@ex-machina/opencode-anthropic-auth 1.4.1 → 1.5.1

package/README.md

@@ -21,7 +21,7 @@ Add the plugin to your OpenCode configuration:
 
 ```json
 {
-  "plugin": ["@ex-machina/opencode-anthropic-auth@1.4.0"]
+  "plugin": ["@ex-machina/opencode-anthropic-auth@1.5.1"]
 }
 ```
 
@@ -33,6 +33,16 @@ The plugin provides three authentication options:
 - **Create an API Key** - OAuth flow via `console.anthropic.com` that creates an API key on your behalf.
 - **Manually enter API Key** - Standard API key entry for users who already have one.
 
+## Configuration
+
+The plugin supports the following environment variables:
+
+| Variable                          | Description                                                                                                                                                                                 |
+|-----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `ANTHROPIC_BASE_URL`              | Override the API endpoint URL (e.g. for proxying). Must be a valid HTTP(S) URL.                                                                                                             |
+| `ANTHROPIC_INSECURE`              | Set to `1` or `true` to skip TLS certificate verification. Only effective when `ANTHROPIC_BASE_URL` is also set.                                                                            |
+| `EXPERIMENTAL_KEEP_SYSTEM_PROMPT` | Set to `1` or `true` to keep the sanitized system prompt in the `system[]` field instead of relocating it to a user message. See [System Prompt Sanitization](#system-prompt-sanitization). |
+
 ## How It Works
 
 For Claude Pro/Max authentication, the plugin:
@@ -46,13 +56,16 @@ For Claude Pro/Max authentication, the plugin:
 
 ### System Prompt Sanitization
 
-The Anthropic API for Max subscriptions requires the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
+The Anthropic API for Max subscriptions has specific requirements for the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
 
 1. **Identity swap** — The OpenCode identity line is removed and replaced with the Claude Code identity.
 2. **Paragraph removal by anchor** — Any paragraph containing a known URL anchor (e.g. `github.com/anomalyco/opencode`, `opencode.ai/docs`) is removed entirely. This is resilient to upstream rewording — as long as the anchor URL appears somewhere in the paragraph, the removal works regardless of surrounding text changes.
 3. **Inline text replacements** — Short branded strings inside paragraphs we want to keep are replaced (e.g. "OpenCode" → "the assistant" in the professional objectivity section).
 
-Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode".
+Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode". The system prompt is then **split** and only the billing header and identity line are left in the system prompt. The remainder is moved into a user message to bypass system prompt checks.
+
+> [!NOTE]
+> Set `EXPERIMENTAL_KEEP_SYSTEM_PROMPT=1` to skip the relocation step. The sanitized system prompt will remain in `system[]` in its entirety. This may cause API rejections for OAuth-authenticated requests.
 
 ## Development
 

package/dist/cch.d.ts

@@ -0,0 +1,24 @@
+type Message = {
+    role?: string;
+    content?: string | Array<{
+        type?: string;
+        text?: string;
+    }>;
+};
+/**
+ * Extract text from the first user message's first text block.
+ */
+export declare function extractFirstUserMessageText(messages: Message[]): string;
+/**
+ * Compute cch: first 5 hex characters of SHA-256(messageText).
+ */
+export declare function computeCCH(messageText: string): string;
+/**
+ * Compute the 3-char version suffix from the sampled message characters.
+ */
+export declare function computeVersionSuffix(messageText: string, version?: string): string;
+/**
+ * Build the complete billing header string for insertion into system[0].
+ */
+export declare function buildBillingHeaderValue(messages: Message[], version: string | undefined, entrypoint: string): string;
+export {};

package/dist/cch.js

@@ -0,0 +1,47 @@
+import { createHash } from 'node:crypto';
+import { CCH_POSITIONS, CCH_SALT, CLAUDE_CODE_VERSION } from './constants';
+/**
+ * Extract text from the first user message's first text block.
+ */
+export function extractFirstUserMessageText(messages) {
+    const userMsg = messages.find((message) => message.role === 'user');
+    if (!userMsg)
+        return '';
+    const { content } = userMsg;
+    if (typeof content === 'string')
+        return content;
+    if (Array.isArray(content)) {
+        const textBlock = content.find((block) => block.type === 'text');
+        if (textBlock?.text)
+            return textBlock.text;
+    }
+    return '';
+}
+/**
+ * Compute cch: first 5 hex characters of SHA-256(messageText).
+ */
+export function computeCCH(messageText) {
+    return createHash('sha256').update(messageText).digest('hex').slice(0, 5);
+}
+/**
+ * Compute the 3-char version suffix from the sampled message characters.
+ */
+export function computeVersionSuffix(messageText, version = CLAUDE_CODE_VERSION) {
+    const chars = CCH_POSITIONS.map((index) => messageText[index] || '0').join('');
+    return createHash('sha256')
+        .update(`${CCH_SALT}${chars}${version}`)
+        .digest('hex')
+        .slice(0, 3);
+}
+/**
+ * Build the complete billing header string for insertion into system[0].
+ */
+export function buildBillingHeaderValue(messages, version = CLAUDE_CODE_VERSION, entrypoint) {
+    const text = extractFirstUserMessageText(messages);
+    const suffix = computeVersionSuffix(text, version);
+    const cch = computeCCH(text);
+    return ('x-anthropic-billing-header: ' +
+        `cc_version=${version}.${suffix}; ` +
+        `cc_entrypoint=${entrypoint}; ` +
+        `cch=${cch};`);
+}

package/dist/constants.d.ts

@@ -10,7 +10,11 @@ export declare const TOOL_PREFIX = "mcp_";
 export declare const REQUIRED_BETAS: string[];
 export declare const OPENCODE_IDENTITY = "You are OpenCode, the best coding agent on the planet.";
 export declare const CLAUDE_CODE_IDENTITY = "You are a Claude agent, built on Anthropic's Claude Agent SDK.";
-export declare const USER_AGENT = "claude-cli/2.1.2 (external, cli)";
+export declare const CCH_SALT = "59cf53e54c78";
+export declare const CCH_POSITIONS: number[];
+export declare const CLAUDE_CODE_VERSION = "2.1.87";
+export declare const CLAUDE_CODE_ENTRYPOINT = "sdk-cli";
+export declare const USER_AGENT = "claude-cli/2.1.87 (external, cli)";
 /**
  * Anchors that identify paragraphs to remove from the system prompt.
  * Any paragraph (text between blank lines) containing one of these

package/dist/constants.js

@@ -20,7 +20,11 @@ export const REQUIRED_BETAS = [
 ];
 export const OPENCODE_IDENTITY = 'You are OpenCode, the best coding agent on the planet.';
 export const CLAUDE_CODE_IDENTITY = "You are a Claude agent, built on Anthropic's Claude Agent SDK.";
-export const USER_AGENT = 'claude-cli/2.1.2 (external, cli)';
+export const CCH_SALT = '59cf53e54c78';
+export const CCH_POSITIONS = [4, 7, 20];
+export const CLAUDE_CODE_VERSION = '2.1.87';
+export const CLAUDE_CODE_ENTRYPOINT = 'sdk-cli';
+export const USER_AGENT = 'claude-cli/2.1.87 (external, cli)';
 /**
  * Anchors that identify paragraphs to remove from the system prompt.
  * Any paragraph (text between blank lines) containing one of these

package/dist/transform.d.ts

@@ -27,6 +27,12 @@ export declare function stripToolPrefix(text: string): string;
  * Only effective when ANTHROPIC_BASE_URL is also set.
  */
 export declare function isInsecure(): boolean;
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export declare function experimentalKeepSystemPrompt(): boolean;
 /**
  * Rewrite the request URL to add ?beta=true for /v1/messages requests.
  * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)

package/dist/transform.js

@@ -1,4 +1,5 @@
-import { CLAUDE_CODE_IDENTITY, OPENCODE_IDENTITY, PARAGRAPH_REMOVAL_ANCHORS, REQUIRED_BETAS, TEXT_REPLACEMENTS, TOOL_PREFIX, USER_AGENT, } from './constants';
+import { buildBillingHeaderValue } from './cch';
+import { CLAUDE_CODE_ENTRYPOINT, CLAUDE_CODE_IDENTITY, OPENCODE_IDENTITY, PARAGRAPH_REMOVAL_ANCHORS, REQUIRED_BETAS, TEXT_REPLACEMENTS, TOOL_PREFIX, USER_AGENT, } from './constants';
 /**
  * Merge headers from a Request object and/or a RequestInit headers value
  * into a single Headers instance.
@@ -108,6 +109,15 @@ export function isInsecure() {
     const raw = process.env.ANTHROPIC_INSECURE?.trim();
     return raw === '1' || raw === 'true';
 }
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export function experimentalKeepSystemPrompt() {
+    const raw = process.env.EXPERIMENTAL_KEEP_SYSTEM_PROMPT?.trim();
+    return raw === '1' || raw === 'true';
+}
 /**
  * Parse ANTHROPIC_BASE_URL from the environment.
  * Returns a valid HTTP(S) URL or null if unset/invalid.
@@ -265,6 +275,10 @@ export function prependClaudeCodeIdentity(system) {
 export function rewriteRequestBody(body) {
     try {
         const parsed = JSON.parse(body);
+        const billingHeader = Array.isArray(parsed.messages) &&
+            parsed.messages.some((message) => message.role === 'user')
+            ? buildBillingHeaderValue(parsed.messages, undefined, CLAUDE_CODE_ENTRYPOINT)
+            : null;
         // Sanitize system prompt and prepend Claude Code identity
         parsed.system = prependClaudeCodeIdentity(parsed.system);
         // --- Relocate non-core system entries to user messages ---
@@ -272,7 +286,9 @@ export function rewriteRequestBody(body) {
         // Third-party system prompts trigger a 400 rejection when they
         // appear in `system[]`. Keep only the identity block in `system[]`
         // and prepend everything else to the first user message.
-        if (Array.isArray(parsed.system) && parsed.system.length > 1) {
+        if (!experimentalKeepSystemPrompt() &&
+            Array.isArray(parsed.system) &&
+            parsed.system.length > 1) {
             const kept = [parsed.system[0]]; // identity block
             const movedTexts = [];
             for (let i = 1; i < parsed.system.length; i++) {
@@ -295,6 +311,12 @@ export function rewriteRequestBody(body) {
                 }
             }
         }
+        const identityBlock = parsed.system[0];
+        if (billingHeader &&
+            identityBlock?.type === 'text' &&
+            identityBlock.text === CLAUDE_CODE_IDENTITY) {
+            identityBlock.text = `${billingHeader}\n\n${CLAUDE_CODE_IDENTITY}`;
+        }
         // Prefix tool names
         if (parsed.tools && Array.isArray(parsed.tools)) {
             parsed.tools = parsed.tools.map((tool) => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ex-machina/opencode-anthropic-auth",
-  "version": "1.4.1",
+  "version": "1.5.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/ex-machina-co/opencode-anthropic-auth"
@@ -18,7 +18,7 @@
     "extract": "bun scripts/extract-system-prompt.ts",
     "test": "bun test",
     "types": "tsc",
-    "format": "biome format --write .",
+    "format": "biome check --write --unsafe",
     "format:check": "biome format .",
     "lint": "biome lint .",
     "change": "changeset",