@opencode/server 2.0.23 → 2.0.25

package/dist/chunks/location-cqdj4ap7.js

@@ -0,0 +1,106 @@
+import {
+  response2
+} from "./location-f2c3fmpg.js";
+import {
+  Api2
+} from "./location-9cw9axw5.js";
+
+// src/handlers/fs.ts
+import { FileSystem } from "@opencode/core/filesystem";
+import { RelativePath } from "@opencode/core/schema";
+import { FileNotFoundError } from "@opencode/protocol/errors";
+import { Effect, Option, Stream } from "effect";
+import { HttpServerResponse } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+var FileSystemHandler2 = HttpApiBuilder.group(Api2, "server.fs", (handlers) => Effect.gen(function* () {
+  return handlers.handleRaw("fs.read", (ctx) => Effect.gen(function* () {
+    const path = yield* decodeRequestPath(ctx.request.url);
+    const fs = yield* FileSystem.Service;
+    const file = yield* fs.read({ path }).pipe(Effect.mapError((error) => new FileNotFoundError({ path: error.path, message: `File not found: ${error.path}` })));
+    return serveFile(ctx.request, file);
+  })).handle("fs.list", (ctx) => response2(Effect.gen(function* () {
+    const fs = yield* FileSystem.Service;
+    return yield* fs.list(ctx.query);
+  }))).handle("fs.find", (ctx) => response2(Effect.gen(function* () {
+    const fs = yield* FileSystem.Service;
+    return yield* fs.find(ctx.query);
+  }))).handle("fs.write", (ctx) => response2(Effect.gen(function* () {
+    const fs = yield* FileSystem.Service;
+    return yield* fs.write({ path: ctx.query.path, data: ctx.payload });
+  })));
+}));
+function decodeRequestPath(url) {
+  const raw = new URL(url, "http://localhost").pathname.slice(13);
+  return Effect.try({
+    try: () => RelativePath.make(decodeURIComponent(raw)),
+    catch: () => new FileNotFoundError({ path: raw, message: `File not found: ${raw}` })
+  });
+}
+function serveFile(request, file) {
+  const etag = `W/"${file.size.toString(16)}-${Option.match(file.mtime, {
+    onNone: () => "0",
+    onSome: (mtime) => mtime.getTime().toString(16)
+  })}"`;
+  const lastModified = Option.getOrUndefined(Option.map(file.mtime, (mtime) => mtime.toUTCString()));
+  const validators = {
+    "cache-control": "no-cache, no-transform",
+    etag,
+    ...lastModified === undefined ? {} : { "last-modified": lastModified }
+  };
+  if (isNotModified(request, etag, lastModified))
+    return HttpServerResponse.empty({ status: 304, headers: validators });
+  const rangeHeader = request.method === "GET" ? request.headers["range"] : undefined;
+  const range = rangeHeader !== undefined && matchesIfRange(request.headers["if-range"], etag, lastModified) ? parseRange(rangeHeader, file.size) : undefined;
+  if (range === "unsatisfiable")
+    return HttpServerResponse.empty({
+      status: 416,
+      headers: { "accept-ranges": "bytes", "content-range": `bytes */${file.size}` }
+    });
+  const offset = range?.start ?? 0;
+  const length = range === undefined ? file.size : range.end - range.start + 1;
+  return HttpServerResponse.stream(length === 0 ? Stream.empty : file.stream({ offset, bytesToRead: length }), {
+    status: range === undefined ? 200 : 206,
+    contentLength: length,
+    headers: {
+      ...validators,
+      "accept-ranges": "bytes",
+      "content-type": file.mime,
+      ...range === undefined ? {} : { "content-range": `bytes ${range.start}-${range.end}/${file.size}` }
+    }
+  });
+}
+function isNotModified(request, etag, lastModified) {
+  const ifNoneMatch = request.headers["if-none-match"];
+  if (ifNoneMatch !== undefined)
+    return ifNoneMatch.split(",").some((tag) => tag.trim() === "*" || stripWeak(tag) === stripWeak(etag));
+  const ifModifiedSince = request.headers["if-modified-since"];
+  return ifModifiedSince !== undefined && lastModified !== undefined && Date.parse(lastModified) <= Date.parse(ifModifiedSince);
+}
+function matchesIfRange(ifRange, etag, lastModified) {
+  if (ifRange === undefined)
+    return true;
+  if (/^\s*(w\/)?"/i.test(ifRange))
+    return stripWeak(ifRange) === stripWeak(etag);
+  return lastModified !== undefined && Date.parse(ifRange) === Date.parse(lastModified);
+}
+function stripWeak(etag) {
+  return etag.trim().replace(/^w\//i, "");
+}
+function parseRange(header, size) {
+  const match = /^bytes=\s*(\d*)\s*-\s*(\d*)\s*$/i.exec(header.trim());
+  if (match === null || match[1] === "" && match[2] === "")
+    return;
+  if (match[1] === "") {
+    const suffix = Number(match[2]);
+    if (suffix === 0 || size === 0)
+      return "unsatisfiable";
+    return { start: Math.max(size - suffix, 0), end: size - 1 };
+  }
+  const start = Number(match[1]);
+  const end = match[2] === "" ? size - 1 : Number(match[2]);
+  if (start > end || start >= size)
+    return "unsatisfiable";
+  return { start, end: Math.min(end, size - 1) };
+}
+
+export { FileSystemHandler2 };

package/dist/chunks/{options-m9wzfeff.js → location-dqsr2g0t.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/skill.ts
 import { Skill } from "@opencode/core/skill";

package/dist/chunks/{options-acgs9zzk.js → location-f2c3fmpg.js}

@@ -1,6 +1,6 @@
 import {
   missingSession2
-} from "./options-smaf4a18.js";
+} from "./location-smaf4a18.js";
 
 // src/location.ts
 import { FileSystem } from "@opencode/core/filesystem";
@@ -51,7 +51,7 @@ function decode(input) {
     return input;
   }
 }
-var layer3 = Layer.effect(LocationMiddleware2, Effect.gen(function* () {
+var layer5 = Layer.effect(LocationMiddleware2, Effect.gen(function* () {
   const locations = yield* LocationServiceMap.Service;
   return LocationMiddleware2.of((effect) => Effect.gen(function* () {
     const request = yield* HttpServerRequest.HttpServerRequest;
@@ -59,4 +59,4 @@ var layer3 = Layer.effect(LocationMiddleware2, Effect.gen(function* () {
   }));
 }));
 
-export { LocationMiddleware2, locationErrors2, response2, sessionInfo2, requestRef2, layer3 };
+export { LocationMiddleware2, locationErrors2, response2, sessionInfo2, requestRef2, layer5 };

package/dist/chunks/{options-wzq8v6r1.js → location-f7sjppyz.js}

@@ -1,25 +1,28 @@
 import {
-  response2
-} from "./options-acgs9zzk.js";
+  locationErrors2,
+  response2,
+  requestRef2
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 import {
   CorsConfig2,
   isAllowedRequestOrigin2
-} from "./options-q4bn6dy8.js";
+} from "./location-q4bn6dy8.js";
 import {
-  Service2
-} from "./options-bkk2wfbz.js";
+  Service3
+} from "./location-0d9kah4z.js";
 import {
   runPtySocket2
-} from "./options-hezj1jdf.js";
+} from "./location-hezj1jdf.js";
 
 // src/handlers/pty.ts
 import { Pty } from "@opencode/core/pty";
 import { PtyProtocol } from "@opencode/core/pty/protocol";
 import { PtyTicket } from "@opencode/core/pty/ticket";
 import { Location } from "@opencode/core/location";
+import { LocationServiceMap } from "@opencode/core/location-service-map";
 import { Effect, Queue } from "effect";
 import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 import { HttpApiBuilder, HttpApiSchema } from "effect/unstable/httpapi";
@@ -35,9 +38,10 @@ var ticketScope = Effect.gen(function* () {
   return { directory: location.directory, workspaceID: location.workspaceID };
 });
 var PtyHandler2 = HttpApiBuilder.group(Api2, "server.pty", (handlers) => Effect.gen(function* () {
+  const locations = yield* LocationServiceMap.Service;
   const tickets = yield* PtyTicket.Service;
   const cors = yield* CorsConfig2;
-  const environment = yield* Service2;
+  const environment = yield* Service3;
   return handlers.handle("pty.list", Effect.fn(function* () {
     const pty = yield* Pty.Service;
     return yield* response2(pty.list());
@@ -87,52 +91,59 @@ var PtyHandler2 = HttpApiBuilder.group(Api2, "server.pty", (handlers) => Effect.
     })));
     return yield* response2(tickets.issue({ ptyID: ctx.params.ptyID, ...yield* ticketScope }));
   })).handleRaw("pty.connect", Effect.fn("PtyHandler.connect")(function* (ctx) {
-    const pty = yield* Pty.Service;
-    const exists = yield* pty.get(ctx.params.ptyID).pipe(Effect.as(true), Effect.catchTag("Pty.NotFoundError", () => Effect.succeed(false)));
-    if (!exists)
-      return HttpServerResponse.empty({ status: 404 });
+    if (!isAllowedRequestOrigin2(ctx.request.headers.origin, ctx.request.headers.host, cors))
+      return HttpServerResponse.empty({ status: 403 });
+    const ref = LocationServiceMap.canonical(requestRef2(ctx.request));
     const url = new URL(ctx.request.url, "http://localhost");
     const ticket = url.searchParams.get(PTY_CONNECT_TICKET_QUERY);
-    if (ticket) {
-      const valid = isAllowedRequestOrigin2(ctx.request.headers.origin, ctx.request.headers.host, cors) ? yield* tickets.consume({ ticket, ptyID: ctx.params.ptyID, ...yield* ticketScope }) : false;
-      if (!valid)
-        return HttpServerResponse.empty({ status: 403 });
-    }
-    const parsedCursor = url.searchParams.get("cursor");
-    const cursorNumber = parsedCursor === null ? undefined : Number(parsedCursor);
-    const cursor = cursorNumber !== undefined && Number.isSafeInteger(cursorNumber) && cursorNumber >= -1 ? cursorNumber : undefined;
-    const socket = yield* Effect.orDie(ctx.request.upgrade);
-    const write = yield* socket.writer;
-    const closeAccepted = (event) => socket.runRaw(() => Effect.void, { onOpen: write(event).pipe(Effect.catch(() => Effect.void)) }).pipe(Effect.timeout("1 second"), Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.catch(() => Effect.void));
-    const outbox = yield* Queue.unbounded();
-    const attachment = yield* pty.attach(ctx.params.ptyID, {
-      cursor,
-      onData: (chunk) => Queue.offerUnsafe(outbox, chunk),
-      onEnd: () => Queue.offerUnsafe(outbox, new Socket.CloseEvent(1000))
-    }).pipe(Effect.catchTags({
-      "Pty.NotFoundError": () => closeAccepted(new Socket.CloseEvent(4404, "session not found")).pipe(Effect.as(undefined)),
-      "Pty.ExitedError": () => closeAccepted(new Socket.CloseEvent(4404, "session exited")).pipe(Effect.as(undefined))
-    }));
-    if (!attachment)
+    if (ticket && !(yield* tickets.consume({
+      ticket,
+      ptyID: ctx.params.ptyID,
+      directory: ref.directory,
+      workspaceID: ref.workspaceID
+    })))
+      return HttpServerResponse.empty({ status: 403 });
+    return yield* Effect.gen(function* () {
+      const pty = yield* Pty.Service;
+      const exists = yield* pty.get(ctx.params.ptyID).pipe(Effect.as(true), Effect.catchTag("Pty.NotFoundError", () => Effect.succeed(false)));
+      if (!exists)
+        return HttpServerResponse.empty({ status: 404 });
+      const parsedCursor = url.searchParams.get("cursor");
+      const cursorNumber = parsedCursor === null ? undefined : Number(parsedCursor);
+      const cursor = cursorNumber !== undefined && Number.isSafeInteger(cursorNumber) && cursorNumber >= -1 ? cursorNumber : undefined;
+      const socket = yield* Effect.orDie(ctx.request.upgrade);
+      const write = yield* socket.writer;
+      const closeAccepted = (event) => socket.runRaw(() => Effect.void, { onOpen: write(event).pipe(Effect.catch(() => Effect.void)) }).pipe(Effect.timeout("1 second"), Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.catch(() => Effect.void));
+      const outbox = yield* Queue.unbounded();
+      const attachment = yield* pty.attach(ctx.params.ptyID, {
+        cursor,
+        onData: (chunk) => Queue.offerUnsafe(outbox, chunk),
+        onEnd: () => Queue.offerUnsafe(outbox, new Socket.CloseEvent(1000))
+      }).pipe(Effect.catchTags({
+        "Pty.NotFoundError": () => closeAccepted(new Socket.CloseEvent(4404, "session not found")).pipe(Effect.as(undefined)),
+        "Pty.ExitedError": () => closeAccepted(new Socket.CloseEvent(4404, "session exited")).pipe(Effect.as(undefined))
+      }));
+      if (!attachment)
+        return HttpServerResponse.empty();
+      for (const chunk of PtyProtocol.chunks(attachment.replay))
+        Queue.offerUnsafe(outbox, chunk);
+      Queue.offerUnsafe(outbox, PtyProtocol.metaFrame(attachment.cursor));
+      attachment.activate();
+      const drain = Effect.gen(function* () {
+        while (true) {
+          const item = yield* Queue.take(outbox);
+          yield* write(item);
+          if (item instanceof Socket.CloseEvent)
+            return;
+        }
+      });
+      yield* runPtySocket2(drain, socket.runRaw((message) => {
+        const decoded = PtyProtocol.decodeInput(message);
+        if (decoded !== undefined)
+          attachment.write(decoded);
+      }), attachment.detach).pipe(Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.orDie);
       return HttpServerResponse.empty();
-    for (const chunk of PtyProtocol.chunks(attachment.replay))
-      Queue.offerUnsafe(outbox, chunk);
-    Queue.offerUnsafe(outbox, PtyProtocol.metaFrame(attachment.cursor));
-    attachment.activate();
-    const drain = Effect.gen(function* () {
-      while (true) {
-        const item = yield* Queue.take(outbox);
-        yield* write(item);
-        if (item instanceof Socket.CloseEvent)
-          return;
-      }
-    });
-    yield* runPtySocket2(drain, socket.runRaw((message) => {
-      const decoded = PtyProtocol.decodeInput(message);
-      if (decoded !== undefined)
-        attachment.write(decoded);
-    }), attachment.detach).pipe(Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.orDie);
-    return HttpServerResponse.empty();
+    }).pipe(Effect.provide(locations.get(ref)), locationErrors2);
   }));
 }));
 

package/dist/chunks/{options-nvmdgpqv.js → location-g85r3kcp.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/vcs.ts
 import { Vcs } from "@opencode/core/vcs";

package/dist/chunks/{options-30gqa6y8.js → location-gny2k2ap.js}

@@ -3,13 +3,13 @@ import {
   missingMessage2,
   failedMessageDecode2,
   failedSnapshot2
-} from "./options-smaf4a18.js";
+} from "./location-smaf4a18.js";
 import {
   locationErrors2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/session.ts
 import { Session } from "@opencode/core/session";

package/dist/chunks/{options-gtkdacvk.js → location-gtkdacvk.js}

@@ -4,7 +4,7 @@ import {
   authorized2,
   verifySession2,
   sessionCookieName2
-} from "./options-anm12x33.js";
+} from "./location-anm12x33.js";
 
 // src/middleware/authorization.ts
 import { UnauthorizedError } from "@opencode/protocol/errors";

package/dist/chunks/{options-ccfecbt4.js → location-hvft24jv.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/worktree.ts
 import { Git } from "@opencode/core/git";

package/dist/chunks/{options-387sf4vs.js → location-jzqzrtw5.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/migration.ts
 import { V1Migration } from "@opencode/core/database/v1-migration";

package/dist/chunks/{options-srcrrwjk.js → location-krn4521r.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/shell.ts
 import { Shell } from "@opencode/core/shell";

package/dist/chunks/{options-7nkw7zmw.js → location-m9xs9t19.js}

@@ -1,26 +1,26 @@
 import {
   isAllowedCorsOrigin2
-} from "./options-q4bn6dy8.js";
+} from "./location-q4bn6dy8.js";
 import {
   createRoutes2
-} from "./options-vkrn1g9x.js";
+} from "./location-ceje7ncg.js";
 import {
   __export
-} from "./options-9rqn6x4v.js";
+} from "./location-9rqn6x4v.js";
 
 // src/fetch.ts
 var exports_fetch = {};
 __export(exports_fetch, {
   ServerFetch: () => exports_fetch,
-  make: () => make2
+  make: () => make3
 });
 import { Context, Effect, Layer } from "effect";
 import { HttpEffect, HttpMiddleware, HttpRouter, HttpServer } from "effect/unstable/http";
 import { SessionRestart } from "@opencode/core/session/execution/restart";
-var make2 = Effect.fn("ServerFetch.make")(function* (options = {}, boot = {}) {
+var make3 = Effect.fn("ServerFetch.make")(function* (options = {}, boot = {}) {
   const context = yield* Layer.build(createRoutes2(options, () => [], boot.overrides ?? []).pipe(Layer.provide(HttpServer.layerServices)));
   yield* Effect.forkDetach(Context.get(context, SessionRestart.Service).resumeSuspendedSessions);
   return Context.get(context, HttpRouter.HttpRouter).asHttpEffect().pipe(HttpMiddleware.cors({ allowedOrigins: (origin) => isAllowedCorsOrigin2(origin, options), maxAge: 86400 }), HttpEffect.toWebHandlerWith(context));
 });
 
-export { make2, exports_fetch };
+export { make3, exports_fetch };

package/dist/chunks/{options-w8db1rkr.js → location-n52yc5x0.js}

@@ -1,9 +1,9 @@
 import {
   requestRef2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/debug.ts
 import { LocationServiceMap } from "@opencode/core/location-service-map";

package/dist/chunks/{options-kr61w04k.js → location-sstsrjtg.js}

@@ -1,12 +1,12 @@
 import {
   __export
-} from "./options-9rqn6x4v.js";
+} from "./location-9rqn6x4v.js";
 
 // src/pairing.ts
 var exports_pairing = {};
 __export(exports_pairing, {
   ServerPairing: () => exports_pairing,
-  Service: () => Service3,
+  Service: () => Service5,
   node: () => node3
 });
 import { Cache, Context, Duration, Effect, Layer } from "effect";
@@ -14,12 +14,12 @@ import { makeGlobalNode } from "@opencode/util/effect/app-node";
 import { randomBytes } from "node:crypto";
 var TTL = Duration.minutes(5);
 
-class Service3 extends Context.Service()("@opencode/ServerPairing") {
+class Service5 extends Context.Service()("@opencode/ServerPairing") {
 }
 var noLookup = () => Effect.die(new Error("ServerPairing cache must be used via set/invalidateWhen, never get"));
-var layer = Layer.effect(Service3, Effect.gen(function* () {
+var layer = Layer.effect(Service5, Effect.gen(function* () {
   const cache = yield* Cache.make({ capacity: 1000, lookup: noLookup, timeToLive: TTL });
-  return Service3.of({
+  return Service5.of({
     issue: Effect.fn("ServerPairing.issue")(function* () {
       const code = randomBytes(16).toString("base64url");
       yield* Cache.set(cache, code, true);
@@ -30,6 +30,6 @@ var layer = Layer.effect(Service3, Effect.gen(function* () {
     })
   });
 }));
-var node3 = makeGlobalNode({ service: Service3, layer, deps: [] });
+var node3 = makeGlobalNode({ service: Service5, layer, deps: [] });
 
-export { Service3, node3, exports_pairing };
+export { Service5, node3, exports_pairing };

package/dist/chunks/{options-fsrvj92d.js → location-td9k2nw3.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/model.ts
 import { Model } from "@opencode/core/model";

package/dist/chunks/{options-2vy10eeh.js → location-v9pcqbqn.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/form.ts
 import { Form } from "@opencode/core/form";

package/dist/chunks/{options-5fmydwgy.js → location-vb9atgxj.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/project.ts
 import { Project } from "@opencode/core/project";

package/dist/chunks/{options-d00srfh1.js → location-w070c2h2.js}

@@ -2,7 +2,7 @@ import {
   locationErrors2,
   sessionInfo2,
   requestRef2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 
 // src/middleware/form-location.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{options-62qjgyra.js → location-weqhmjbd.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/plugin.ts
 import { Plugin } from "@opencode/core/plugin";

package/dist/chunks/{options-k4rfktze.js → location-x2by5wsf.js}

@@ -1,13 +1,13 @@
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 import {
   CorsConfig2,
   isAllowedRequestOrigin2
-} from "./options-q4bn6dy8.js";
+} from "./location-q4bn6dy8.js";
 import {
   runPtySocket2
-} from "./options-hezj1jdf.js";
+} from "./location-hezj1jdf.js";
 
 // src/handlers/persistent-pty.ts
 import { PersistentPty } from "@opencode/core/persistent-pty";
@@ -64,13 +64,12 @@ var PersistentPtyHandler2 = HttpApiBuilder.group(Api2, "server.experimental", (h
     yield* pty.get(ctx.params.ptyID).pipe(mapTerminalError);
     return { data: yield* tickets.issue({ ptyID: ctx.params.ptyID }) };
   })).handleRaw("persistentPty.connect", Effect.fn("PersistentPtyHandler.connect")(function* (ctx) {
+    if (!isAllowedRequestOrigin2(ctx.request.headers.origin, ctx.request.headers.host, cors))
+      return HttpServerResponse.empty({ status: 403 });
     const url = new URL(ctx.request.url, "http://localhost");
     const ticket = url.searchParams.get(PTY_CONNECT_TICKET_QUERY);
-    if (ticket) {
-      const valid = isAllowedRequestOrigin2(ctx.request.headers.origin, ctx.request.headers.host, cors) ? yield* tickets.consume({ ticket, ptyID: ctx.params.ptyID }) : false;
-      if (!valid)
-        return HttpServerResponse.empty({ status: 403 });
-    }
+    if (ticket && !(yield* tickets.consume({ ticket, ptyID: ctx.params.ptyID })))
+      return HttpServerResponse.empty({ status: 403 });
     const cursor = Number(url.searchParams.get("cursor") ?? "0");
     const role = url.searchParams.get("role") === "observer" ? "observer" : "controller";
     const framedInput = url.searchParams.get("input_protocol") === "1";

package/dist/chunks/{options-5w24ch67.js → location-xsrtpxyd.js}

@@ -1,15 +1,15 @@
 import {
   __export
-} from "./options-9rqn6x4v.js";
+} from "./location-9rqn6x4v.js";
 
 // src/service-status.ts
 var exports_service_status = {};
 __export(exports_service_status, {
   Status: () => exports_service_status,
-  make: () => make3
+  make: () => make2
 });
 import { Effect, Ref } from "effect";
-var make3 = Effect.fnUntraced(function* (options = {}) {
+var make2 = Effect.fnUntraced(function* (options = {}) {
   const current = yield* Ref.make(options.initial ?? { type: "starting" });
   const beginStopping = Ref.update(current, (status) => status.type === "stopping" ? status : { type: "stopping" });
   return {
@@ -20,4 +20,4 @@ var make3 = Effect.fnUntraced(function* (options = {}) {
   };
 });
 
-export { make3, exports_service_status };
+export { make2, exports_service_status };

package/dist/chunks/{options-zhqf1t9m.js → location-y1grnrmm.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/rpc.ts
 import { Rpc } from "@opencode/core/rpc";

package/dist/chunks/{options-pg3sqc69.js → location-ym27c8rr.js}

@@ -1,14 +1,14 @@
 import {
   missingSession2
-} from "./options-smaf4a18.js";
+} from "./location-smaf4a18.js";
 import {
   locationErrors2,
   response2,
   sessionInfo2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/permission.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{options-qcy0p5fz.js → location-yybdkkb6.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./options-acgs9zzk.js";
+} from "./location-f2c3fmpg.js";
 import {
   Api2
-} from "./options-ep84ha6r.js";
+} from "./location-9cw9axw5.js";
 
 // src/handlers/agent.ts
 import { Agent } from "@opencode/core/agent";

package/dist/cors.js

@@ -2,7 +2,7 @@ import {
   CorsConfig2,
   isAllowedCorsOrigin2,
   isAllowedRequestOrigin2
-} from "./chunks/options-q4bn6dy8.js";
+} from "./chunks/location-q4bn6dy8.js";
 export {
   CorsConfig2 as CorsConfig,
   isAllowedCorsOrigin2 as isAllowedCorsOrigin,