@opencode/server 2.0.16 → 2.0.17

package/dist/chunks/{auth-0xemx5a5.js → handlers-f05bgvye.js}

@@ -1,99 +1,99 @@
 import {
   GenerateHandler2
-} from "./auth-9vrrrs57.js";
+} from "./handlers-rjqbhscq.js";
 import {
   MessageHandler2
-} from "./auth-pqe05x32.js";
+} from "./handlers-26ta7ngt.js";
 import {
   ModelHandler2
-} from "./auth-ybmm73jc.js";
+} from "./handlers-b1rdg9nf.js";
 import {
   ProviderHandler2
-} from "./auth-b6gan3yw.js";
+} from "./handlers-haswyr8z.js";
 import {
   SessionHandler2
-} from "./auth-ahxdh0dq.js";
+} from "./handlers-367ngss7.js";
 import {
   PermissionHandler2
-} from "./auth-p0qxanbk.js";
+} from "./handlers-t88f2hhf.js";
 import {
   FileSystemHandler2
-} from "./auth-vsmvcx85.js";
+} from "./handlers-96s6m0w3.js";
 import {
   FormHandler2
-} from "./auth-1aa7fc0d.js";
+} from "./handlers-ees77nh9.js";
 import {
   CommandHandler2
-} from "./auth-h91pzmtp.js";
+} from "./handlers-pme11y2y.js";
 import {
   SkillHandler2
-} from "./auth-83rfx0sp.js";
+} from "./handlers-hp5sxeae.js";
 import {
   RpcHandler2
-} from "./auth-50jg7xmc.js";
+} from "./handlers-f8rap8f6.js";
 import {
-  layer5
-} from "./auth-99sfd1j8.js";
+  layer2
+} from "./handlers-2sy3c7de.js";
 import {
   EventHandler2
-} from "./auth-kb2gw6wm.js";
+} from "./handlers-em4bkx9t.js";
 import {
   AgentHandler2
-} from "./auth-f2ryx3d8.js";
+} from "./handlers-ctscy0f5.js";
 import {
   PluginHandler2
-} from "./auth-qmx5gmxb.js";
+} from "./handlers-hr75rahr.js";
 import {
   ServerHandler2
-} from "./auth-qh9c2857.js";
+} from "./handlers-j0xcyacv.js";
 import {
   DebugHandler2
-} from "./auth-e3vgmqs2.js";
+} from "./handlers-140y8w7p.js";
 import {
   PtyHandler2
-} from "./auth-y4j2wswm.js";
+} from "./handlers-bhrnjhj4.js";
 import {
   PersistentPtyHandler2
-} from "./auth-v84hnbsb.js";
+} from "./handlers-s0padj6k.js";
 import {
   ShellHandler2
-} from "./auth-tsyxj4xh.js";
+} from "./handlers-7eckj7zq.js";
 import {
   ReferenceHandler2
-} from "./auth-jd22znxy.js";
+} from "./handlers-5bwq5cz2.js";
 import {
   LocationHandler2
-} from "./auth-y07r8paj.js";
+} from "./handlers-x5ncpjy3.js";
 import {
   IntegrationHandler2
-} from "./auth-bp2kj98m.js";
+} from "./handlers-np19kmxx.js";
 import {
   WebSearchHandler2
-} from "./auth-h1w0a8ky.js";
+} from "./handlers-v1emgcvb.js";
 import {
   McpHandler2
-} from "./auth-epwv4y6g.js";
+} from "./handlers-wz0qz28j.js";
 import {
   CredentialHandler2
-} from "./auth-n0k9wajg.js";
+} from "./handlers-44xy5pnk.js";
 import {
   ProjectHandler2
-} from "./auth-eptkag0m.js";
+} from "./handlers-qj9kjxn3.js";
 import {
   WorktreeHandler2
-} from "./auth-jefcrg4z.js";
+} from "./handlers-bt9tc5rb.js";
 import {
   VcsHandler2
-} from "./auth-7zxr3tkk.js";
+} from "./handlers-zpz5afwq.js";
 import {
   MigrationHandler2
-} from "./auth-5frajas6.js";
+} from "./handlers-bmqkn4ah.js";
 import {
   ConfigHandler2
-} from "./auth-fdfc8k8f.js";
+} from "./handlers-6qwktr1g.js";
 
 // src/handlers.ts
 import { Layer } from "effect";
-var handlers2 = Layer.mergeAll(ServerHandler2, DebugHandler2, MigrationHandler2, LocationHandler2, AgentHandler2, PluginHandler2, SessionHandler2, MessageHandler2, ModelHandler2, GenerateHandler2, ProviderHandler2, IntegrationHandler2, WebSearchHandler2, McpHandler2, CredentialHandler2, ProjectHandler2, FormHandler2, PermissionHandler2, FileSystemHandler2, CommandHandler2, SkillHandler2, RpcHandler2, EventHandler2.pipe(Layer.provide(layer5)), PtyHandler2, PersistentPtyHandler2, ShellHandler2, ReferenceHandler2, WorktreeHandler2, VcsHandler2, ConfigHandler2);
+var handlers2 = Layer.mergeAll(ServerHandler2, DebugHandler2, MigrationHandler2, LocationHandler2, AgentHandler2, PluginHandler2, SessionHandler2, MessageHandler2, ModelHandler2, GenerateHandler2, ProviderHandler2, IntegrationHandler2, WebSearchHandler2, McpHandler2, CredentialHandler2, ProjectHandler2, FormHandler2, PermissionHandler2, FileSystemHandler2, CommandHandler2, SkillHandler2, RpcHandler2, EventHandler2.pipe(Layer.provide(layer2)), PtyHandler2, PersistentPtyHandler2, ShellHandler2, ReferenceHandler2, WorktreeHandler2, VcsHandler2, ConfigHandler2);
 
 export { handlers2 };

package/dist/chunks/{auth-50jg7xmc.js → handlers-f8rap8f6.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/rpc.ts
 import { Rpc } from "@opencode/core/rpc";

package/dist/chunks/{auth-m6wvgbfq.js → handlers-gtkdacvk.js}

@@ -1,8 +1,10 @@
 import {
   Config2,
   required2,
-  authorized2
-} from "./auth-zyv89x5n.js";
+  authorized2,
+  verifySession2,
+  sessionCookieName2
+} from "./handlers-anm12x33.js";
 
 // src/middleware/authorization.ts
 import { UnauthorizedError } from "@opencode/protocol/errors";
@@ -10,6 +12,7 @@ import { Authorization } from "@opencode/protocol/middleware/authorization";
 import { Authorization as Authorization2 } from "@opencode/protocol/middleware/authorization";
 import { hasPtyConnectTicketURL } from "@opencode/protocol/groups/pty";
 import { hasPersistentPtyConnectTicketURL } from "@opencode/protocol/groups/persistent-pty";
+import { isPairingConnectURL } from "@opencode/protocol/groups/server";
 import { Effect, Encoding, Layer, Redacted } from "effect";
 import { HttpEffect, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 var AUTH_TOKEN_QUERY = "auth_token";
@@ -38,8 +41,25 @@ function credentialFromRequest(request) {
     return decodeCredential(match[1]);
   return Effect.succeed(emptyCredential());
 }
+var UNAUTHORIZED_MESSAGE = "Authentication required";
+function challengeRequest(request) {
+  const mode = request.headers["sec-fetch-mode"];
+  return mode === undefined || mode === "navigate";
+}
+function unauthorizedResponse2(request) {
+  return HttpServerResponse.jsonUnsafe({ _tag: "UnauthorizedError", message: UNAUTHORIZED_MESSAGE }, { status: 401, headers: challengeRequest(request) ? { "www-authenticate": WWW_AUTHENTICATE } : undefined });
+}
 function authorizedRequest2(request, config) {
-  return credentialFromRequest(request).pipe(Effect.map((credential) => authorized2(credential, config)));
+  return credentialFromRequest(request).pipe(Effect.map((credential) => authorized2(credential, config) || authorizedSessionCookie(request, config)));
+}
+function authorizedSessionCookie(request, config) {
+  const token = request.cookies[sessionCookieName2(request.headers.host)];
+  if (!token)
+    return false;
+  const origin = request.headers.origin;
+  if (origin !== undefined && URL.parse(origin)?.host !== request.headers.host)
+    return false;
+  return verifySession2(token, config);
 }
 var authorizationLayer2 = Layer.effect(Authorization, Effect.gen(function* () {
   const config = yield* Config2;
@@ -48,13 +68,14 @@ var authorizationLayer2 = Layer.effect(Authorization, Effect.gen(function* () {
   return Authorization.of((effect) => Effect.gen(function* () {
     const request = yield* HttpServerRequest.HttpServerRequest;
     const url = new URL(request.url, "http://localhost");
-    if (hasPtyConnectTicketURL(url) || hasPersistentPtyConnectTicketURL(url))
+    if (hasPtyConnectTicketURL(url) || hasPersistentPtyConnectTicketURL(url) || isPairingConnectURL(url))
       return yield* effect;
     if (yield* authorizedRequest2(request, config))
       return yield* effect;
-    yield* HttpEffect.appendPreResponseHandler((_request, response) => Effect.succeed(HttpServerResponse.setHeader(response, "www-authenticate", WWW_AUTHENTICATE)));
-    return yield* new UnauthorizedError({ message: "Authentication required" });
+    if (challengeRequest(request))
+      yield* HttpEffect.appendPreResponseHandler((_request, response) => Effect.succeed(HttpServerResponse.setHeader(response, "www-authenticate", WWW_AUTHENTICATE)));
+    return yield* new UnauthorizedError({ message: UNAUTHORIZED_MESSAGE });
   }));
 }));
 
-export { authorizedRequest2, authorizationLayer2, Authorization2 };
+export { unauthorizedResponse2, authorizedRequest2, authorizationLayer2, Authorization2 };

package/dist/chunks/{auth-b6gan3yw.js → handlers-haswyr8z.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/provider.ts
 import { Provider } from "@opencode/core/provider";

package/dist/chunks/{auth-83rfx0sp.js → handlers-hp5sxeae.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/skill.ts
 import { Skill } from "@opencode/core/skill";

package/dist/chunks/{auth-qmx5gmxb.js → handlers-hr75rahr.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/plugin.ts
 import { Plugin } from "@opencode/core/plugin";

package/dist/chunks/handlers-j0xcyacv.js

@@ -0,0 +1,53 @@
+import {
+  Api2
+} from "./handlers-v573ws0d.js";
+import {
+  SESSION_TTL_SECONDS2,
+  Config2,
+  issueSession2,
+  sessionCookieName2
+} from "./handlers-anm12x33.js";
+import {
+  Service3
+} from "./handlers-mzr9gftb.js";
+import {
+  Service4
+} from "./handlers-x6486bry.js";
+
+// src/handlers/server.ts
+import { Duration, Effect } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { UnauthorizedError } from "@opencode/protocol/errors";
+var ServerHandler2 = HttpApiBuilder.group(Api2, "server.server", (handlers) => Effect.gen(function* () {
+  const pairing = yield* Service4;
+  const auth = yield* Config2;
+  return handlers.handle("server.info", () => Effect.gen(function* () {
+    const info = yield* Service3;
+    return {
+      version: info.app.version ?? "unknown",
+      pid: process.pid ?? 0,
+      urls: info.urls(),
+      paths: info.paths
+    };
+  })).handle("server.pair", () => pairing.issue()).handle("server.connect", Effect.fn(function* (ctx) {
+    const request = yield* HttpServerRequest.HttpServerRequest;
+    const browser = request.headers.accept?.includes("text/html") === true;
+    const token = (yield* pairing.consume(ctx.params.code)) ? issueSession2(auth) : undefined;
+    if (token === undefined) {
+      if (!browser)
+        return yield* new UnauthorizedError({ message: "Pairing link expired or already used" });
+      return HttpServerResponse.text("This pairing link expired or was already used. Run `opencode pair` to get a new one.", { status: 401 });
+    }
+    if (!browser)
+      return { token };
+    return HttpServerResponse.redirect("/").pipe(HttpServerResponse.setCookieUnsafe(sessionCookieName2(request.headers.host), token, {
+      path: "/",
+      httpOnly: true,
+      sameSite: "lax",
+      maxAge: Duration.seconds(SESSION_TTL_SECONDS2)
+    }));
+  }));
+}));
+
+export { ServerHandler2 };

package/dist/chunks/{auth-s4aja1df.js → handlers-mzr9gftb.js}

@@ -1,22 +1,22 @@
 import {
   __export
-} from "./auth-9rqn6x4v.js";
+} from "./handlers-9rqn6x4v.js";
 
 // src/server-info.ts
 var exports_server_info = {};
 __export(exports_server_info, {
   ServerInfo: () => exports_server_info,
-  Service: () => Service2,
+  Service: () => Service3,
   connectionURLs: () => connectionURLs2,
-  layer: () => layer2
+  layer: () => layer3
 });
 import { Context, Layer } from "effect";
 import { networkInterfaces } from "node:os";
 
-class Service2 extends Context.Service()("@opencode/server/ServerInfo") {
+class Service3 extends Context.Service()("@opencode/server/ServerInfo") {
 }
-function layer2(urls, tmp, app = {}) {
-  return Layer.succeed(Service2, Service2.of({ urls, app, paths: { tmp } }));
+function layer3(urls, tmp, app = {}) {
+  return Layer.succeed(Service3, Service3.of({ urls, app, paths: { tmp } }));
 }
 function connectionURLs2(value, requestedHostname) {
   const url = new URL(value);
@@ -33,4 +33,4 @@ function connectionURLs2(value, requestedHostname) {
   ];
 }
 
-export { Service2, layer2, connectionURLs2, exports_server_info };
+export { Service3, layer3, connectionURLs2, exports_server_info };

package/dist/chunks/{auth-bp2kj98m.js → handlers-np19kmxx.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/integration.ts
 import { Integration } from "@opencode/core/integration";

package/dist/chunks/{auth-h91pzmtp.js → handlers-pme11y2y.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/command.ts
 import { Command } from "@opencode/core/command";

package/dist/chunks/{auth-eptkag0m.js → handlers-qj9kjxn3.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/project.ts
 import { Project } from "@opencode/core/project";

package/dist/chunks/{auth-9vrrrs57.js → handlers-rjqbhscq.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/generate.ts
 import { Generate } from "@opencode/core/generate";

package/dist/chunks/{auth-v84hnbsb.js → handlers-s0padj6k.js}

@@ -1,13 +1,13 @@
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 import {
   CorsConfig2,
   isAllowedRequestOrigin2
-} from "./auth-q4bn6dy8.js";
+} from "./handlers-q4bn6dy8.js";
 import {
   runPtySocket2
-} from "./auth-hezj1jdf.js";
+} from "./handlers-hezj1jdf.js";
 
 // src/handlers/persistent-pty.ts
 import { PersistentPty } from "@opencode/core/persistent-pty";

package/dist/chunks/{auth-p0qxanbk.js → handlers-t88f2hhf.js}

@@ -1,13 +1,13 @@
 import {
   missingSession2
-} from "./auth-smaf4a18.js";
+} from "./handlers-smaf4a18.js";
 import {
   response2,
   sessionInfo2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/permission.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{auth-h1w0a8ky.js → handlers-v1emgcvb.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/websearch.ts
 import { WebSearch } from "@opencode/core/websearch";

package/dist/chunks/{auth-2v3qky60.js → handlers-v573ws0d.js}

@@ -1,12 +1,12 @@
 import {
   LocationMiddleware2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   FormLocationMiddleware2
-} from "./auth-hrfm0p6n.js";
+} from "./handlers-5rwqcaw2.js";
 import {
   SessionLocationMiddleware2
-} from "./auth-d65y46ag.js";
+} from "./handlers-3kzx88w9.js";
 
 // src/api.ts
 import { makeDefaultApi } from "@opencode/protocol/api";

package/dist/chunks/{auth-mcn2wrk8.js → handlers-vdkg476e.js}

@@ -1,36 +1,39 @@
 import {
-  layer3
-} from "./auth-43k13dmj.js";
+  layer4
+} from "./handlers-6gkz39ey.js";
 import {
   formLocationLayer2
-} from "./auth-hrfm0p6n.js";
+} from "./handlers-5rwqcaw2.js";
 import {
   sessionLocationLayer2
-} from "./auth-d65y46ag.js";
+} from "./handlers-3kzx88w9.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 import {
   Config2
-} from "./auth-zyv89x5n.js";
+} from "./handlers-anm12x33.js";
 import {
   CorsConfig2
-} from "./auth-q4bn6dy8.js";
+} from "./handlers-q4bn6dy8.js";
 import {
-  layer2
-} from "./auth-s4aja1df.js";
+  layer3
+} from "./handlers-mzr9gftb.js";
 import {
   node2
-} from "./auth-s1rvn990.js";
+} from "./handlers-x6486bry.js";
+import {
+  node3
+} from "./handlers-wv5twc2g.js";
 import {
   handlers2
-} from "./auth-0xemx5a5.js";
+} from "./handlers-f05bgvye.js";
 import {
   authorizationLayer2
-} from "./auth-m6wvgbfq.js";
+} from "./handlers-gtkdacvk.js";
 import {
   schemaErrorLayer2
-} from "./auth-t8yzmczr.js";
+} from "./handlers-t8yzmczr.js";
 
 // src/routes.ts
 import { Database } from "@opencode/core/database/database";
@@ -88,6 +91,7 @@ var applicationServiceNodes = [
   PersistentPty.node,
   Credential.node,
   WellKnown.node,
+  node3,
   node2,
   LocationServiceMap.node,
   LocationActivity.node,
@@ -140,8 +144,8 @@ function makeRoutes(auth, options, serviceURLs, overrides, instances) {
   })) : build(overrides);
   return serviceLayer.pipe(Layer.flatMap((context) => {
     const services = Layer.succeedContext(context);
-    const requestServices = Layer.merge(Layer.succeedContext(Context.pick(Database.Service, Credential.Service, PermissionSaved.Service, PluginUpdate.Service, Project.Service, WellKnown.Service)(context)), layer2(serviceURLs, Context.get(context, Global.Service).tmp, options.app));
-    const api = HttpApiBuilder.layer(Api2, { openapiPath: "/openapi.json" }).pipe(Layer.provide(handlers2.pipe(Layer.provide(services), Layer.provide(Layer.succeed(CorsConfig2, options)))), Layer.provide(formLocationLayer2), Layer.provide(sessionLocationLayer2), Layer.provide(layer3), Layer.provide(authorizationLayer2), Layer.provide(schemaErrorLayer2), Layer.provide(auth), HttpRouter.provideRequest(requestServices), Layer.provideMerge(services), Layer.provideMerge(HttpRouter.layer));
+    const requestServices = Layer.merge(Layer.succeedContext(Context.pick(Database.Service, Credential.Service, PermissionSaved.Service, PluginUpdate.Service, Project.Service, WellKnown.Service)(context)), layer3(serviceURLs, Context.get(context, Global.Service).tmp, options.app));
+    const api = HttpApiBuilder.layer(Api2, { openapiPath: "/openapi.json" }).pipe(Layer.provide(handlers2.pipe(Layer.provide(services), Layer.provide(Layer.succeed(CorsConfig2, options)))), Layer.provide(formLocationLayer2), Layer.provide(sessionLocationLayer2), Layer.provide(layer4), Layer.provide(authorizationLayer2), Layer.provide(schemaErrorLayer2), Layer.provide(auth), HttpRouter.provideRequest(requestServices), Layer.provideMerge(services), Layer.provideMerge(HttpRouter.layer));
     return Layer.merge(api, V1Migration.layer.pipe(Layer.provide(services)));
   }));
 }

package/dist/chunks/{auth-s1rvn990.js → handlers-wv5twc2g.js}

@@ -1,23 +1,23 @@
 import {
   __export
-} from "./auth-9rqn6x4v.js";
+} from "./handlers-9rqn6x4v.js";
 
 // src/pty-environment.ts
 var exports_pty_environment = {};
 __export(exports_pty_environment, {
   PtyEnvironment: () => exports_pty_environment,
-  Service: () => Service3,
-  layer: () => layer4,
-  node: () => node2
+  Service: () => Service5,
+  layer: () => layer5,
+  node: () => node3
 });
 import { Context, Effect, Layer } from "effect";
 import { makeGlobalNode } from "@opencode/util/effect/app-node";
 
-class Service3 extends Context.Service()("@opencode/ServerPtyEnvironment") {
+class Service5 extends Context.Service()("@opencode/ServerPtyEnvironment") {
 }
-var layer4 = Layer.succeed(Service3, Service3.of({
+var layer5 = Layer.succeed(Service5, Service5.of({
   get: () => Effect.succeed({})
 }));
-var node2 = makeGlobalNode({ service: Service3, layer: layer4, deps: [] });
+var node3 = makeGlobalNode({ service: Service5, layer: layer5, deps: [] });
 
-export { Service3, layer4, node2, exports_pty_environment };
+export { Service5, layer5, node3, exports_pty_environment };

package/dist/chunks/{auth-epwv4y6g.js → handlers-wz0qz28j.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/mcp.ts
 import { Mcp } from "@opencode/core/mcp/index";

package/dist/chunks/{auth-y07r8paj.js → handlers-x5ncpjy3.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/location.ts
 import { Location } from "@opencode/core/location";

package/dist/chunks/handlers-x6486bry.js

@@ -0,0 +1,35 @@
+import {
+  __export
+} from "./handlers-9rqn6x4v.js";
+
+// src/pairing.ts
+var exports_pairing = {};
+__export(exports_pairing, {
+  ServerPairing: () => exports_pairing,
+  Service: () => Service4,
+  node: () => node2
+});
+import { Cache, Context, Duration, Effect, Layer } from "effect";
+import { makeGlobalNode } from "@opencode/util/effect/app-node";
+import { randomBytes } from "node:crypto";
+var TTL = Duration.minutes(5);
+
+class Service4 extends Context.Service()("@opencode/ServerPairing") {
+}
+var noLookup = () => Effect.die(new Error("ServerPairing cache must be used via set/invalidateWhen, never get"));
+var layer = Layer.effect(Service4, Effect.gen(function* () {
+  const cache = yield* Cache.make({ capacity: 1000, lookup: noLookup, timeToLive: TTL });
+  return Service4.of({
+    issue: Effect.fn("ServerPairing.issue")(function* () {
+      const code = randomBytes(16).toString("base64url");
+      yield* Cache.set(cache, code, true);
+      return { code, expires_in: Duration.toSeconds(TTL) };
+    }),
+    consume: Effect.fn("ServerPairing.consume")(function* (code) {
+      return yield* Cache.invalidateWhen(cache, code, () => true);
+    })
+  });
+}));
+var node2 = makeGlobalNode({ service: Service4, layer, deps: [] });
+
+export { Service4, node2, exports_pairing };

package/dist/chunks/{auth-7zxr3tkk.js → handlers-zpz5afwq.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./auth-43k13dmj.js";
+} from "./handlers-6gkz39ey.js";
 import {
   Api2
-} from "./auth-2v3qky60.js";
+} from "./handlers-v573ws0d.js";
 
 // src/handlers/vcs.ts
 import { Vcs } from "@opencode/core/vcs";

package/dist/cors.js

@@ -2,7 +2,7 @@ import {
   CorsConfig2,
   isAllowedCorsOrigin2,
   isAllowedRequestOrigin2
-} from "./chunks/auth-q4bn6dy8.js";
+} from "./chunks/handlers-q4bn6dy8.js";
 export {
   CorsConfig2 as CorsConfig,
   isAllowedCorsOrigin2 as isAllowedCorsOrigin,