@ex-machina/opencode-anthropic-auth 1.5.0 → 1.6.0

package/README.md

@@ -21,7 +21,7 @@ Add the plugin to your OpenCode configuration:
 
 ```json
 {
-  "plugin": ["@ex-machina/opencode-anthropic-auth@1.4.0"]
+  "plugin": ["@ex-machina/opencode-anthropic-auth@1.5.1"]
 }
 ```
 
@@ -33,6 +33,16 @@ The plugin provides three authentication options:
 - **Create an API Key** - OAuth flow via `console.anthropic.com` that creates an API key on your behalf.
 - **Manually enter API Key** - Standard API key entry for users who already have one.
 
+## Configuration
+
+The plugin supports the following environment variables:
+
+| Variable                          | Description                                                                                                                                                                                 |
+|-----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `ANTHROPIC_BASE_URL`              | Override the API endpoint URL (e.g. for proxying). Must be a valid HTTP(S) URL.                                                                                                             |
+| `ANTHROPIC_INSECURE`              | Set to `1` or `true` to skip TLS certificate verification. Only effective when `ANTHROPIC_BASE_URL` is also set.                                                                            |
+| `EXPERIMENTAL_KEEP_SYSTEM_PROMPT` | Set to `1` or `true` to keep the sanitized system prompt in the `system[]` field instead of relocating it to a user message. See [System Prompt Sanitization](#system-prompt-sanitization). |
+
 ## How It Works
 
 For Claude Pro/Max authentication, the plugin:
@@ -46,13 +56,16 @@ For Claude Pro/Max authentication, the plugin:
 
 ### System Prompt Sanitization
 
-The Anthropic API for Max subscriptions requires the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
+The Anthropic API for Max subscriptions has specific requirements for the system prompt to identify as Claude Code. The plugin rewrites the system prompt on each request using an **anchor-based** approach that minimizes what gets changed:
 
 1. **Identity swap** — The OpenCode identity line is removed and replaced with the Claude Code identity.
 2. **Paragraph removal by anchor** — Any paragraph containing a known URL anchor (e.g. `github.com/anomalyco/opencode`, `opencode.ai/docs`) is removed entirely. This is resilient to upstream rewording — as long as the anchor URL appears somewhere in the paragraph, the removal works regardless of surrounding text changes.
 3. **Inline text replacements** — Short branded strings inside paragraphs we want to keep are replaced (e.g. "OpenCode" → "the assistant" in the professional objectivity section).
 
-Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode".
+Everything else in the system prompt is preserved: tone/style guidance, task management instructions, tool usage policy, environment info, skills, user/project instructions, and file paths containing "opencode". The system prompt is then **split** and only the billing header and identity line are left in the system prompt. The remainder is moved into a user message to bypass system prompt checks.
+
+> [!NOTE]
+> Set `EXPERIMENTAL_KEEP_SYSTEM_PROMPT=1` to skip the relocation step. The sanitized system prompt will remain in `system[]` in its entirety. This may cause API rejections for OAuth-authenticated requests.
 
 ## Development
 

package/dist/transform.d.ts

@@ -27,6 +27,12 @@ export declare function stripToolPrefix(text: string): string;
  * Only effective when ANTHROPIC_BASE_URL is also set.
  */
 export declare function isInsecure(): boolean;
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export declare function experimentalKeepSystemPrompt(): boolean;
 /**
  * Rewrite the request URL to add ?beta=true for /v1/messages requests.
  * When ANTHROPIC_BASE_URL is set, overrides the origin (protocol + host)

package/dist/transform.js

@@ -1,5 +1,19 @@
 import { buildBillingHeaderValue } from './cch';
 import { CLAUDE_CODE_ENTRYPOINT, CLAUDE_CODE_IDENTITY, OPENCODE_IDENTITY, PARAGRAPH_REMOVAL_ANCHORS, REQUIRED_BETAS, TEXT_REPLACEMENTS, TOOL_PREFIX, USER_AGENT, } from './constants';
+/**
+ * Prefix a tool name with TOOL_PREFIX and uppercase the first character.
+ * Claude Code uses PascalCase tool names (e.g. mcp_Bash, mcp_Read);
+ * lowercase names (mcp_bash, mcp_read) are flagged as non-Claude-Code clients.
+ */
+function prefixName(name) {
+    return `${TOOL_PREFIX}${name.charAt(0).toUpperCase()}${name.slice(1)}`;
+}
+/**
+ * Reverse prefixName: strip TOOL_PREFIX and restore the original leading case.
+ */
+function unprefixName(name) {
+    return `${name.charAt(0).toLowerCase()}${name.slice(1)}`;
+}
 /**
  * Merge headers from a Request object and/or a RequestInit headers value
  * into a single Headers instance.
@@ -68,7 +82,7 @@ export function prefixToolNames(body) {
         if (parsed.tools && Array.isArray(parsed.tools)) {
             parsed.tools = parsed.tools.map((tool) => ({
                 ...tool,
-                name: tool.name ? `${TOOL_PREFIX}${tool.name}` : tool.name,
+                name: tool.name ? prefixName(tool.name) : tool.name,
             }));
         }
         if (parsed.messages && Array.isArray(parsed.messages)) {
@@ -76,10 +90,7 @@ export function prefixToolNames(body) {
                 if (msg.content && Array.isArray(msg.content)) {
                     msg.content = msg.content.map((block) => {
                         if (block.type === 'tool_use' && block.name) {
-                            return {
-                                ...block,
-                                name: `${TOOL_PREFIX}${block.name}`,
-                            };
+                            return { ...block, name: prefixName(block.name) };
                         }
                         return block;
                     });
@@ -97,7 +108,7 @@ export function prefixToolNames(body) {
  * Strip TOOL_PREFIX from tool names in streaming response text.
  */
 export function stripToolPrefix(text) {
-    return text.replace(/"name"\s*:\s*"mcp_([^"]+)"/g, '"name": "$1"');
+    return text.replace(/"name"\s*:\s*"mcp_([^"]+)"/g, (_match, name) => `"name": "${unprefixName(name)}"`);
 }
 /**
  * Check if TLS verification should be skipped for custom API endpoints.
@@ -109,6 +120,15 @@ export function isInsecure() {
     const raw = process.env.ANTHROPIC_INSECURE?.trim();
     return raw === '1' || raw === 'true';
 }
+/**
+ * Check if system prompt relocation should be skipped.
+ * When enabled, sanitized system blocks stay in system[] instead of
+ * being moved to the first user message.
+ */
+export function experimentalKeepSystemPrompt() {
+    const raw = process.env.EXPERIMENTAL_KEEP_SYSTEM_PROMPT?.trim();
+    return raw === '1' || raw === 'true';
+}
 /**
  * Parse ANTHROPIC_BASE_URL from the environment.
  * Returns a valid HTTP(S) URL or null if unset/invalid.
@@ -277,7 +297,9 @@ export function rewriteRequestBody(body) {
         // Third-party system prompts trigger a 400 rejection when they
         // appear in `system[]`. Keep only the identity block in `system[]`
         // and prepend everything else to the first user message.
-        if (Array.isArray(parsed.system) && parsed.system.length > 1) {
+        if (!experimentalKeepSystemPrompt() &&
+            Array.isArray(parsed.system) &&
+            parsed.system.length > 1) {
             const kept = [parsed.system[0]]; // identity block
             const movedTexts = [];
             for (let i = 1; i < parsed.system.length; i++) {
@@ -310,7 +332,7 @@ export function rewriteRequestBody(body) {
         if (parsed.tools && Array.isArray(parsed.tools)) {
             parsed.tools = parsed.tools.map((tool) => ({
                 ...tool,
-                name: tool.name ? `${TOOL_PREFIX}${tool.name}` : tool.name,
+                name: tool.name ? prefixName(tool.name) : tool.name,
             }));
         }
         if (parsed.messages && Array.isArray(parsed.messages)) {
@@ -318,7 +340,7 @@ export function rewriteRequestBody(body) {
                 if (msg.content && Array.isArray(msg.content)) {
                     msg.content = msg.content.map((block) => {
                         if (block.type === 'tool_use' && block.name) {
-                            return { ...block, name: `${TOOL_PREFIX}${block.name}` };
+                            return { ...block, name: prefixName(block.name) };
                         }
                         return block;
                     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ex-machina/opencode-anthropic-auth",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/ex-machina-co/opencode-anthropic-auth"