@opencode/server 2.2.1 → 2.2.3

package/dist/chunks/{media-uri-b1prsepx.js → service-status-7dtbad8d.js}

@@ -1,22 +1,22 @@
 import {
   __export
-} from "./media-uri-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/server-info.ts
 var exports_server_info = {};
 __export(exports_server_info, {
   ServerInfo: () => exports_server_info,
-  Service: () => Service3,
+  Service: () => Service4,
   connectionURLs: () => connectionURLs2,
   layer: () => layer4
 });
 import { Context, Layer } from "effect";
 import { networkInterfaces } from "node:os";
 
-class Service3 extends Context.Service()("@opencode/server/ServerInfo") {
+class Service4 extends Context.Service()("@opencode/server/ServerInfo") {
 }
 function layer4(urls, tmp, app = {}) {
-  return Layer.succeed(Service3, Service3.of({ urls, app, paths: { tmp } }));
+  return Layer.succeed(Service4, Service4.of({ urls, app, paths: { tmp } }));
 }
 function connectionURLs2(value, requestedHostname) {
   const url = new URL(value);
@@ -38,4 +38,4 @@ function connectionURLs2(value, requestedHostname) {
   ];
 }
 
-export { Service3, layer4, connectionURLs2, exports_server_info };
+export { Service4, layer4, connectionURLs2, exports_server_info };

package/dist/chunks/{media-uri-xe9t9xr4.js → service-status-7tewdwsb.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/vcs.ts
 import { Vcs } from "@opencode/core/vcs";

package/dist/chunks/{media-uri-m5rae7m4.js → service-status-7x1re4zg.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/form.ts
 import { Form } from "@opencode/core/form";

package/dist/chunks/{media-uri-prdak4hd.js → service-status-9jpfpdce.js}

@@ -1,10 +1,10 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 import {
   Service2,
   frame2
-} from "./media-uri-fvpjvjpp.js";
+} from "./service-status-fvpjvjpp.js";
 
 // src/handlers/event.ts
 import { Event } from "@opencode/schema/event";

package/dist/chunks/{media-uri-0n1e9dnh.js → service-status-ac10qb5k.js}

@@ -1,13 +1,13 @@
 import {
   missingSession2,
   failedMessageDecode2
-} from "./media-uri-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 import {
   wantsMediaRefs2
-} from "./media-uri-xthc02cw.js";
+} from "./service-status-xthc02cw.js";
 
 // src/handlers/message.ts
 import { SessionMessage } from "@opencode/core/session/message";

package/dist/chunks/{media-uri-zjy4sw3d.js → service-status-bv5jg9y6.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/integration.ts
 import { Integration } from "@opencode/core/integration";
@@ -17,6 +17,25 @@ import {
   InvalidRequestError
 } from "@opencode/protocol/errors";
 import { WellKnown } from "@opencode/core/wellknown";
+import { Config } from "@opencode/core/config";
+import { ManagedPolicy } from "@opencode/core/managed-policy";
+var statements = Effect.fnUntraced(function* () {
+  const config = yield* Config.Service;
+  return ManagedPolicy.statements(yield* config.entries());
+});
+var isMcp = (integration) => integration?.metadata?.source === "mcp";
+var requireConnectable2 = Effect.fnUntraced(function* (integrationID) {
+  const integrations = yield* Integration.Service;
+  if (isMcp(yield* integrations.get(integrationID)))
+    return;
+  const denied = ManagedPolicy.match(yield* statements(), "integration.connect", integrationID);
+  if (denied?.effect !== "deny")
+    return;
+  return yield* new InvalidRequestError({
+    message: `${denied.message}: connecting ${integrationID} is not allowed`,
+    kind: "integration_policy"
+  });
+});
 var authorize = (effect) => effect.pipe(Effect.mapError((error) => new InvalidRequestError({
   message: error.cause instanceof Error && error.cause.message.trim() ? error.cause.message : "Authentication failed",
   kind: "integration_authorization"
@@ -25,7 +44,8 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   return handlers.handle("integration.list", Effect.fn(function* () {
     yield* Plugin.awaitActivation;
     const service = yield* Integration.Service;
-    return yield* response2(service.list());
+    const current = yield* statements();
+    return yield* response2(service.list().pipe(Effect.map((integrations) => integrations.filter((integration) => isMcp(integration) || ManagedPolicy.decision(current, "integration.connect", integration.id) !== "deny"))));
   })).handle("integration.get", Effect.fn(function* (ctx) {
     const service = yield* Integration.Service;
     const integration = yield* service.get(ctx.params.integrationID);
@@ -38,10 +58,12 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   })).handle("integration.wellknown.add", Effect.fn(function* (ctx) {
     const wellknown = yield* WellKnown.Service;
     const integration = yield* Integration.Service;
+    yield* requireConnectable2(Integration.ID.make(ctx.payload.url.replace(/\/+$/, "")));
     yield* wellknown.add(ctx.payload.url).pipe(Effect.mapError((error) => new InvalidRequestError({ message: error.message, kind: "well_known_discovery" })));
     yield* integration.reload();
     return HttpApiSchema.NoContent.make();
   })).handle("integration.connect.key", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     if (!(yield* service.get(ctx.params.integrationID)))
       return yield* new IntegrationNotFoundError({
@@ -56,6 +78,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     }));
     return HttpApiSchema.NoContent.make();
   })).handle("integration.connect.external", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     if (!(yield* service.get(ctx.params.integrationID)))
       return yield* new IntegrationNotFoundError({
@@ -70,6 +93,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     }));
     return HttpApiSchema.NoContent.make();
   })).handle("integration.oauth.connect", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     return yield* response2(authorize(service.oauth.connect({
       integrationID: ctx.params.integrationID,
@@ -124,6 +148,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     });
     return HttpApiSchema.NoContent.make();
   })).handle("integration.command.connect", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     const integration = yield* service.get(ctx.params.integrationID);
     if (!integration)
@@ -167,4 +192,4 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   }));
 }));
 
-export { IntegrationHandler2 };
+export { requireConnectable2, IntegrationHandler2 };

package/dist/chunks/{media-uri-8113w26k.js → service-status-dm74gm07.js}

@@ -1,18 +1,18 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 import {
   SESSION_TTL_SECONDS2,
   Config2,
   issueSession2,
   sessionCookieName2
-} from "./media-uri-j4at0y5c.js";
-import {
-  Service3
-} from "./media-uri-b1prsepx.js";
+} from "./service-status-j4at0y5c.js";
 import {
   Service4
-} from "./media-uri-mzs0n5xz.js";
+} from "./service-status-7dtbad8d.js";
+import {
+  Service3
+} from "./service-status-w9jcwh65.js";
 
 // src/handlers/server.ts
 import { hostname } from "node:os";
@@ -22,10 +22,10 @@ import { HttpApiBuilder } from "effect/http-api";
 import { PersistentPty } from "@opencode/core/persistent-pty";
 import { UnauthorizedError } from "@opencode/protocol/errors";
 var ServerHandler2 = HttpApiBuilder.group(Api2, "server.server", (handlers) => Effect.gen(function* () {
-  const pairing = yield* Service4;
+  const pairing = yield* Service3;
   const auth = yield* Config2;
   return handlers.handle("server.info", () => Effect.gen(function* () {
-    const info = yield* Service3;
+    const info = yield* Service4;
     return {
       version: info.app.version ?? "unknown",
       pid: process.pid ?? 0,

package/dist/chunks/{media-uri-hnheq3hv.js → service-status-f4exzdsf.js}

@@ -1,10 +1,10 @@
 import {
   awaitPlugins2,
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/agent.ts
 import { Agent } from "@opencode/core/agent";

package/dist/chunks/{media-uri-fvpjvjpp.js → service-status-fvpjvjpp.js}

@@ -1,6 +1,6 @@
 import {
   __export
-} from "./media-uri-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/event-feed.ts
 var exports_event_feed = {};

package/dist/chunks/{media-uri-h3g82chs.js → service-status-fvqb5t8b.js}

@@ -1,24 +1,29 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 import {
   CorsConfig2,
   isAllowedRequestOrigin2
-} from "./media-uri-q4bn6dy8.js";
+} from "./service-status-q4bn6dy8.js";
 import {
   makeMediaGet2
-} from "./media-uri-n321d8vm.js";
+} from "./service-status-n321d8vm.js";
 import {
   runPtySocket2
-} from "./media-uri-h6rt5k9s.js";
+} from "./service-status-h6rt5k9s.js";
 import {
   makeSchedule2
-} from "./media-uri-xzvdbbpy.js";
+} from "./service-status-059rbh9c.js";
 
 // src/handlers/persistent-pty.ts
 import { PersistentPty } from "@opencode/core/persistent-pty";
 import { PtyTicket } from "@opencode/core/pty/ticket";
-import { ForbiddenError, PtyNotFoundError, ServiceUnavailableError } from "@opencode/protocol/errors";
+import {
+  ForbiddenError,
+  InvalidRequestError,
+  PtyNotFoundError,
+  ServiceUnavailableError
+} from "@opencode/protocol/errors";
 import {
   PTY_CONNECT_TICKET_QUERY,
   PTY_CONNECT_TOKEN_HEADER,
@@ -48,7 +53,10 @@ var PersistentPtyHandler2 = HttpApiBuilder.group(Api2, "server.experimental", (h
         env: ctx.payload.env,
         cols: ctx.payload.size?.cols,
         rows: ctx.payload.size?.rows
-      }).pipe(Effect.catchTag("PersistentPty.UnavailableError", unavailable))
+      }).pipe(Effect.catchTags({
+        "PersistentPty.InvalidCwdError": (error) => new InvalidRequestError({ message: error.message, kind: "invalid_cwd", field: "cwd" }),
+        "PersistentPty.UnavailableError": unavailable
+      }))
     };
   })).handle("persistentPty.shutdown", Effect.fn(function* () {
     yield* pty.shutdown().pipe(mapUnavailable);

package/dist/chunks/{media-uri-gk0yxcp6.js → service-status-gk0yxcp6.js}

@@ -2,7 +2,7 @@ import {
   locationErrors2,
   sessionInfo2,
   requestRef2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 
 // src/middleware/form-location.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{media-uri-gqq6kfhc.js → service-status-gqq6kfhc.js}

@@ -1,6 +1,6 @@
 import {
   missingSession2
-} from "./media-uri-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 
 // src/location.ts
 import { FileSystem } from "@opencode/core/filesystem";

package/dist/chunks/{media-uri-j4at0y5c.js → service-status-j4at0y5c.js}

@@ -1,6 +1,6 @@
 import {
   __export
-} from "./media-uri-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/auth.ts
 var exports_auth = {};

package/dist/chunks/{media-uri-x8dgc261.js → service-status-jc2vwkyw.js}

@@ -1,9 +1,9 @@
 import {
   requestRef2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/debug.ts
 import { LocationServiceMap } from "@opencode/core/location-service-map";

package/dist/chunks/{media-uri-9c4eyh8m.js → service-status-r5696se6.js}

@@ -1,12 +1,12 @@
 import {
   LocationMiddleware2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   FormLocationMiddleware2
-} from "./media-uri-gk0yxcp6.js";
+} from "./service-status-gk0yxcp6.js";
 import {
   SessionLocationMiddleware2
-} from "./media-uri-yet0vexm.js";
+} from "./service-status-yet0vexm.js";
 
 // src/api.ts
 import { makeDefaultApi } from "@opencode/protocol/api";

package/dist/chunks/{media-uri-22wspztn.js → service-status-rxyx8sa0.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/shell.ts
 import { Shell } from "@opencode/core/shell";

package/dist/chunks/{media-uri-yr4wsvrw.js → service-status-skcryrty.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/reference.ts
 import { Reference } from "@opencode/core/reference";

package/dist/chunks/{media-uri-qn8kkfq6.js → service-status-sqxx1p54.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/plugin.ts
 import { Plugin } from "@opencode/core/plugin";

package/dist/chunks/{media-uri-h9rcwvg0.js → service-status-vfkjeyp3.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/worktree.ts
 import { Git } from "@opencode/core/git";

package/dist/chunks/{media-uri-hax1v4bv.js → service-status-vtfzy3at.js}

@@ -1,10 +1,10 @@
 import {
   awaitPlugins2,
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/provider.ts
 import { Provider } from "@opencode/core/provider";

package/dist/chunks/{media-uri-1je14sn4.js → service-status-vvp99hc9.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/migration.ts
 import { V1Migration } from "@opencode/core/database/v1-migration";

package/dist/chunks/{media-uri-mzs0n5xz.js → service-status-w9jcwh65.js}

@@ -1,12 +1,12 @@
 import {
   __export
-} from "./media-uri-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/pairing.ts
 var exports_pairing = {};
 __export(exports_pairing, {
   ServerPairing: () => exports_pairing,
-  Service: () => Service4,
+  Service: () => Service3,
   node: () => node2
 });
 import { Cache, Context, Duration, Effect, Layer } from "effect";
@@ -14,12 +14,12 @@ import { makeGlobalNode } from "@opencode/util/effect/app-node";
 import { randomBytes } from "node:crypto";
 var TTL = Duration.minutes(5);
 
-class Service4 extends Context.Service()("@opencode/ServerPairing") {
+class Service3 extends Context.Service()("@opencode/ServerPairing") {
 }
 var noLookup = () => Effect.die(new Error("ServerPairing cache must be used via set/invalidateWhen, never get"));
-var layer = Layer.effect(Service4, Effect.gen(function* () {
+var layer = Layer.effect(Service3, Effect.gen(function* () {
   const cache = yield* Cache.make({ capacity: 1000, lookup: noLookup, timeToLive: TTL });
-  return Service4.of({
+  return Service3.of({
     issue: Effect.fn("ServerPairing.issue")(function* () {
       const code = randomBytes(16).toString("base64url");
       yield* Cache.set(cache, code, true);
@@ -30,6 +30,6 @@ var layer = Layer.effect(Service4, Effect.gen(function* () {
     })
   });
 }));
-var node2 = makeGlobalNode({ service: Service4, layer, deps: [] });
+var node2 = makeGlobalNode({ service: Service3, layer, deps: [] });
 
-export { Service4, node2, exports_pairing };
+export { Service3, node2, exports_pairing };

package/dist/chunks/{media-uri-c6sjpm0r.js → service-status-wqv43pj9.js}

@@ -1,10 +1,10 @@
 import {
   locationErrors2,
   awaitPlugins2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/generate.ts
 import { Generate } from "@opencode/core/generate";

package/dist/chunks/{media-uri-6vs5sqy6.js → service-status-xbqm7mpj.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/skill.ts
 import { Skill } from "@opencode/core/skill";

package/dist/chunks/{media-uri-z59gyc0x.js → service-status-xpg37vzc.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/command.ts
 import { Command } from "@opencode/core/command";

package/dist/chunks/{media-uri-yet0vexm.js → service-status-yet0vexm.js}

@@ -1,7 +1,7 @@
 import {
   locationErrors2,
   sessionInfo2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 
 // src/middleware/session-location.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{media-uri-wd7b20jw.js → service-status-zkg10e14.js}

@@ -3,16 +3,16 @@ import {
   missingMessage2,
   failedMessageDecode2,
   failedSnapshot2
-} from "./media-uri-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 import {
   locationErrors2
-} from "./media-uri-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 import {
   wantsMediaRefs2
-} from "./media-uri-xthc02cw.js";
+} from "./service-status-xthc02cw.js";
 
 // src/handlers/session.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{media-uri-dk68ymtv.js → service-status-zmgfywqd.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/project.ts
 import { Project } from "@opencode/core/project";

package/dist/chunks/{media-uri-2xcc0x05.js → service-status-zyntahe8.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./media-uri-9c4eyh8m.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/rpc.ts
 import { Rpc } from "@opencode/core/rpc";

package/dist/cors.js

@@ -2,7 +2,7 @@ import {
   CorsConfig2,
   isAllowedCorsOrigin2,
   isAllowedRequestOrigin2
-} from "./chunks/media-uri-q4bn6dy8.js";
+} from "./chunks/service-status-q4bn6dy8.js";
 export {
   CorsConfig2 as CorsConfig,
   isAllowedCorsOrigin2 as isAllowedCorsOrigin,

package/dist/event-feed.js

@@ -7,7 +7,7 @@ import {
   make4,
   layer2,
   exports_event_feed
-} from "./chunks/media-uri-fvpjvjpp.js";
+} from "./chunks/service-status-fvpjvjpp.js";
 export {
   EncodingError2 as EncodingError,
   exports_event_feed as EventFeed,