@opencode/server 2.0.8 → 2.0.9

package/dist/chunks/fetch-rcg4y18n.js

@@ -0,0 +1,59 @@
+import {
+  missingSession2,
+  failedMessageDecode2
+} from "./fetch-smaf4a18.js";
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+
+// src/handlers/message.ts
+import { SessionMessage } from "@opencode/core/session/message";
+import { Session } from "@opencode/core/session";
+import { Effect, Schema } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { InvalidCursorError } from "@opencode/protocol/errors";
+var DefaultMessagesLimit = 50;
+var Cursor = Schema.Struct({
+  id: SessionMessage.ID,
+  order: Schema.Union([Schema.Literal("asc"), Schema.Literal("desc")]),
+  direction: Schema.Union([Schema.Literal("previous"), Schema.Literal("next")])
+});
+var decodeCursor = Schema.decodeUnknownSync(Cursor);
+var cursor = {
+  encode(message, order, direction) {
+    return Buffer.from(JSON.stringify({ id: message.id, order, direction })).toString("base64url");
+  },
+  decode(input) {
+    return decodeCursor(JSON.parse(Buffer.from(input, "base64url").toString("utf8")));
+  }
+};
+var MessageHandler2 = HttpApiBuilder.group(Api2, "server.message", (handlers) => Effect.gen(function* () {
+  const session = yield* Session.Service;
+  return handlers.handle("session.messages", Effect.fn(function* (ctx) {
+    if (ctx.query.cursor && ctx.query.order !== undefined)
+      return yield* new InvalidCursorError({ message: "Cursor cannot be combined with order" });
+    const decoded = yield* Effect.try({
+      try: () => ctx.query.cursor ? cursor.decode(ctx.query.cursor) : undefined,
+      catch: () => new InvalidCursorError({ message: "Invalid cursor" })
+    });
+    const order = decoded?.order ?? ctx.query.order ?? "desc";
+    const messages = yield* session.messages({
+      sessionID: ctx.params.sessionID,
+      limit: ctx.query.limit ?? DefaultMessagesLimit,
+      order,
+      type: ctx.query.type,
+      cursor: decoded ? { id: decoded.id, direction: decoded.direction } : undefined
+    }).pipe(Effect.catchTag("Session.NotFoundError", missingSession2), Effect.catchTag("Session.MessageDecodeError", failedMessageDecode2));
+    const first = messages[0];
+    const last = messages.at(-1);
+    return {
+      data: messages,
+      cursor: {
+        previous: first ? cursor.encode(first, order, "previous") : undefined,
+        next: last ? cursor.encode(last, order, "next") : undefined
+      }
+    };
+  }));
+}));
+
+export { MessageHandler2 };

package/dist/chunks/fetch-req22b70.js

@@ -0,0 +1,22 @@
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+
+// src/handlers/location.ts
+import { Location } from "@opencode/core/location";
+import { LocationServiceMap } from "@opencode/core/location-service-map";
+import { ServiceUnavailableError } from "@opencode/protocol/errors";
+import { Cause, Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+var LocationHandler2 = HttpApiBuilder.group(Api2, "server.location", (handlers) => Effect.gen(function* () {
+  const locations = yield* LocationServiceMap.Service;
+  return handlers.handle("location.get", Effect.fn(function* () {
+    const location = yield* Location.Service;
+    return new Location.Info({
+      directory: location.directory,
+      project: location.project
+    });
+  })).handle("location.reload", () => LocationServiceMap.reload().pipe(Effect.provideService(LocationServiceMap.Service, locations), Effect.catchCause((cause) => Cause.hasInterruptsOnly(cause) ? Effect.failCause(cause) : Effect.fail(new ServiceUnavailableError({ message: Cause.pretty(cause), service: "location" })))));
+}));
+
+export { LocationHandler2 };

package/dist/chunks/fetch-s4aja1df.js

@@ -0,0 +1,36 @@
+import {
+  __export
+} from "./fetch-9rqn6x4v.js";
+
+// src/server-info.ts
+var exports_server_info = {};
+__export(exports_server_info, {
+  ServerInfo: () => exports_server_info,
+  Service: () => Service2,
+  connectionURLs: () => connectionURLs2,
+  layer: () => layer2
+});
+import { Context, Layer } from "effect";
+import { networkInterfaces } from "node:os";
+
+class Service2 extends Context.Service()("@opencode/server/ServerInfo") {
+}
+function layer2(urls, tmp, app = {}) {
+  return Layer.succeed(Service2, Service2.of({ urls, app, paths: { tmp } }));
+}
+function connectionURLs2(value, requestedHostname) {
+  const url = new URL(value);
+  const hostname = requestedHostname ?? url.hostname;
+  const family = hostname === "0.0.0.0" ? "IPv4" : hostname === "::" || hostname === "[::]" ? "IPv6" : undefined;
+  if (family === undefined)
+    return [value];
+  return [
+    ...new Set(Object.values(networkInterfaces()).flatMap((entries) => entries ?? []).filter((entry) => !entry.internal && entry.family === family).map((entry) => {
+      const result = new URL(value);
+      result.hostname = family === "IPv6" ? `[${entry.address}]` : entry.address;
+      return result.toString().replace(/\/$/, "");
+    }))
+  ];
+}
+
+export { Service2, layer2, connectionURLs2, exports_server_info };

package/dist/chunks/fetch-smaf4a18.js

@@ -0,0 +1,28 @@
+// src/handlers/session-error.ts
+import { MessageNotFoundError, SessionNotFoundError, UnknownError } from "@opencode/protocol/errors";
+import { Effect } from "effect";
+function missingSession2(error) {
+  return new SessionNotFoundError({
+    sessionID: error.sessionID,
+    message: `Session not found: ${error.sessionID}`
+  });
+}
+function missingMessage2(error) {
+  return new MessageNotFoundError({
+    sessionID: error.sessionID,
+    messageID: error.messageID,
+    message: `Message not found: ${error.messageID}`
+  });
+}
+function failedMessageDecode2(error) {
+  const ref = `err_${crypto.randomUUID().slice(0, 8)}`;
+  return Effect.logError("failed to decode session message").pipe(Effect.annotateLogs({ ref, sessionID: error.sessionID, messageID: error.messageID }), Effect.andThen(Effect.fail(new UnknownError({ message: "Unexpected server error. Check server logs for details.", ref }))));
+}
+function failedSnapshot2(operation, sessionID) {
+  return (error) => {
+    const ref = `err_${crypto.randomUUID().slice(0, 8)}`;
+    return Effect.logError(`failed to ${operation}`, { cause: error }).pipe(Effect.annotateLogs({ ref, sessionID }), Effect.andThen(Effect.fail(new UnknownError({ message: "Unexpected server error. Check server logs for details.", ref }))));
+  };
+}
+
+export { missingSession2, missingMessage2, failedMessageDecode2, failedSnapshot2 };

package/dist/chunks/fetch-t8yzmczr.js

@@ -0,0 +1,18 @@
+// src/middleware/schema-error.ts
+import { Effect } from "effect";
+import { HttpApiMiddleware } from "effect/unstable/httpapi";
+import { InvalidRequestError } from "@opencode/protocol/errors";
+import { SchemaErrorMiddleware } from "@opencode/protocol/middleware/schema-error";
+import { SchemaErrorMiddleware as SchemaErrorMiddleware2 } from "@opencode/protocol/middleware/schema-error";
+var REASON_LIMIT = 1024;
+function truncateReason(reason) {
+  if (reason.length <= REASON_LIMIT)
+    return reason;
+  return reason.slice(0, REASON_LIMIT) + `... (${reason.length - REASON_LIMIT} more chars)`;
+}
+var schemaErrorLayer2 = HttpApiMiddleware.layerSchemaErrorTransform(SchemaErrorMiddleware, (error) => {
+  const reason = truncateReason(error.cause.message);
+  return Effect.logWarning("schema rejection").pipe(Effect.annotateLogs({ kind: error.kind, reason }), Effect.andThen(Effect.fail(new InvalidRequestError({ message: reason, kind: error.kind }))));
+});
+
+export { schemaErrorLayer2, SchemaErrorMiddleware2 };

package/dist/chunks/fetch-vgpejxxy.js

@@ -0,0 +1,149 @@
+import {
+  layer4
+} from "./fetch-6gkz39ey.js";
+import {
+  formLocationLayer2
+} from "./fetch-5rwqcaw2.js";
+import {
+  sessionLocationLayer2
+} from "./fetch-3kzx88w9.js";
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+import {
+  Config2
+} from "./fetch-zyv89x5n.js";
+import {
+  CorsConfig2
+} from "./fetch-q4bn6dy8.js";
+import {
+  layer2
+} from "./fetch-s4aja1df.js";
+import {
+  node2
+} from "./fetch-0d9kah4z.js";
+import {
+  handlers2
+} from "./fetch-csspsf0t.js";
+import {
+  authorizationLayer2
+} from "./fetch-m6wvgbfq.js";
+import {
+  schemaErrorLayer2
+} from "./fetch-t8yzmczr.js";
+
+// src/routes.ts
+import { Database } from "@opencode/core/database/database";
+import { V1Migration } from "@opencode/core/database/v1-migration";
+import { App } from "@opencode/core/app";
+import { LayerNode } from "@opencode/util/effect/layer-node";
+import { httpClient } from "@opencode/util/effect/app-node-platform";
+import { AppNodeBuilder } from "@opencode/core/effect/app-node-builder";
+import { Bus } from "@opencode/core/bus";
+import { EventLogger } from "@opencode/core/event-logger";
+import { FileSystemSearch } from "@opencode/core/filesystem/search";
+import { Credential } from "@opencode/core/credential";
+import { Config } from "@opencode/core/config";
+import { PermissionSaved } from "@opencode/core/permission/saved";
+import { PtyTicket } from "@opencode/core/pty/ticket";
+import { PersistentPty } from "@opencode/core/persistent-pty";
+import { Project } from "@opencode/core/project";
+import { Worktree } from "@opencode/core/worktree";
+import { Session } from "@opencode/core/session";
+import { Instance } from "@opencode/core/instance/service";
+import { SessionTransfer } from "@opencode/core/session/transfer";
+import { ShellSelect } from "@opencode/core/shell/select";
+import { Job } from "@opencode/core/job";
+import { Mcp } from "@opencode/core/mcp/index";
+import { Global } from "@opencode/util/global";
+import { InstructionDiscovery } from "@opencode/core/instruction-discovery";
+import { LocationServiceMap } from "@opencode/core/location-service-map";
+import { LocationActivity } from "@opencode/core/location-activity";
+import { ModelsDev } from "@opencode/core/models-dev";
+import { SessionRestart } from "@opencode/core/session/execution/restart";
+import { PluginUpdate } from "@opencode/core/plugin/update";
+import { SdkPlugins } from "@opencode/core/plugin/sdk";
+import { WellKnown } from "@opencode/core/wellknown";
+import { Workspace } from "@opencode/core/workspace";
+import { Watcher } from "@opencode/core/filesystem/watcher";
+import { HttpRouter } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { Context, Effect, Layer, Option } from "effect";
+var applicationServiceNodes = [
+  Global.node,
+  Database.node,
+  Bus.node,
+  EventLogger.node,
+  httpClient,
+  Job.node,
+  Project.node,
+  Worktree.node,
+  Session.node,
+  Instance.node,
+  SessionTransfer.node,
+  SdkPlugins.node,
+  PluginUpdate.node,
+  PermissionSaved.node,
+  PtyTicket.node,
+  PersistentPty.node,
+  Credential.node,
+  WellKnown.node,
+  node2,
+  LocationServiceMap.node,
+  LocationActivity.node,
+  SessionRestart.node,
+  Workspace.node
+];
+var applicationServices = LayerNode.group(applicationServiceNodes);
+function createRoutes2(options = {}, serviceURLs = () => [], overrides = []) {
+  return makeRoutes(options.password ? Config2.configLayer({ password: Option.some(options.password) }) : Config2.layer, options, serviceURLs, overrides);
+}
+function createEmbeddedRoutes2(options = {}, overrides = [], instances) {
+  return makeRoutes(Config2.configLayer({ password: Option.none() }), options, () => [], overrides, instances);
+}
+function makeRoutes(auth, options, serviceURLs, overrides, instances) {
+  const standard = [
+    Database.node.replace(Database.configured(options.database)),
+    PersistentPty.node.replace(PersistentPty.configured(options.pty)),
+    Bus.node.replace(Bus.configured({ persist: options.events?.persist })),
+    App.node.replace(App.configured(options.app)),
+    ModelsDev.node.replace(ModelsDev.configured(options.models)),
+    Watcher.node.replace(Watcher.configured({ enabled: options.fs?.filewatcher })),
+    FileSystemSearch.node.replace(FileSystemSearch.configured({ fff: options.fs?.fff })),
+    Global.node.replace(Global.layerWith(options.config?.directory ? { config: options.config.directory } : {})),
+    Config.node.replace(Config.configured({
+      project: options.config?.project,
+      file: options.config?.file,
+      content: options.config?.content
+    })),
+    InstructionDiscovery.node.replace(InstructionDiscovery.configured({ project: options.config?.project })),
+    ShellSelect.node.replace(ShellSelect.configured({ gitbash: options.windows?.gitbash })),
+    Mcp.node.replace(Mcp.configured({
+      clientInfo: {
+        name: options.app?.name ?? "opencode",
+        version: options.app?.version ?? "unknown"
+      }
+    }))
+  ];
+  const build = (overrides) => {
+    const replacements = [
+      ...standard,
+      ...instances ? [Instance.node.replace(instances(() => replacements))] : [],
+      ...overrides
+    ];
+    return AppNodeBuilder.build(applicationServices, replacements);
+  };
+  const serviceLayer = options.simulation ? Layer.unwrap(Effect.gen(function* () {
+    const { simulationReplacements } = yield* Effect.promise(() => import("@opencode/simulation/backend"));
+    const simulation = yield* simulationReplacements({ version: App.make(options.app).version });
+    return build([...overrides, ...simulation]);
+  })) : build(overrides);
+  return serviceLayer.pipe(Layer.flatMap((context) => {
+    const services = Layer.succeedContext(context);
+    const requestServices = Layer.merge(Layer.succeedContext(Context.pick(Database.Service, Credential.Service, PermissionSaved.Service, PluginUpdate.Service, Project.Service, WellKnown.Service)(context)), layer2(serviceURLs, Context.get(context, Global.Service).tmp, options.app));
+    const api = HttpApiBuilder.layer(Api2, { openapiPath: "/openapi.json" }).pipe(Layer.provide(handlers2.pipe(Layer.provide(services), Layer.provide(Layer.succeed(CorsConfig2, options)))), Layer.provide(formLocationLayer2), Layer.provide(sessionLocationLayer2), Layer.provide(layer4), Layer.provide(authorizationLayer2), Layer.provide(schemaErrorLayer2), Layer.provide(auth), HttpRouter.provideRequest(requestServices), Layer.provideMerge(services), Layer.provideMerge(HttpRouter.layer));
+    return Layer.merge(api, V1Migration.layer.pipe(Layer.provide(services)));
+  }));
+}
+
+export { createRoutes2, createEmbeddedRoutes2 };

package/dist/chunks/fetch-xsrtpxyd.js

@@ -0,0 +1,23 @@
+import {
+  __export
+} from "./fetch-9rqn6x4v.js";
+
+// src/service-status.ts
+var exports_service_status = {};
+__export(exports_service_status, {
+  Status: () => exports_service_status,
+  make: () => make2
+});
+import { Effect, Ref } from "effect";
+var make2 = Effect.fnUntraced(function* (options = {}) {
+  const current = yield* Ref.make(options.initial ?? { type: "starting" });
+  const beginStopping = Ref.update(current, (status) => status.type === "stopping" ? status : { type: "stopping" });
+  return {
+    current: Ref.get(current),
+    ready: Ref.update(current, (status) => status.type === "starting" ? { type: "ready" } : status),
+    fail: Ref.update(current, (status) => status.type === "starting" ? { type: "failed" } : status),
+    beginStopping
+  };
+});
+
+export { make2, exports_service_status };

package/dist/chunks/fetch-yc7nft6q.js

@@ -0,0 +1,5 @@
+// src/request-tracing.ts
+import { Context, Effect, Tracer } from "effect";
+var withoutParentSpan2 = (effect) => effect.pipe(Effect.updateContext((context) => Context.omit(Tracer.ParentSpan)(context)));
+
+export { withoutParentSpan2 };

package/dist/chunks/fetch-ychamt23.js

@@ -0,0 +1,139 @@
+import {
+  response2
+} from "./fetch-6gkz39ey.js";
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+import {
+  CorsConfig2,
+  isAllowedRequestOrigin2
+} from "./fetch-q4bn6dy8.js";
+import {
+  Service3
+} from "./fetch-0d9kah4z.js";
+import {
+  runPtySocket2
+} from "./fetch-hezj1jdf.js";
+
+// src/handlers/pty.ts
+import { Pty } from "@opencode/core/pty";
+import { PtyProtocol } from "@opencode/core/pty/protocol";
+import { PtyTicket } from "@opencode/core/pty/ticket";
+import { Location } from "@opencode/core/location";
+import { Effect, Queue } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { HttpApiBuilder, HttpApiSchema } from "effect/unstable/httpapi";
+import { Socket } from "effect/unstable/socket";
+import { ForbiddenError, PtyNotFoundError } from "@opencode/protocol/errors";
+import {
+  PTY_CONNECT_TICKET_QUERY,
+  PTY_CONNECT_TOKEN_HEADER,
+  PTY_CONNECT_TOKEN_HEADER_VALUE
+} from "@opencode/protocol/groups/pty";
+var ticketScope = Effect.gen(function* () {
+  const location = yield* Location.Service;
+  return { directory: location.directory, workspaceID: location.workspaceID };
+});
+var PtyHandler2 = HttpApiBuilder.group(Api2, "server.pty", (handlers) => Effect.gen(function* () {
+  const tickets = yield* PtyTicket.Service;
+  const cors = yield* CorsConfig2;
+  const environment = yield* Service3;
+  return handlers.handle("pty.list", Effect.fn(function* () {
+    const pty = yield* Pty.Service;
+    return yield* response2(pty.list());
+  })).handle("pty.create", Effect.fn(function* (ctx) {
+    const pty = yield* Pty.Service;
+    const location = yield* Location.Service;
+    const cwd = ctx.payload.cwd || location.directory;
+    return yield* response2(pty.create({
+      ...ctx.payload,
+      args: ctx.payload.args ? [...ctx.payload.args] : undefined,
+      cwd,
+      env: {
+        ...ctx.payload.env,
+        ...yield* environment.get({ directory: location.directory, cwd })
+      }
+    }));
+  })).handle("pty.get", Effect.fn(function* (ctx) {
+    const pty = yield* Pty.Service;
+    return yield* response2(pty.get(ctx.params.ptyID).pipe(Effect.catchTag("Pty.NotFoundError", () => new PtyNotFoundError({
+      ptyID: ctx.params.ptyID,
+      message: `PTY session not found: ${ctx.params.ptyID}`
+    }))));
+  })).handle("pty.update", Effect.fn(function* (ctx) {
+    const pty = yield* Pty.Service;
+    return yield* response2(pty.update(ctx.params.ptyID, {
+      ...ctx.payload,
+      size: ctx.payload.size ? { ...ctx.payload.size } : undefined
+    }).pipe(Effect.catchTag("Pty.NotFoundError", () => new PtyNotFoundError({
+      ptyID: ctx.params.ptyID,
+      message: `PTY session not found: ${ctx.params.ptyID}`
+    }))));
+  })).handle("pty.remove", Effect.fn(function* (ctx) {
+    const pty = yield* Pty.Service;
+    yield* pty.remove(ctx.params.ptyID).pipe(Effect.catchTag("Pty.NotFoundError", () => new PtyNotFoundError({
+      ptyID: ctx.params.ptyID,
+      message: `PTY session not found: ${ctx.params.ptyID}`
+    })));
+    return HttpApiSchema.NoContent.make();
+  })).handle("pty.connectToken", Effect.fn(function* (ctx) {
+    const request = yield* HttpServerRequest.HttpServerRequest;
+    if (request.headers[PTY_CONNECT_TOKEN_HEADER] !== PTY_CONNECT_TOKEN_HEADER_VALUE || !isAllowedRequestOrigin2(request.headers.origin, request.headers.host, cors))
+      return yield* new ForbiddenError({ message: "Invalid PTY connect token request" });
+    const pty = yield* Pty.Service;
+    yield* pty.get(ctx.params.ptyID).pipe(Effect.catchTag("Pty.NotFoundError", () => new PtyNotFoundError({
+      ptyID: ctx.params.ptyID,
+      message: `PTY session not found: ${ctx.params.ptyID}`
+    })));
+    return yield* response2(tickets.issue({ ptyID: ctx.params.ptyID, ...yield* ticketScope }));
+  })).handleRaw("pty.connect", Effect.fn("PtyHandler.connect")(function* (ctx) {
+    const pty = yield* Pty.Service;
+    const exists = yield* pty.get(ctx.params.ptyID).pipe(Effect.as(true), Effect.catchTag("Pty.NotFoundError", () => Effect.succeed(false)));
+    if (!exists)
+      return HttpServerResponse.empty({ status: 404 });
+    const url = new URL(ctx.request.url, "http://localhost");
+    const ticket = url.searchParams.get(PTY_CONNECT_TICKET_QUERY);
+    if (ticket) {
+      const valid = isAllowedRequestOrigin2(ctx.request.headers.origin, ctx.request.headers.host, cors) ? yield* tickets.consume({ ticket, ptyID: ctx.params.ptyID, ...yield* ticketScope }) : false;
+      if (!valid)
+        return HttpServerResponse.empty({ status: 403 });
+    }
+    const parsedCursor = url.searchParams.get("cursor");
+    const cursorNumber = parsedCursor === null ? undefined : Number(parsedCursor);
+    const cursor = cursorNumber !== undefined && Number.isSafeInteger(cursorNumber) && cursorNumber >= -1 ? cursorNumber : undefined;
+    const socket = yield* Effect.orDie(ctx.request.upgrade);
+    const write = yield* socket.writer;
+    const closeAccepted = (event) => socket.runRaw(() => Effect.void, { onOpen: write(event).pipe(Effect.catch(() => Effect.void)) }).pipe(Effect.timeout("1 second"), Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.catch(() => Effect.void));
+    const outbox = yield* Queue.unbounded();
+    const attachment = yield* pty.attach(ctx.params.ptyID, {
+      cursor,
+      onData: (chunk) => Queue.offerUnsafe(outbox, chunk),
+      onEnd: () => Queue.offerUnsafe(outbox, new Socket.CloseEvent(1000))
+    }).pipe(Effect.catchTags({
+      "Pty.NotFoundError": () => closeAccepted(new Socket.CloseEvent(4404, "session not found")).pipe(Effect.as(undefined)),
+      "Pty.ExitedError": () => closeAccepted(new Socket.CloseEvent(4404, "session exited")).pipe(Effect.as(undefined))
+    }));
+    if (!attachment)
+      return HttpServerResponse.empty();
+    for (const chunk of PtyProtocol.chunks(attachment.replay))
+      Queue.offerUnsafe(outbox, chunk);
+    Queue.offerUnsafe(outbox, PtyProtocol.metaFrame(attachment.cursor));
+    attachment.activate();
+    const drain = Effect.gen(function* () {
+      while (true) {
+        const item = yield* Queue.take(outbox);
+        yield* write(item);
+        if (item instanceof Socket.CloseEvent)
+          return;
+      }
+    });
+    yield* runPtySocket2(drain, socket.runRaw((message) => {
+      const decoded = PtyProtocol.decodeInput(message);
+      if (decoded !== undefined)
+        attachment.write(decoded);
+    }), attachment.detach).pipe(Effect.catchReason("SocketError", "SocketCloseError", () => Effect.void), Effect.orDie);
+    return HttpServerResponse.empty();
+  }));
+}));
+
+export { PtyHandler2 };

package/dist/chunks/fetch-ysabas57.js

@@ -0,0 +1,13 @@
+import {
+  response2
+} from "./fetch-6gkz39ey.js";
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+
+// src/handlers/reference.ts
+import { Reference } from "@opencode/core/reference";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+var ReferenceHandler2 = HttpApiBuilder.group(Api2, "server.reference", (handlers) => handlers.handle("reference.list", () => response2(Reference.Service.use((reference) => reference.list()))));
+
+export { ReferenceHandler2 };

package/dist/chunks/fetch-z5shrcz9.js

@@ -0,0 +1,19 @@
+import {
+  LocationMiddleware2
+} from "./fetch-6gkz39ey.js";
+import {
+  FormLocationMiddleware2
+} from "./fetch-5rwqcaw2.js";
+import {
+  SessionLocationMiddleware2
+} from "./fetch-3kzx88w9.js";
+
+// src/api.ts
+import { makeDefaultApi } from "@opencode/protocol/api";
+var Api2 = makeDefaultApi({
+  locationMiddleware: LocationMiddleware2,
+  formLocationMiddleware: FormLocationMiddleware2,
+  sessionLocationMiddleware: SessionLocationMiddleware2
+});
+
+export { Api2 };

package/dist/chunks/fetch-zp2jm6dt.js

@@ -0,0 +1,15 @@
+import {
+  Api2
+} from "./fetch-z5shrcz9.js";
+
+// src/handlers/project.ts
+import { Project } from "@opencode/core/project";
+import { Effect } from "effect";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { ProjectNotFoundError } from "@opencode/protocol/errors";
+var ProjectHandler2 = HttpApiBuilder.group(Api2, "server.project", (handlers) => handlers.handle("project.list", () => Project.Service.use((project) => project.list())).handle("project.update", (ctx) => Project.Service.use((project) => project.update({ ...ctx.payload, projectID: ctx.params.projectID }).pipe(Effect.mapError(() => new ProjectNotFoundError({
+  projectID: ctx.params.projectID,
+  message: `Project not found: ${ctx.params.projectID}`
+}))))));
+
+export { ProjectHandler2 };

package/dist/chunks/fetch-zyv89x5n.js

@@ -0,0 +1,30 @@
+import {
+  __export
+} from "./fetch-9rqn6x4v.js";
+
+// src/auth.ts
+var exports_auth = {};
+__export(exports_auth, {
+  Config: () => Config2,
+  ServerAuth: () => exports_auth,
+  authorized: () => authorized2,
+  required: () => required2
+});
+import { Context, Layer, Option, Redacted } from "effect";
+
+class Config2 extends Context.Service()("@opencode/ServerAuthConfig") {
+  static configLayer(input) {
+    return Layer.succeed(this, this.of({ ...input, username: "opencode" }));
+  }
+  static get layer() {
+    return this.configLayer({ password: Option.none() });
+  }
+}
+function required2(config) {
+  return Option.isSome(config.password) && config.password.value !== "";
+}
+function authorized2(credentials, config) {
+  return Option.isSome(config.password) && credentials.username === config.username && Redacted.value(credentials.password) === config.password.value;
+}
+
+export { Config2, required2, authorized2, exports_auth };

package/dist/cors.js

@@ -1,36 +1,10 @@
-import { Context } from "effect";
-const opencodeOrigin = /^https:\/\/([a-z0-9-]+\.)*opencode\.ai$/;
-export const CorsConfig = Context.Reference("@opencode/ServerCorsConfig", {
-  defaultValue: () => {
-    return;
-  }
-});
-export function isAllowedCorsOrigin(input, opts) {
-  if (!input)
-    return !0;
-  if (input.startsWith("http://localhost:"))
-    return !0;
-  if (input.startsWith("http://127.0.0.1:"))
-    return !0;
-  if (input.startsWith("oc://renderer"))
-    return !0;
-  if (input === "tauri://localhost" || input === "http://tauri.localhost" || input === "https://tauri.localhost")
-    return !0;
-  if (opencodeOrigin.test(input))
-    return !0;
-  return opts?.cors?.includes(input) ?? !1;
-}
-export function isAllowedRequestOrigin(input, host, opts) {
-  if (!input)
-    return !0;
-  if (host && sameHost(input, host))
-    return !0;
-  return isAllowedCorsOrigin(input, opts);
-}
-function sameHost(origin, host) {
-  try {
-    return new URL(origin).host === host;
-  } catch {
-    return !1;
-  }
-}
+import {
+  CorsConfig2,
+  isAllowedCorsOrigin2,
+  isAllowedRequestOrigin2
+} from "./chunks/fetch-q4bn6dy8.js";
+export {
+  CorsConfig2 as CorsConfig,
+  isAllowedCorsOrigin2 as isAllowedCorsOrigin,
+  isAllowedRequestOrigin2 as isAllowedRequestOrigin
+};