RequestInit
+                                ...(isInsecure() && { tls: { rejectUnauthorized: false } }),
                             });
                             return createStrippedStream(response);
                         },

package/dist/transform.d.ts

@@ -22,8 +22,15 @@ export declare function prefixToolNames(body: string): string;
  * Strip TOOL_PREFIX from tool names in streaming response text.
  */
 export declare function stripToolPrefix(text: string): string;
+/**
+ * Check if TLS verification should be skipped for custom API endpoints.
+ * Only effective when ANTHROPIC_BASE_URL is also set.
+ */
+export declare function isInsecure(): boolean;
 /**
  * Rewrite the request URL to add ?beta=true for /v1/messages requests.
+ * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)
+ * for all API requests flowing through the fetch wrapper.
  * Returns the modified input and URL (if applicable).
  */
 export declare function rewriteUrl(input: FetchInput): {

package/dist/transform.js

@@ -98,8 +98,41 @@ export function prefixToolNames(body) {
 export function stripToolPrefix(text) {
     return text.replace(/"name"\s*:\s*"mcp_([^"]+)"/g, '"name": "$1"');
 }
+/**
+ * Check if TLS verification should be skipped for custom API endpoints.
+ * Only effective when ANTHROPIC_BASE_URL is also set.
+ */
+export function isInsecure() {
+    if (!process.env.ANTHROPIC_BASE_URL?.trim())
+        return false;
+    const raw = process.env.ANTHROPIC_INSECURE?.trim();
+    return raw === '1' || raw === 'true';
+}
+/**
+ * Parse ANTHROPIC_BASE_URL from the environment.
+ * Returns a valid HTTP(S) URL or null if unset/invalid.
+ */
+function resolveBaseUrl() {
+    const raw = process.env.ANTHROPIC_BASE_URL?.trim();
+    if (!raw)
+        return null;
+    try {
+        const baseUrl = new URL(raw);
+        if ((baseUrl.protocol !== 'http:' && baseUrl.protocol !== 'https:') ||
+            baseUrl.username ||
+            baseUrl.password) {
+            return null;
+        }
+        return baseUrl;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Rewrite the request URL to add ?beta=true for /v1/messages requests.
+ * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)
+ * for all API requests flowing through the fetch wrapper.
  * Returns the modified input and URL (if applicable).
  */
 export function rewriteUrl(input) {
@@ -115,16 +148,25 @@ export function rewriteUrl(input) {
     catch {
         requestUrl = null;
     }
-    if (requestUrl &&
-        requestUrl.pathname === '/v1/messages' &&
+    if (!requestUrl)
+        return { input, url: null };
+    const originalHref = requestUrl.href;
+    const baseUrl = resolveBaseUrl();
+    if (baseUrl) {
+        requestUrl.protocol = baseUrl.protocol;
+        requestUrl.host = baseUrl.host;
+    }
+    if (requestUrl.pathname === '/v1/messages' &&
         !requestUrl.searchParams.has('beta')) {
         requestUrl.searchParams.set('beta', 'true');
-        const newInput = input instanceof Request
-            ? new Request(requestUrl.toString(), input)
-            : requestUrl;
-        return { input: newInput, url: requestUrl };
     }
-    return { input, url: requestUrl };
+    if (requestUrl.href === originalHref) {
+        return { input, url: requestUrl };
+    }
+    const newInput = input instanceof Request
+        ? new Request(requestUrl.toString(), input)
+        : requestUrl;
+    return { input: newInput, url: requestUrl };
 }
 /**
  * Create a streaming response that strips the tool prefix from tool names.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ex-machina/opencode-anthropic-auth",
-  "version": "1.0.4",
+  "version": "1.1.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/ex-machina-co/opencode-anthropic-auth"