Sync public snapshot from freebuff-private

Source: CodebuffAI/freebuff-private@5b61ef9971492a9e02df1d1168b60f593612ff79

Author: github-actions[bot]

bun.lock

@@ -1,6 +1,6 @@
 {
   "name": "freebuff",
-  "version": "0.2.27",
+  "version": "0.2.28",
   "description": "The world's strongest free coding agent",
   "license": "MIT",
   "bin": {

freebuff/cli/release/package.json

@@ -31,6 +31,28 @@ describe('CodebuffClient', () => {
       expect(mockFetch).toHaveBeenCalledTimes(1)
     })
 
+    test('a BYOK Anthropic connection is probed at /models with the version header its native API requires', async () => {
+      const seen: Array<{ url: string; version: string | null; auth: string | null }> = []
+      const mockFetch = mock((input: URL, init?: RequestInit) => {
+        const headers = new Headers(init?.headers)
+        seen.push({ url: String(input), version: headers.get('anthropic-version'), auth: headers.get('authorization') })
+        return Promise.resolve({ ok: true, body: null } as Response)
+      })
+      setFetchMock(mockFetch)
+      const client = new CodebuffClient({
+        byok: {
+          id: 'c', revision: 1, name: 'Anthropic', provider: 'openai-compatible',
+          baseUrl: 'https://api.anthropic.com/v1', model: 'claude-sonnet-4-5',
+          credentialRef: 'env:ANTHROPIC_API_KEY', createdAt: '2026-10-12T00:00:00.000Z',
+          updatedAt: '2026-10-12T00:00:00.000Z', apiKey: 'sk-ant-test',
+        },
+      })
+      expect(await client.checkConnection()).toBe(true)
+      expect(seen).toEqual([
+        { url: 'https://api.anthropic.com/v1/models', version: '2023-06-01', auth: 'Bearer sk-ant-test' },
+      ])
+    })
+
     test('returns false when response is not ok', async () => {
       const mockFetch = mock(() =>
         Promise.resolve({

sdk/src/__tests__/client.test.ts

@@ -316,6 +316,25 @@ describe('BYOK connection lifecycle', () => {
       expect(JSON.stringify(result)).not.toContain(input.apiKey)
     })
 
+    test('Anthropic is asked with the version header its native /models requires', async () => {
+      const seen: Array<Record<string, string | null>> = []
+      const { store } = fixture((async (_url: unknown, init?: RequestInit) => {
+        const headers = new Headers(init?.headers)
+        seen.push({
+          auth: headers.get('authorization'),
+          version: headers.get('anthropic-version'),
+        })
+        return Response.json({ data: [{ id: 'claude-sonnet-4-5' }] })
+      }) as unknown as typeof fetch)
+      const added = await store.create({
+        ...proxy,
+        baseUrl: 'https://api.anthropic.com/v1',
+        model: 'claude-sonnet-4-5',
+      })
+      expect(await store.validate(added)).toMatchObject({ ok: true, modelListed: true })
+      expect(seen).toEqual([{ auth: `Bearer ${input.apiKey}`, version: '2023-06-01' }])
+    })
+
     test('a listing without ids makes no claim about the model', async () => {
       const { store } = fixture(
         (async () => new Response('ok')) as unknown as typeof fetch,

sdk/src/byok.test.ts

@@ -232,6 +232,24 @@ export function normalizeByokBaseUrl(
   }
   return url.toString().replace(/\/+$/, '')
 }
+/**
+ * Headers for a provider's `/models` listing. OpenRouter lists without a key.
+ * Anthropic's OpenAI-compatible endpoint answers `/chat/completions` on the
+ * bearer alone but its `/models` is the native API, which refuses any request
+ * without `anthropic-version` (HTTP 400 "anthropic-version: header is required").
+ */
+export function byokListingHeaders(
+  connection: Pick<ResolvedByokConnection, 'provider' | 'apiKey'>,
+  base: string,
+): Record<string, string> {
+  if (connection.provider === 'openrouter') return {}
+  const headers: Record<string, string> = {
+    Authorization: `Bearer ${connection.apiKey}`,
+  }
+  if (new URL(base).hostname === 'api.anthropic.com')
+    headers['anthropic-version'] = '2023-06-01'
+  return headers
+}
 export function byokCompletionUrl(
   connection: Pick<ByokConnection, 'provider' | 'baseUrl'>,
 ): string {
@@ -433,10 +451,7 @@ export async function discoverByokContextWindow(
   const window = (async () => {
     try {
       const response = await fetchImpl(`${base}/models`, {
-        headers:
-          connection.provider === 'openrouter'
-            ? {}
-            : { Authorization: `Bearer ${connection.apiKey}` },
+        headers: byokListingHeaders(connection, base),
         redirect: 'error',
         signal: AbortSignal.timeout(DISCOVERY_TIMEOUT_MS),
       })
@@ -1053,7 +1068,10 @@ export function createByokConnectionStore(params: {
         const response = await fetchImpl(
           base + (resolved.provider === 'openrouter' ? '/key' : '/models'),
           {
-            headers: { Authorization: `Bearer ${resolved.apiKey}` },
+            headers: {
+              Authorization: `Bearer ${resolved.apiKey}`,
+              ...byokListingHeaders(resolved, base),
+            },
             redirect: 'error',
             signal: AbortSignal.timeout(10_000),
           },

sdk/src/byok.ts

@@ -3,7 +3,7 @@ import { API_KEY_ENV_VAR } from '@codebuff/common/constants/paths'
 import { getWebsiteUrl } from './constants'
 import { getCodebuffApiKeyFromEnv } from './env'
 import { run } from './run'
-import { normalizeByokBaseUrl } from './byok'
+import { byokListingHeaders, normalizeByokBaseUrl } from './byok'
 
 import type { RunOptions, CodebuffClientOptions } from './run'
 import type { RunState } from './run-state'
@@ -87,7 +87,10 @@ export class CodebuffClient {
           this.options.byok.baseUrl,
         )
         const response = await fetch(new URL(this.options.byok.provider === 'openrouter' ? 'key' : 'models', baseUrl.replace(/\/?$/, '/')), {
-          headers: { Authorization: `Bearer ${this.options.byok.apiKey}` },
+          headers: {
+            Authorization: `Bearer ${this.options.byok.apiKey}`,
+            ...byokListingHeaders(this.options.byok, baseUrl),
+          },
           signal: AbortSignal.timeout(5000),
           redirect: 'error',
         })