fix(sse): use x-api-key for opencode-go minimax messages requests

[ottodevs]

Summary

Fix OpenCode Go MiniMax auth for Anthropic-style /messages requests.

Root cause

OpenCode Go mixes protocol families by model:

• glm-5 and kimi-k2.5 use OpenAI-style /chat/completions
• minimax-m2.5 and minimax-m2.7 use Anthropic-style /messages

OmniRoute already routed the MiniMax Go models to /messages, but OpencodeExecutor still sent Authorization: Bearer ..., which caused upstream 401 Missing API key errors.

For OpenCode Go MiniMax /messages, upstream expects:

• x-api-key: <key>
• anthropic-version: 2023-06-01

Changes

• update open-sse/executors/opencode.ts
  • send x-api-key for Claude-targeted OpenCode Go requests
  • keep Authorization: Bearer ... for the remaining OpenCode Go request formats
• update tests/unit/opencode-executor.test.mjs
  • assert the correct MiniMax Go header behavior

Validation

Validated with:

• direct curl repro against OpenCode Go endpoints
• node --import tsx/esm --test tests/unit/opencode-executor.test.mjs
• npm run typecheck:core
• npm run build

Notes

This fix is intentionally narrow:

• it preserves current behavior for glm-5 and kimi-k2.5
• it only changes auth header selection for OpenCode Go requests using Claude target format

[gemini-code-assist]

Code Review

This pull request updates the OpencodeExecutor to use the x-api-key header instead of Authorization when the request format is set to "claude", while also ensuring the anthropic-version header is included. The unit tests have been updated to reflect these changes. A review comment suggests restructuring the header assignment logic to improve readability and better separate authentication concerns from format-specific settings.

[gemini-code-assist]

While this logic is correct, it could be slightly restructured for better readability and separation of concerns. You could handle setting authentication headers based on the key's presence first, and then handle other format-specific headers. This avoids nesting the key check within the format check and makes the logic for setting auth headers more self-contained.

    if (key) {
      if (this._requestFormat === "claude") {
        headers["x-api-key"] = key;
      } else {
        headers["Authorization"] = `Bearer ${key}`;
      }
    }

    if (this._requestFormat === "claude") {
      headers["anthropic-version"] = "2023-06-01";
    }

[ottodevs]

Fixed

[kilo-code-bot]

Code Review Summary

Status: No New Issues Found | Recommendation: Merge

Overview

Severity	Count
CRITICAL	0
WARNING	0
SUGGESTION	0

Analysis

The PR correctly implements the auth header fix for OpenCode Go MiniMax models:

1. open-sse/executors/opencode.ts - The conditional logic properly selects x-api-key header for Claude-target format (/messages endpoint) and Authorization: Bearer for other formats (/chat/completions)

2. tests/unit/opencode-executor.test.mjs - Test properly updated to assert x-api-key header for Claude format

3. Security - The fix correctly uses x-api-key as required by OpenCode Go MiniMax /messages endpoint per the PR description

Existing Comment

There is one existing inline comment suggesting a code style reorganization (medium priority). This is a valid stylistic suggestion but does not affect functionality - the current implementation is correct.

Files Reviewed (2 files)

• open-sse/executors/opencode.ts - 0 issues
• tests/unit/opencode-executor.test.mjs - 0 issues

[diegosouzapw]

Thanks @ottodevs for this great contribution! 🎉 The fix is now merged and will be part of the next release. We appreciate your effort!