@commonlyai/cli 0.1.92 → 0.1.94

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commonlyai/cli",
-  "version": "0.1.92",
+  "version": "0.1.94",
   "license": "Apache-2.0",
   "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
   "type": "module",

package/src/lib/adapters/opencode.js

@@ -342,6 +342,18 @@ const startProviderProxy = async ({ provider, keyFile, tokenFile }) => {
   await writeFile(tokenFile, proxyToken, { encoding: 'utf8', mode: 0o600 });
   await chmod(tokenFile, 0o600);
 
+  const logRefusedRequest = (method, requestPath) => {
+    let normalizedPath = '/';
+    try {
+      normalizedPath = new URL(requestPath || '/', 'http://127.0.0.1').pathname || '/';
+    } catch {
+      // Do not include an unparseable raw request target in logs.
+    }
+    const safeMethod = typeof method === 'string' && /^[A-Z]+$/.test(method)
+      ? method : 'UNKNOWN';
+    process.stderr.write(`[opencode] provider proxy refused ${safeMethod} ${normalizedPath}\n`);
+  };
+
   const server = createServer((incoming, outgoing) => {
     const supplied = Buffer.from(incoming.headers.authorization || '');
     const expected = Buffer.from(`Bearer ${proxyToken}`);
@@ -356,22 +368,26 @@ const startProviderProxy = async ({ provider, keyFile, tokenFile }) => {
       return;
     }
     const rejectRoute = (path) => {
+      logRefusedRequest(incoming.method, path);
       incoming.resume();
       outgoing.writeHead(403, { 'content-type': 'text/plain; charset=utf-8' });
       outgoing.end(`Unsupported provider request: ${incoming.method || 'UNKNOWN'} ${path}`);
     };
+    const rejectBadRequest = () => {
+      logRefusedRequest(incoming.method, incoming.url);
+      incoming.resume();
+      outgoing.writeHead(400).end();
+    };
 
     let target;
     try {
       const requestPath = incoming.url || '/';
       if (!requestPath.startsWith('/') || requestPath.startsWith('//')) {
-        incoming.resume();
-        outgoing.writeHead(400).end();
+        rejectBadRequest();
         return;
       }
       if (/%(?:2f|5c|2e)/i.test(requestPath)) {
-        incoming.resume();
-        outgoing.writeHead(400).end();
+        rejectBadRequest();
         return;
       }
       // OpenCode owns this local request path, so never use it as an outbound
@@ -405,8 +421,7 @@ const startProviderProxy = async ({ provider, keyFile, tokenFile }) => {
         host: upstream.host,
       };
     } catch {
-      incoming.resume();
-      outgoing.writeHead(400).end();
+      rejectBadRequest();
       return;
     }
 
@@ -754,9 +769,12 @@ export default {
     const configPath = join(tempDir, 'opencode.json');
     const configDir = join(tempDir, 'config-dir');
     const xdgConfig = join(tempDir, 'xdg-config');
-    // OpenCode initializes Path.config with mkdir and ensureGitignore during
-    // startup. Seatbelt grants this per-spawn tree read-only, so create both
-    // config roots and the exact ignore files it would otherwise write.
+    const home = isPublic ? join(tempDir, 'home') : null;
+    // OpenCode initializes its global and XDG config directories during
+    // startup, so create those roots and their ignore files before wrapping.
+    // Keep public HOME per-spawn, but leave $HOME/.opencode absent: OpenCode
+    // loads it after OPENCODE_CONFIG when present, which could persist config
+    // or MCP injection into later spawns.
     const xdgConfigDir = join(xdgConfig, 'opencode');
     await Promise.all([
       mkdir(configDir),
@@ -828,7 +846,7 @@ export default {
         dataHome: openCodeHome.dataHome,
         stateHome,
         cacheHome,
-        home: isPublic ? openCodeHome.root : null,
+        home,
         tempWork,
         credentialFile: credential?.path || null,
       });