@opencode-ai/server 0.0.0-dev-18666 → 0.0.0-dev-18668

package/dist/fetch.d.ts

@@ -59,6 +59,7 @@ export declare const make: (options?: {
         readonly gitbash?: string | undefined;
     } | undefined;
     readonly port?: number | undefined;
+    readonly cors?: readonly string[] | undefined;
     readonly password?: string | undefined;
     readonly app?: {
         readonly version?: string | undefined;

package/dist/fetch.js

@@ -7,5 +7,5 @@ import { createRoutes } from "./routes";
 export const make = Effect.fn("ServerFetch.make")(function* (options = {}, boot = {}) {
   const context = yield* Layer.build(createRoutes(options, () => [], boot.overrides ?? []).pipe(Layer.provide(HttpServer.layerServices)));
   yield* Effect.forkDetach(Context.get(context, SessionRestart.Service).resumeSuspendedSessions);
-  return Context.get(context, HttpRouter.HttpRouter).asHttpEffect().pipe(HttpMiddleware.cors({ allowedOrigins: isAllowedCorsOrigin, maxAge: 86400 }), HttpEffect.toWebHandlerWith(context));
+  return Context.get(context, HttpRouter.HttpRouter).asHttpEffect().pipe(HttpMiddleware.cors({ allowedOrigins: (origin) => isAllowedCorsOrigin(origin, options), maxAge: 86400 }), HttpEffect.toWebHandlerWith(context));
 });

package/dist/options.d.ts

@@ -8,6 +8,7 @@ export declare const ServerOptions: Schema.Struct<{
     readonly hostname: Schema.optional<Schema.String>;
     readonly port: Schema.optional<Schema.Int>;
     readonly password: Schema.optional<Schema.String>;
+    readonly cors: Schema.optional<Schema.$Array<Schema.String>>;
     readonly simulation: Schema.optional<Schema.Boolean>;
     readonly database: Schema.optional<Schema.Struct<{
         readonly path: Schema.optional<Schema.String>;

package/dist/options.js

@@ -11,6 +11,7 @@ export const ServerOptions = Schema.Struct({
   hostname: Schema.optional(Schema.String),
   port: Schema.optional(Schema.Int.check(Schema.isGreaterThanOrEqualTo(0), Schema.isLessThanOrEqualTo(65535))),
   password: Schema.optional(Schema.String),
+  cors: Schema.optional(Schema.Array(Schema.String)),
   simulation: Schema.optional(Schema.Boolean),
   database: Schema.optional(Database.Options),
   pty: Schema.optional(PersistentPty.Options),

package/dist/process.d.ts

@@ -35,6 +35,7 @@ export declare const start: <E, R>(options: {
         readonly gitbash?: string | undefined;
     } | undefined;
     readonly port?: number | undefined;
+    readonly cors?: readonly string[] | undefined;
     readonly password?: string | undefined;
     readonly app?: {
         readonly version?: string | undefined;

package/dist/process.js

@@ -26,7 +26,7 @@ export const start = Effect.fn("ServerProcess.start")(function* (options, lifecy
   if (!password)
     return yield* Effect.fail(Error("Missing server password"));
   const hostname = options.hostname ?? "127.0.0.1", port = Option.fromNullishOr(options.port), shutdown = yield* Latch.make(), status = yield* Status.make(), bound = yield* listen({ hostname, port }), application = yield* Ref.make(Option.none());
-  yield* bound.http.serve(dispatch(password, status, application, options.app?.version ?? "unknown").pipe(HttpMiddleware.cors({ allowedOrigins: isAllowedCorsOrigin, maxAge: 86400 })), errorResponseLogger).pipe(withoutParentSpan);
+  yield* bound.http.serve(dispatch(password, status, application, options.app?.version ?? "unknown").pipe(HttpMiddleware.cors({ allowedOrigins: (origin) => isAllowedCorsOrigin(origin, options), maxAge: 86400 })), errorResponseLogger).pipe(withoutParentSpan);
   if (lifecycle)
     yield* lifecycle.onListen(bound.http.address, shutdown.open.pipe(Effect.asVoid)).pipe(Effect.flatMap((cleanup) => Effect.addFinalizer(() => Scope.close(bound.scope, Exit.void).pipe(Effect.andThen(cleanup)))), Effect.uninterruptible);
   const parentScope = yield* Scope.Scope, applicationScope = yield* Scope.fork(parentScope);

package/dist/routes.js

@@ -35,6 +35,7 @@ import { HttpApiBuilder } from "effect/unstable/httpapi";
 import { Context, Effect, Layer, Option } from "effect";
 import { Api } from "./api";
 import { ServerAuth } from "./auth";
+import { CorsConfig } from "./cors";
 import { handlers } from "./handlers";
 import { authorizationLayer } from "./middleware/authorization";
 import { schemaErrorLayer } from "./middleware/schema-error";
@@ -109,7 +110,7 @@ function makeRoutes(auth, options, serviceURLs, overrides) {
     const { simulationReplacements } = yield* Effect.promise(() => import("@opencode-ai/simulation/backend")), simulation = yield* simulationReplacements({ version: App.make(options.app).version });
     return AppNodeBuilder.build(applicationServices, [...replacements, ...simulation]);
   })) : AppNodeBuilder.build(applicationServices, replacements)).pipe(Layer.flatMap((context) => {
-    const services = Layer.succeedContext(context), requestServices = Layer.merge(Layer.succeedContext(Context.pick(Database.Service, PermissionSaved.Service, Project.Service, WellKnown.Service)(context)), ServerInfo.layer(serviceURLs, options.app)), api = HttpApiBuilder.layer(Api, { openapiPath: "/openapi.json" }).pipe(Layer.provide(handlers.pipe(Layer.provide(services))), Layer.provide(formLocationLayer), Layer.provide(sessionLocationLayer), Layer.provide(layer), Layer.provide(authorizationLayer), Layer.provide(schemaErrorLayer), Layer.provide(auth), HttpRouter.provideRequest(requestServices), Layer.provideMerge(services), Layer.provideMerge(HttpRouter.layer));
+    const services = Layer.succeedContext(context), requestServices = Layer.merge(Layer.succeedContext(Context.pick(Database.Service, PermissionSaved.Service, Project.Service, WellKnown.Service)(context)), ServerInfo.layer(serviceURLs, options.app)), api = HttpApiBuilder.layer(Api, { openapiPath: "/openapi.json" }).pipe(Layer.provide(handlers.pipe(Layer.provide(services), Layer.provide(Layer.succeed(CorsConfig, options)))), Layer.provide(formLocationLayer), Layer.provide(sessionLocationLayer), Layer.provide(layer), Layer.provide(authorizationLayer), Layer.provide(schemaErrorLayer), Layer.provide(auth), HttpRouter.provideRequest(requestServices), Layer.provideMerge(services), Layer.provideMerge(HttpRouter.layer));
     return Layer.merge(api, V1Migration.layer.pipe(Layer.provide(services)));
   }));
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode-ai/server",
-  "version": "0.0.0-dev-18666",
+  "version": "0.0.0-dev-18668",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -30,11 +30,11 @@
   "dependencies": {
     "@effect/platform-node": "4.0.0-rc.112",
     "@effect/platform-node-shared": "4.0.0-rc.112",
-    "@opencode-ai/core": "0.0.0-dev-18666",
-    "@opencode-ai/protocol": "0.0.0-dev-18666",
-    "@opencode-ai/schema": "0.0.0-dev-18666",
-    "@opencode-ai/simulation": "0.0.0-dev-18666",
-    "@opencode-ai/util": "0.0.0-dev-18666",
+    "@opencode-ai/core": "0.0.0-dev-18668",
+    "@opencode-ai/protocol": "0.0.0-dev-18668",
+    "@opencode-ai/schema": "0.0.0-dev-18668",
+    "@opencode-ai/simulation": "0.0.0-dev-18668",
+    "@opencode-ai/util": "0.0.0-dev-18668",
     "drizzle-orm": "1.0.0-rc.5-169397b",
     "effect": "4.0.0-rc.112"
   },