fix(provider): pass apiKey to createUnified for Cloudflare AI Gateway - #32052
Merged
rekram1-node merged 2 commits intoJun 16, 2026
Merged
Conversation
Copy link
Copy Markdown
Contributor
Sorry, something went wrong.
Workers AI models via cloudflare-ai-gateway fail with 401 because createUnified() is called without an apiKey. The ai-gateway-provider package injects CF_TEMP_TOKEN as a placeholder, then strips it before sending — leaving the sub-request with no authorization header. Passing the real API key means the Authorization header survives the stripping logic and reaches the gateway correctly. Fixes anomalyco#32051
Copy link
Copy Markdown
Contributor
|
Thanks for updating your PR! It now meets our contributing guidelines. 👍 |
Sorry, something went wrong.
6 tasks
johnko
added a commit
to johnko/opencode
that referenced
this pull request
Jun 17, 2026
* upstream: (4536 commits) fix(opencode): sanitize OpenAI MCP tool schemas (anomalyco#32489) chore: update nix node_modules hashes fix(provider): pass apiKey to createUnified for Cloudflare AI Gateway (anomalyco#32052) chore: generate feat(app): make session timelines much faster AND without flicker or scroll jumps (anomalyco#32331) chore: update nix node_modules hashes chore: generate experiment: better web picker using @pierre/tree (anomalyco#31208) fix(mcp): default tool schema properties (anomalyco#32568) fix(web): persist docs language selection (anomalyco#32551) fix(tui): render move errors inline (anomalyco#32241) Revert "fix(mcp): type tool error content" fix(mcp): enable progress timeout resets (anomalyco#32477) fix(mcp): stop idle OAuth callback server (anomalyco#32245) chore: generate chore: update nix node_modules hashes fix(mcp): type tool error content fix(stats): align homepage model ranks fix(mcp): handle tool result errors (anomalyco#32244) fix(stats): rank model pages by week ...
Copy link
Copy Markdown
|
i have tested the lest version for windows this feauture not added |
Sorry, something went wrong.
davidgut1982
pushed a commit
to davidgut1982/opencode
that referenced
this pull request
Jun 19, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
LuisAlbertoMK
pushed a commit
to LuisAlbertoMK/opencode
that referenced
this pull request
Jun 21, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
thdxr
pushed a commit
that referenced
this pull request
Jun 21, 2026
…#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
6 tasks
markjaquith
pushed a commit
to markjaquith/opencode
that referenced
this pull request
Jun 23, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
6 tasks
BenGu3
pushed a commit
to BenGu3/opencode
that referenced
this pull request
Jun 27, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
panyw5
pushed a commit
to panyw5/opencode
that referenced
this pull request
Jul 3, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
avion23
pushed a commit
to avion23/opencode
that referenced
this pull request
Jul 20, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
3kaiu
pushed a commit
to 3kaiu/opencode-x
that referenced
this pull request
Jul 31, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
MarsQiu007
referenced
this pull request
in MarsQiu007/openNovel
Jul 31, 2026
… (#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
banlanzs
pushed a commit
to banlanzs/opencode
that referenced
this pull request
Aug 6, 2026
…anomalyco#32052) Co-authored-by: Aiden Cline <63023139+rekram1-node@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Issue for this PR
Closes #32051
Type of change
What does this PR do?
createUnified() is called without an apiKey in the cloudflare-ai-gateway provider. The ai-gateway-provider package injects a placeholder CF_TEMP_TOKEN, then strips it before sending the universal endpoint request — leaving the Workers AI sub-request with no authorization header. This causes a 401 for all Workers AI models. BYOK models (Anthropic/OpenAI) are unaffected because they carry their own real API keys.
The fix passes the API key to createUnified({ apiKey }) so the real token is set on the sub-request Authorization header. The stripping logic only removes headers containing the literal CF_TEMP_TOKEN, so real tokens survive.
How did you verify your code works?
Screenshots / recordings
N/A — no UI changes.
Checklist