fix(provider): pass apiKey to createUnified for Cloudflare AI Gateway#32052
Merged
rekram1-node merged 2 commits intoJun 16, 2026
Merged
Conversation
Workers AI models via cloudflare-ai-gateway fail with 401 because createUnified() is called without an apiKey. The ai-gateway-provider package injects CF_TEMP_TOKEN as a placeholder, then strips it before sending — leaving the sub-request with no authorization header. Passing the real API key means the Authorization header survives the stripping logic and reaches the gateway correctly. Fixes anomalyco#32051
github-actions
Bot
added
needs:compliance
Contributor
|
Thanks for updating your PR! It now meets our contributing guidelines. 👍 |
6 tasks
johnko
added a commit
to johnko/opencode
that referenced
this pull request
Jun 17, 2026
* upstream: (4536 commits) fix(opencode): sanitize OpenAI MCP tool schemas (anomalyco#32489) chore: update nix node_modules hashes fix(provider): pass apiKey to createUnified for Cloudflare AI Gateway (anomalyco#32052) chore: generate feat(app): make session timelines much faster AND without flicker or scroll jumps (anomalyco#32331) chore: update nix node_modules hashes chore: generate experiment: better web picker using @pierre/tree (anomalyco#31208) fix(mcp): default tool schema properties (anomalyco#32568) fix(web): persist docs language selection (anomalyco#32551) fix(tui): render move errors inline (anomalyco#32241) Revert "fix(mcp): type tool error content" fix(mcp): enable progress timeout resets (anomalyco#32477) fix(mcp): stop idle OAuth callback server (anomalyco#32245) chore: generate chore: update nix node_modules hashes fix(mcp): type tool error content fix(stats): align homepage model ranks fix(mcp): handle tool result errors (anomalyco#32244) fix(stats): rank model pages by week ...
|
i have tested the lest version for windows this feauture not added |
davidgut1982
pushed a commit
to davidgut1982/opencode
that referenced
this pull request
Jun 19, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
LuisAlbertoMK
pushed a commit
to LuisAlbertoMK/opencode
that referenced
this pull request
Jun 21, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
thdxr
pushed a commit
that referenced
this pull request
Jun 21, 2026
…#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
6 tasks
markjaquith
pushed a commit
to markjaquith/opencode
that referenced
this pull request
Jun 23, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
6 tasks
BenGu3
pushed a commit
to BenGu3/opencode
that referenced
this pull request
Jun 27, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Issue for this PR
Closes #32051
Type of change
What does this PR do?
createUnified()is called without anapiKeyin thecloudflare-ai-gatewayprovider. Theai-gateway-providerpackage injects a placeholderCF_TEMP_TOKEN, then strips it before sending the universal endpoint request — leaving the Workers AI sub-request with no authorization header. This causes a 401 for all Workers AI models. BYOK models (Anthropic/OpenAI) are unaffected because they carry their own real API keys.The fix passes the API key to
createUnified({ apiKey })so the real token is set on the sub-requestAuthorizationheader. The stripping logic only removes headers containing the literalCF_TEMP_TOKEN, so real tokens survive.How did you verify your code works?
CF_TEMP_TOKENCF_TEMP_TOKENstripping still works correctly for no-key/unified-billing scenarioscloudflare-workers-aiprovider is a completely separate code path and untouchedScreenshots / recordings
N/A — no UI changes.
Checklist