@opencode/protocol 0.0.0-dev-20114 → 0.0.0-dev-20115

package/dist/groups/server.d.ts

@@ -1,5 +1,6 @@
 import { Schema } from "effect";
 import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+import { UnauthorizedError } from "../errors.js";
 export declare const ServerInfo: Schema.Struct<{
     readonly version: Schema.String;
     readonly pid: Schema.Int;
@@ -9,6 +10,16 @@ export declare const ServerInfo: Schema.Struct<{
     }>;
 }>;
 export type ServerInfo = typeof ServerInfo.Type;
+export declare const PairingCode: Schema.Struct<{
+    readonly code: Schema.String;
+    readonly expires_in: Schema.Int;
+}>;
+export type PairingCode = typeof PairingCode.Type;
+export declare const PairingSession: Schema.Struct<{
+    readonly token: Schema.String;
+}>;
+export type PairingSession = typeof PairingSession.Type;
+export declare function isPairingConnectURL(url: URL): boolean;
 export declare const ServerGroup: HttpApiGroup.HttpApiGroup<"server.server", HttpApiEndpoint.HttpApiEndpoint<"server.info", "GET", "/api/info", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
     readonly version: Schema.String;
     readonly pid: Schema.Int;
@@ -16,4 +27,11 @@ export declare const ServerGroup: HttpApiGroup.HttpApiGroup<"server.server", Htt
     readonly paths: Schema.Struct<{
         readonly tmp: Schema.String;
     }>;
-}>>, never, never, never>, false>;
+}>>, never, never, never> | HttpApiEndpoint.HttpApiEndpoint<"server.pair", "POST", "/api/pair", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly code: Schema.String;
+    readonly expires_in: Schema.Int;
+}>>, never, never, never> | HttpApiEndpoint.HttpApiEndpoint<"server.connect", "GET", "/auth/connect/:code", Schema.toCodecStringTree<Schema.Struct<{
+    code: Schema.String;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly token: Schema.String;
+}>>, Schema.toCodecJson<typeof UnauthorizedError>, never, never>, false>;

package/dist/groups/server.js

@@ -1,5 +1,6 @@
 import { Schema } from "effect";
 import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+import { UnauthorizedError } from "../errors.js";
 export const ServerInfo = Schema.Struct({
     version: Schema.String,
     // 0 means the runtime has no OS process identity (e.g. workerd).
@@ -9,6 +10,18 @@ export const ServerInfo = Schema.Struct({
         tmp: Schema.String,
     }),
 }).annotate({ identifier: "ServerInfo" });
+export const PairingCode = Schema.Struct({
+    code: Schema.String,
+    expires_in: Schema.Int,
+}).annotate({ identifier: "PairingCode" });
+export const PairingSession = Schema.Struct({
+    token: Schema.String,
+}).annotate({ identifier: "PairingSession" });
+const PAIRING_CONNECT_PATH = /^\/auth\/connect\/[^/]+$/;
+// Authorization middleware skips credential checks for pairing links; the connect handler consumes the code instead.
+export function isPairingConnectURL(url) {
+    return PAIRING_CONNECT_PATH.test(url.pathname);
+}
 export const ServerGroup = HttpApiGroup.make("server.server")
     .add(HttpApiEndpoint.get("server.info", "/api/info", {
     success: ServerInfo,
@@ -16,5 +29,21 @@ export const ServerGroup = HttpApiGroup.make("server.server")
     identifier: "server.info",
     summary: "Get server info",
     description: "Return the server identity, connection URLs, paths, and readiness status.",
+})))
+    .add(HttpApiEndpoint.post("server.pair", "/api/pair", {
+    success: PairingCode,
+}).annotateMerge(OpenApi.annotations({
+    identifier: "server.pair",
+    summary: "Create pairing code",
+    description: "Create a short-lived, single-use code for a /auth/connect/:code pairing link.",
+})))
+    .add(HttpApiEndpoint.get("server.connect", "/auth/connect/:code", {
+    params: { code: Schema.String },
+    success: PairingSession,
+    error: UnauthorizedError,
+}).annotateMerge(OpenApi.annotations({
+    identifier: "server.connect",
+    summary: "Redeem pairing code",
+    description: "Redeem a pairing code. Browsers receive a session cookie and a redirect to the web app; requests that accept JSON receive a session token to use as the password.",
 })))
     .annotateMerge(OpenApi.annotations({ title: "server" }));

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/protocol",
-  "version": "0.0.0-dev-20114",
+  "version": "0.0.0-dev-20115",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -32,7 +32,7 @@
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
-    "@opencode/schema": "0.0.0-dev-20114",
+    "@opencode/schema": "0.0.0-dev-20115",
     "effect": "4.0.0-rc.112"
   },
   "devDependencies": {