@ex-machina/opencode-anthropic-auth 1.5.0 → 1.5.1

package/README.md

@@ -21,7 +21,7 @@ Add the plugin to your OpenCode configuration:
 
 ```json
 {
-  "plugin": ["@ex-machina/opencode-anthropic-auth@1.4.0"]
+  "plugin": ["@ex-machina/opencode-anthropic-auth@1.5.1"]
 }
 ```
 
@@ -33,6 +33,16 @@ The plugin provides three authentication options:
 - **Create an API Key** - OAuth flow via `console.anthropic.com` that creates an API key on your behalf.
 - **Manually enter API Key** - Standard API key entry for users who already have one.
 
+## Configuration
+
+The plugin supports the following environment variables:
+
+| Variable                          | Description                                                                                                                                                                                 |
+|-----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `ANTHROPIC_BASE_URL`              | Override the API endpoint URL (e.g. for proxying). Must be a valid HTTP(S) URL.                                                                                                             |
+| `ANTHROPIC_INSECURE`              | Set to `1` or `true` to skip TLS certificate verification. Only effective when `ANTHROPIC_BASE_URL` is also set.                                                                            |
+| `EXPERIMENTAL_KEEP_SYSTEM_PROMPT` | Set to `1` or `true` to keep the sanitized system prompt in the `system[]` field instead of relocating it to a user message. See [System Prompt Sanitization](#system-prompt-sanitization). |
+
 ## How It Works
 
 For Claude Pro/Max authentication, the plugin:
@@ -46,13 +56,16 @@ For Claude Pro/Max authentication, the plugin:
 
 ### System Prompt Sanitization
 
-The Anthropic API for Max subscriptions requires the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
+The Anthropic API for Max subscriptions has specific requirements for the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
 
 1. **Identity swap** — The OpenCode identity line is removed and replaced with the Claude Code identity.
 2. **Paragraph removal by anchor** — Any paragraph containing a known URL anchor (e.g. `github.com/anomalyco/opencode`, `opencode.ai/docs`) is removed entirely. This is resilient to upstream rewording — as long as the anchor URL appears somewhere in the paragraph, the removal works regardless of surrounding text changes.
 3. **Inline text replacements** — Short branded strings inside paragraphs we want to keep are replaced (e.g. "OpenCode" → "the assistant" in the professional objectivity section).
 
-Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode".
+Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode". The system prompt is then **split** and only the billing header and identity line are left in the system prompt. The remainder is moved into a user message to bypass system prompt checks.
+
+> [!NOTE]
+> Set `EXPERIMENTAL_KEEP_SYSTEM_PROMPT=1` to skip the relocation step. The sanitized system prompt will remain in `system[]` in its entirety. This may cause API rejections for OAuth-authenticated requests.
 
 ## Development
 

package/dist/transform.d.ts

@@ -27,6 +27,12 @@ export declare function stripToolPrefix(text: string): string;
  * Only effective when ANTHROPIC_BASE_URL is also set.
  */
 export declare function isInsecure(): boolean;
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export declare function experimentalKeepSystemPrompt(): boolean;
 /**
  * Rewrite the request URL to add ?beta=true for /v1/messages requests.
  * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)

package/dist/transform.js

@@ -109,6 +109,15 @@ export function isInsecure() {
     const raw = process.env.ANTHROPIC_INSECURE?.trim();
     return raw === '1' || raw === 'true';
 }
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export function experimentalKeepSystemPrompt() {
+    const raw = process.env.EXPERIMENTAL_KEEP_SYSTEM_PROMPT?.trim();
+    return raw === '1' || raw === 'true';
+}
 /**
  * Parse ANTHROPIC_BASE_URL from the environment.
  * Returns a valid HTTP(S) URL or null if unset/invalid.
@@ -277,7 +286,9 @@ export function rewriteRequestBody(body) {
         // Third-party system prompts trigger a 400 rejection when they
         // appear in `system[]`. Keep only the identity block in `system[]`
         // and prepend everything else to the first user message.
-        if (Array.isArray(parsed.system) && parsed.system.length > 1) {
+        if (!experimentalKeepSystemPrompt() &&
+            Array.isArray(parsed.system) &&
+            parsed.system.length > 1) {
             const kept = [parsed.system[0]]; // identity block
             const movedTexts = [];
             for (let i = 1; i < parsed.system.length; i++) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ex-machina/opencode-anthropic-auth",
-  "version": "1.5.0",
+  "version": "1.5.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/ex-machina-co/opencode-anthropic-auth"