opencode-anthropic-fix 0.1.31 → 0.1.32

package/lib/config.mjs

@@ -435,18 +435,17 @@ export const DEFAULT_CONFIG = {
     /** Also inject numeric length anchors (≤25 words between tool calls, ≤100 words final). */
     length_anchors: true,
   },
-  /** OAuth token-endpoint request fingerprint. HIGH-RISK knob — leave OFF unless
-   *  validated against a live refresh. */
+  /** OAuth token-endpoint request fingerprint. */
   oauth: {
-    /** When true, the OAuth token EXCHANGE/REFRESH POSTs use Claude Code
-     *  2.1.195's SDK-native-fetch fingerprint (`User-Agent:
+    /** When true (DEFAULT), the OAuth token EXCHANGE/REFRESH POSTs use Claude
+     *  Code 2.1.195's SDK-native-fetch fingerprint (`User-Agent:
      *  anthropic-sdk-typescript/0.94.0 userOAuthProvider`, `anthropic-beta:
-     *  oauth-2025-04-20`, no axios `Accept`). When false (DEFAULT), the legacy
-     *  axios fingerprint (`User-Agent: axios/1.13.6`, axios `Accept` header) is
-     *  sent byte-for-byte as before.
-     *  Default OFF: the token endpoint historically 429'd requests lacking the
-     *  axios UA, so this stays opt-in until proven against live refresh. */
-    sdk_token_useragent: false,
+     *  oauth-2025-04-20`, no axios `Accept`). When false, the legacy axios
+     *  fingerprint (`User-Agent: axios/1.13.6`, axios `Accept` header) is sent
+     *  byte-for-byte as before.
+     *  Default ON to match upstream CC 2.1.195's userOAuthProvider. Set to
+     *  `false` to revert to the legacy axios/1.13.6 + `Accept` fingerprint. */
+    sdk_token_useragent: true,
   },
 };
 

package/lib/oauth.mjs

@@ -58,7 +58,7 @@ function generatePKCE() {
 /**
  * Resolve whether the SDK-native-fetch token fingerprint should be used.
  * An explicit boolean override (used by callers/tests) wins; otherwise the
- * live `oauth.sdk_token_useragent` config flag is read (default false).
+ * live `oauth.sdk_token_useragent` config flag is read (default true).
  * @param {boolean | undefined} override
  * @returns {boolean}
  */

package/lib/oauth.test.mjs

@@ -13,7 +13,7 @@ describe("oauth headers", () => {
     vi.unstubAllGlobals();
   });
 
-  it("sends Claude Code user-agent on token exchange", async () => {
+  it("sends SDK native-fetch fingerprint by default on token exchange", async () => {
     mockFetch.mockResolvedValueOnce({
       ok: false,
       status: 400,
@@ -23,10 +23,12 @@ describe("oauth headers", () => {
     await exchange("code#state", "verifier");
 
     const [, init] = mockFetch.mock.calls[0];
-    expect(init.headers["User-Agent"]).toBe("axios/1.13.6");
+    expect(init.headers["User-Agent"]).toBe("anthropic-sdk-typescript/0.94.0 userOAuthProvider");
+    expect(init.headers["anthropic-beta"]).toBe("oauth-2025-04-20");
+    expect("Accept" in init.headers).toBe(false);
   });
 
-  it("sends Claude Code user-agent on token refresh", async () => {
+  it("sends SDK native-fetch fingerprint by default on token refresh", async () => {
     mockFetch.mockResolvedValueOnce({
       ok: true,
       json: async () => ({ access_token: "a", refresh_token: "r", expires_in: 3600 }),
@@ -35,7 +37,9 @@ describe("oauth headers", () => {
     await refreshToken("refresh-token");
 
     const [, init] = mockFetch.mock.calls[0];
-    expect(init.headers["User-Agent"]).toBe("axios/1.13.6");
+    expect(init.headers["User-Agent"]).toBe("anthropic-sdk-typescript/0.94.0 userOAuthProvider");
+    expect(init.headers["anthropic-beta"]).toBe("oauth-2025-04-20");
+    expect("Accept" in init.headers).toBe(false);
   });
 
   it("sends Claude Code user-agent on token revoke", async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-anthropic-fix",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "license": "GPL-3.0-or-later",
   "repository": {
     "type": "git",