providers: request falls back to api.anthropic.com (401 invalid x-api-key) after plugin hot-reload #47114

Activity

1. opencode-agent

   added

   2.0

   on Sep 3, 2026
2. github-actions

   assigned

   jlongster

   on Sep 3, 2026
3. opencodejr commented on Oct 28, 2026

   

   opencodejrBot

   on Oct 28, 2026

   More actions

   Thanks for the detailed report. I reproduced this on 0.0.0-beta-18999, and it still happens on the latest dev (35a4a68).

   Setup: your providers.anthropic config pointing at a local mock relay that accepts any key, one local plugin directory in plugins, and a shared serve process with an Anthropic credential in its environment (ANTHROPIC_API_KEY).

   • For about 2 seconds after the plugin file is saved, GET /api/model lists the anthropic models without your baseURL. On dev it shows https://api.anthropic.com/v1.
   • Prompts sent from three directories while saving the plugin file often failed with Error: invalid x-api-key, the real response from api.anthropic.com. On dev, 7 to 13 of 24 runs failed; the others reached the relay.

   This only happened when an Anthropic credential was available outside the config: an environment variable in my test, though stored auth credentials might do the same. Without one, the anthropic models disappeared from the catalog for that window and runs failed with Model unavailable instead, so nothing left the machine. That may be why your isolated tests stayed clean. Do you have ANTHROPIC_API_KEY set or a stored Anthropic credential where the service runs?

   The script below reproduces it. It looks closely related to #52333, where the catalog also briefly loses config-defined providers and policies during a plugin reload.

   Reproduction script (repro.sh)

   #!/usr/bin/env bash
   # Repro for anomalyco/opencode#47114: during a local plugin reload, the built-in `anthropic`
   # provider loses its configured `settings.baseURL`, so requests go to https://api.anthropic.com
   # and fail with 401 "invalid x-api-key" instead of hitting the configured relay.
   #
   # Usage: OC=opencode2 ./repro.sh          (installed CLI, e.g. @opencode-ai/cli@0.0.0-beta-18999)
   #        OC=/path/to/oc-dev.sh ./repro.sh (CLI from a dev checkout)
   # Needs: bun, curl, python3, git, outbound network (to observe the real Anthropic 401).
   # Precondition: an ambient Anthropic credential (here ANTHROPIC_API_KEY=x), so the built-in
   # anthropic provider stays in the catalog during the reload window.
   set -u
   OC=${OC:-opencode2}
   PORT=${PORT:-4315}
   S=$(mktemp -d /tmp/opencode/r47114.XXXX)
   export XDG_CONFIG_HOME=$S/config XDG_DATA_HOME=$S/data XDG_CACHE_HOME=$S/cache XDG_STATE_HOME=$S/state
   export OPENCODE_SERVER_PASSWORD=pw
   mkdir -p "$XDG_CONFIG_HOME/opencode/plugins/p" "$S/proj"
   (cd "$S/proj" && git init -q)
   
   # 1. Mock relay on 127.0.0.1:3456: accepts any key, answers with a tiny Anthropic SSE stream.
   cat > "$S/mock.ts" <<'EOF'
   Bun.serve({ port: 3456, hostname: "127.0.0.1", fetch() {
     const ev = (t: string, d: any) => `event: ${t}\ndata: ${JSON.stringify({ type: t, ...d })}\n\n`
     return new Response(
       ev("message_start", { message: { id: "m", type: "message", role: "assistant", model: "claude-opus-5", content: [], stop_reason: null, usage: { input_tokens: 1, output_tokens: 0 } } }) +
       ev("content_block_start", { index: 0, content_block: { type: "text", text: "" } }) +
       ev("content_block_delta", { index: 0, delta: { type: "text_delta", text: "ok" } }) +
       ev("content_block_stop", { index: 0 }) +
       ev("message_delta", { delta: { stop_reason: "end_turn" }, usage: { output_tokens: 1 } }) +
       ev("message_stop", {}),
       { headers: { "content-type": "text/event-stream" } })
   } })
   EOF
   bun "$S/mock.ts" & MOCK=$!
   
   # 2. Config from the report: anthropic pointed at the relay, plus one local plugin directory.
   cat > "$XDG_CONFIG_HOME/opencode/opencode.json" <<J
   {
     "plugins": ["$XDG_CONFIG_HOME/opencode/plugins/p"],
     "providers": { "anthropic": {
       "package": "@opencode-ai/ai/providers/anthropic",
       "settings": { "baseURL": "http://127.0.0.1:3456", "apiKey": "x" },
       "models": { "claude-opus-5": { "limit": { "context": 1000000, "output": 32000 } } } } }
   }
   J
   save_plugin() { printf '// v=%s\nexport default { id: "local.p", setup: async () => ({}) }\n' "$RANDOM$1" > "$XDG_CONFIG_HOME/opencode/plugins/p/index.js"; }
   save_plugin 0
   
   # 3. Shared server.
   (cd "$S/proj" && ANTHROPIC_API_KEY=x $OC serve --port $PORT --hostname 127.0.0.1 > "$S/serve.log" 2>&1) & SERVER=$!
   trap 'kill $SERVER $MOCK 2>/dev/null; pkill -P $SERVER 2>/dev/null' EXIT
   for _ in $(seq 60); do curl -s -u opencode:pw -o /dev/null "localhost:$PORT/api/health" && break; sleep 1; done
   sleep 5
   
   # 4. Catalog view: anthropic baseURL as seen by GET /api/model while the plugin file is saved.
   echo "== anthropic baseURL in GET /api/model while saving the plugin file (count, value)"
   save_plugin x
   for _ in $(seq 60); do
     curl -s -u opencode:pw "localhost:$PORT/api/model?directory=$S/proj" | python3 -c '
   import sys,json
   d=json.load(sys.stdin)["data"]
   print(sorted({m.get("settings",{}).get("baseURL") for m in d if m["providerID"]=="anthropic"}))'
     sleep 0.05
   done | uniq -c
   
   # 5. Prompts racing plugin saves.
   mkdir -p "$S/out"
   for i in $(seq 8); do
     save_plugin "$i"
     for d in a b c; do
       (sleep 0.$((RANDOM % 5)); cd "$S/proj"; timeout 60 $OC run --server "http://127.0.0.1:$PORT" -m anthropic/claude-opus-5#medium "say ok" > "$S/out/$i-$d.txt" 2>&1) &
     done
     sleep 0.7
   done
   wait $(jobs -p | grep -v -e "^$SERVER$" -e "^$MOCK$") 2>/dev/null
   sleep 2
   echo "== runs: $(ls "$S/out" | wc -l)  ok (hit the relay): $(grep -l '^ok' "$S/out"/* | wc -l)  invalid x-api-key (went to api.anthropic.com): $(grep -li 'invalid x-api-key' "$S/out"/* | wc -l)"

   Run it: bash repro.sh
4. opencodejr

   added

   reproduced

   severity:high

   on Oct 28, 2026