@opencode/server 2.2.2 → 2.2.3

package/dist/chunks/{workerd-7tewdwsb.js → service-status-7tewdwsb.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/vcs.ts
 import { Vcs } from "@opencode/core/vcs";

package/dist/chunks/{workerd-7x1re4zg.js → service-status-7x1re4zg.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/form.ts
 import { Form } from "@opencode/core/form";

package/dist/chunks/{workerd-zhns4s2s.js → service-status-9jpfpdce.js}

@@ -1,10 +1,10 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 import {
-  Service3,
+  Service2,
   frame2
-} from "./workerd-20b2yx1f.js";
+} from "./service-status-fvpjvjpp.js";
 
 // src/handlers/event.ts
 import { Event } from "@opencode/schema/event";
@@ -12,7 +12,7 @@ import { Effect, Stream } from "effect";
 import { HttpServerResponse } from "effect/http";
 import { HttpApiBuilder } from "effect/http-api";
 var EventHandler2 = HttpApiBuilder.group(Api2, "server.event", (handlers) => Effect.gen(function* () {
-  const feed = yield* Service3;
+  const feed = yield* Service2;
   return handlers.handleRaw("event.subscribe", (ctx) => Effect.gen(function* () {
     const connected = {
       id: Event.ID.create(),

package/dist/chunks/{workerd-5553qfcy.js → service-status-ac10qb5k.js}

@@ -1,13 +1,13 @@
 import {
   missingSession2,
   failedMessageDecode2
-} from "./workerd-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 import {
   wantsMediaRefs2
-} from "./workerd-xthc02cw.js";
+} from "./service-status-xthc02cw.js";
 
 // src/handlers/message.ts
 import { SessionMessage } from "@opencode/core/session/message";

package/dist/chunks/{workerd-4gk9fc6f.js → service-status-bv5jg9y6.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/integration.ts
 import { Integration } from "@opencode/core/integration";
@@ -17,6 +17,25 @@ import {
   InvalidRequestError
 } from "@opencode/protocol/errors";
 import { WellKnown } from "@opencode/core/wellknown";
+import { Config } from "@opencode/core/config";
+import { ManagedPolicy } from "@opencode/core/managed-policy";
+var statements = Effect.fnUntraced(function* () {
+  const config = yield* Config.Service;
+  return ManagedPolicy.statements(yield* config.entries());
+});
+var isMcp = (integration) => integration?.metadata?.source === "mcp";
+var requireConnectable2 = Effect.fnUntraced(function* (integrationID) {
+  const integrations = yield* Integration.Service;
+  if (isMcp(yield* integrations.get(integrationID)))
+    return;
+  const denied = ManagedPolicy.match(yield* statements(), "integration.connect", integrationID);
+  if (denied?.effect !== "deny")
+    return;
+  return yield* new InvalidRequestError({
+    message: `${denied.message}: connecting ${integrationID} is not allowed`,
+    kind: "integration_policy"
+  });
+});
 var authorize = (effect) => effect.pipe(Effect.mapError((error) => new InvalidRequestError({
   message: error.cause instanceof Error && error.cause.message.trim() ? error.cause.message : "Authentication failed",
   kind: "integration_authorization"
@@ -25,7 +44,8 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   return handlers.handle("integration.list", Effect.fn(function* () {
     yield* Plugin.awaitActivation;
     const service = yield* Integration.Service;
-    return yield* response2(service.list());
+    const current = yield* statements();
+    return yield* response2(service.list().pipe(Effect.map((integrations) => integrations.filter((integration) => isMcp(integration) || ManagedPolicy.decision(current, "integration.connect", integration.id) !== "deny"))));
   })).handle("integration.get", Effect.fn(function* (ctx) {
     const service = yield* Integration.Service;
     const integration = yield* service.get(ctx.params.integrationID);
@@ -38,10 +58,12 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   })).handle("integration.wellknown.add", Effect.fn(function* (ctx) {
     const wellknown = yield* WellKnown.Service;
     const integration = yield* Integration.Service;
+    yield* requireConnectable2(Integration.ID.make(ctx.payload.url.replace(/\/+$/, "")));
     yield* wellknown.add(ctx.payload.url).pipe(Effect.mapError((error) => new InvalidRequestError({ message: error.message, kind: "well_known_discovery" })));
     yield* integration.reload();
     return HttpApiSchema.NoContent.make();
   })).handle("integration.connect.key", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     if (!(yield* service.get(ctx.params.integrationID)))
       return yield* new IntegrationNotFoundError({
@@ -56,6 +78,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     }));
     return HttpApiSchema.NoContent.make();
   })).handle("integration.connect.external", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     if (!(yield* service.get(ctx.params.integrationID)))
       return yield* new IntegrationNotFoundError({
@@ -70,6 +93,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     }));
     return HttpApiSchema.NoContent.make();
   })).handle("integration.oauth.connect", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     return yield* response2(authorize(service.oauth.connect({
       integrationID: ctx.params.integrationID,
@@ -124,6 +148,7 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
     });
     return HttpApiSchema.NoContent.make();
   })).handle("integration.command.connect", Effect.fn(function* (ctx) {
+    yield* requireConnectable2(ctx.params.integrationID);
     const service = yield* Integration.Service;
     const integration = yield* service.get(ctx.params.integrationID);
     if (!integration)
@@ -167,4 +192,4 @@ var IntegrationHandler2 = HttpApiBuilder.group(Api2, "server.integration", (hand
   }));
 }));
 
-export { IntegrationHandler2 };
+export { requireConnectable2, IntegrationHandler2 };

package/dist/chunks/{workerd-wh109kze.js → service-status-dm74gm07.js}

@@ -1,18 +1,18 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 import {
   SESSION_TTL_SECONDS2,
   Config2,
   issueSession2,
   sessionCookieName2
-} from "./workerd-j4at0y5c.js";
+} from "./service-status-j4at0y5c.js";
 import {
   Service4
-} from "./workerd-7dtbad8d.js";
+} from "./service-status-7dtbad8d.js";
 import {
-  Service2
-} from "./workerd-kqr36gas.js";
+  Service3
+} from "./service-status-w9jcwh65.js";
 
 // src/handlers/server.ts
 import { hostname } from "node:os";
@@ -22,7 +22,7 @@ import { HttpApiBuilder } from "effect/http-api";
 import { PersistentPty } from "@opencode/core/persistent-pty";
 import { UnauthorizedError } from "@opencode/protocol/errors";
 var ServerHandler2 = HttpApiBuilder.group(Api2, "server.server", (handlers) => Effect.gen(function* () {
-  const pairing = yield* Service2;
+  const pairing = yield* Service3;
   const auth = yield* Config2;
   return handlers.handle("server.info", () => Effect.gen(function* () {
     const info = yield* Service4;

package/dist/chunks/{workerd-f4exzdsf.js → service-status-f4exzdsf.js}

@@ -1,10 +1,10 @@
 import {
   awaitPlugins2,
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/agent.ts
 import { Agent } from "@opencode/core/agent";

package/dist/chunks/{workerd-20b2yx1f.js → service-status-fvpjvjpp.js}

@@ -1,18 +1,18 @@
 import {
   __export
-} from "./workerd-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/event-feed.ts
 var exports_event_feed = {};
 __export(exports_event_feed, {
   EncodingError: () => EncodingError2,
   EventFeed: () => exports_event_feed,
-  Service: () => Service3,
+  Service: () => Service2,
   SubscriberCapacity: () => SubscriberCapacity2,
   SubscriberOverflowError: () => SubscriberOverflowError2,
   frame: () => frame2,
   layer: () => layer2,
-  make: () => make3
+  make: () => make4
 });
 import { Bus } from "@opencode/core/bus";
 import { Event } from "@opencode/schema/event";
@@ -30,14 +30,14 @@ class EncodingError2 extends Schema.TaggedError()("EventFeed.EncodingError", {
 }) {
 }
 
-class Service3 extends Context.Service()("@opencode/server/EventFeed") {
+class Service2 extends Context.Service()("@opencode/server/EventFeed") {
 }
 function frame2(event) {
   return `data: ${JSON.stringify(event)}
 
 `;
 }
-var make3 = Effect.fn("EventFeed.make")(function* (observe, options) {
+var make4 = Effect.fn("EventFeed.make")(function* (observe, options) {
   const capacity = options?.capacity ?? SubscriberCapacity2;
   const render = options?.encode ?? frame2;
   const subscribers = new Map;
@@ -72,13 +72,13 @@ var make3 = Effect.fn("EventFeed.make")(function* (observe, options) {
   });
   const unsubscribe = yield* observe(publish);
   yield* Effect.addFinalizer(() => unsubscribe);
-  return Service3.of({
+  return Service2.of({
     subscribe: (types) => Effect.acquireRelease(Queue.dropping(capacity).pipe(Effect.tap((queue) => Effect.sync(() => subscribers.set(queue, types?.length ? new Set(types) : undefined)))), (queue) => Effect.sync(() => subscribers.delete(queue)).pipe(Effect.andThen(Queue.shutdown(queue)), Effect.asVoid)).pipe(Effect.map(Stream.fromQueue))
   });
 });
-var layer2 = Layer.effect(Service3, Effect.gen(function* () {
+var layer2 = Layer.effect(Service2, Effect.gen(function* () {
   const bus = yield* Bus.Service;
-  return yield* make3(bus.listen);
+  return yield* make4(bus.listen);
 }));
 
-export { SubscriberCapacity2, SubscriberOverflowError2, EncodingError2, Service3, frame2, make3, layer2, exports_event_feed };
+export { SubscriberCapacity2, SubscriberOverflowError2, EncodingError2, Service2, frame2, make4, layer2, exports_event_feed };

package/dist/chunks/{workerd-fvqb5t8b.js → service-status-fvqb5t8b.js}

@@ -1,19 +1,19 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 import {
   CorsConfig2,
   isAllowedRequestOrigin2
-} from "./workerd-q4bn6dy8.js";
+} from "./service-status-q4bn6dy8.js";
 import {
   makeMediaGet2
-} from "./workerd-n321d8vm.js";
+} from "./service-status-n321d8vm.js";
 import {
   runPtySocket2
-} from "./workerd-h6rt5k9s.js";
+} from "./service-status-h6rt5k9s.js";
 import {
   makeSchedule2
-} from "./workerd-059rbh9c.js";
+} from "./service-status-059rbh9c.js";
 
 // src/handlers/persistent-pty.ts
 import { PersistentPty } from "@opencode/core/persistent-pty";

package/dist/chunks/{workerd-gk0yxcp6.js → service-status-gk0yxcp6.js}

@@ -2,7 +2,7 @@ import {
   locationErrors2,
   sessionInfo2,
   requestRef2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 
 // src/middleware/form-location.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{workerd-gqq6kfhc.js → service-status-gqq6kfhc.js}

@@ -1,6 +1,6 @@
 import {
   missingSession2
-} from "./workerd-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 
 // src/location.ts
 import { FileSystem } from "@opencode/core/filesystem";

package/dist/chunks/{workerd-j4at0y5c.js → service-status-j4at0y5c.js}

@@ -1,6 +1,6 @@
 import {
   __export
-} from "./workerd-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/auth.ts
 var exports_auth = {};

package/dist/chunks/{workerd-jc2vwkyw.js → service-status-jc2vwkyw.js}

@@ -1,9 +1,9 @@
 import {
   requestRef2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/debug.ts
 import { LocationServiceMap } from "@opencode/core/location-service-map";

package/dist/chunks/{workerd-r5696se6.js → service-status-r5696se6.js}

@@ -1,12 +1,12 @@
 import {
   LocationMiddleware2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   FormLocationMiddleware2
-} from "./workerd-gk0yxcp6.js";
+} from "./service-status-gk0yxcp6.js";
 import {
   SessionLocationMiddleware2
-} from "./workerd-yet0vexm.js";
+} from "./service-status-yet0vexm.js";
 
 // src/api.ts
 import { makeDefaultApi } from "@opencode/protocol/api";

package/dist/chunks/{workerd-rxyx8sa0.js → service-status-rxyx8sa0.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/shell.ts
 import { Shell } from "@opencode/core/shell";

package/dist/chunks/{workerd-skcryrty.js → service-status-skcryrty.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/reference.ts
 import { Reference } from "@opencode/core/reference";

package/dist/chunks/{workerd-sqxx1p54.js → service-status-sqxx1p54.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/plugin.ts
 import { Plugin } from "@opencode/core/plugin";

package/dist/chunks/{workerd-vfkjeyp3.js → service-status-vfkjeyp3.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/worktree.ts
 import { Git } from "@opencode/core/git";

package/dist/chunks/{workerd-vtfzy3at.js → service-status-vtfzy3at.js}

@@ -1,10 +1,10 @@
 import {
   awaitPlugins2,
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/provider.ts
 import { Provider } from "@opencode/core/provider";

package/dist/chunks/{workerd-vvp99hc9.js → service-status-vvp99hc9.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/migration.ts
 import { V1Migration } from "@opencode/core/database/v1-migration";

package/dist/chunks/{workerd-kqr36gas.js → service-status-w9jcwh65.js}

@@ -1,12 +1,12 @@
 import {
   __export
-} from "./workerd-9rqn6x4v.js";
+} from "./service-status-9rqn6x4v.js";
 
 // src/pairing.ts
 var exports_pairing = {};
 __export(exports_pairing, {
   ServerPairing: () => exports_pairing,
-  Service: () => Service2,
+  Service: () => Service3,
   node: () => node2
 });
 import { Cache, Context, Duration, Effect, Layer } from "effect";
@@ -14,12 +14,12 @@ import { makeGlobalNode } from "@opencode/util/effect/app-node";
 import { randomBytes } from "node:crypto";
 var TTL = Duration.minutes(5);
 
-class Service2 extends Context.Service()("@opencode/ServerPairing") {
+class Service3 extends Context.Service()("@opencode/ServerPairing") {
 }
 var noLookup = () => Effect.die(new Error("ServerPairing cache must be used via set/invalidateWhen, never get"));
-var layer = Layer.effect(Service2, Effect.gen(function* () {
+var layer = Layer.effect(Service3, Effect.gen(function* () {
   const cache = yield* Cache.make({ capacity: 1000, lookup: noLookup, timeToLive: TTL });
-  return Service2.of({
+  return Service3.of({
     issue: Effect.fn("ServerPairing.issue")(function* () {
       const code = randomBytes(16).toString("base64url");
       yield* Cache.set(cache, code, true);
@@ -30,6 +30,6 @@ var layer = Layer.effect(Service2, Effect.gen(function* () {
     })
   });
 }));
-var node2 = makeGlobalNode({ service: Service2, layer, deps: [] });
+var node2 = makeGlobalNode({ service: Service3, layer, deps: [] });
 
-export { Service2, node2, exports_pairing };
+export { Service3, node2, exports_pairing };

package/dist/chunks/{workerd-wqv43pj9.js → service-status-wqv43pj9.js}

@@ -1,10 +1,10 @@
 import {
   locationErrors2,
   awaitPlugins2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/generate.ts
 import { Generate } from "@opencode/core/generate";

package/dist/chunks/{workerd-xbqm7mpj.js → service-status-xbqm7mpj.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/skill.ts
 import { Skill } from "@opencode/core/skill";

package/dist/chunks/{workerd-xpg37vzc.js → service-status-xpg37vzc.js}

@@ -1,9 +1,9 @@
 import {
   response2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/command.ts
 import { Command } from "@opencode/core/command";

package/dist/chunks/{workerd-yet0vexm.js → service-status-yet0vexm.js}

@@ -1,7 +1,7 @@
 import {
   locationErrors2,
   sessionInfo2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 
 // src/middleware/session-location.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{workerd-z9kgby92.js → service-status-zkg10e14.js}

@@ -3,16 +3,16 @@ import {
   missingMessage2,
   failedMessageDecode2,
   failedSnapshot2
-} from "./workerd-smaf4a18.js";
+} from "./service-status-smaf4a18.js";
 import {
   locationErrors2
-} from "./workerd-gqq6kfhc.js";
+} from "./service-status-gqq6kfhc.js";
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 import {
   wantsMediaRefs2
-} from "./workerd-xthc02cw.js";
+} from "./service-status-xthc02cw.js";
 
 // src/handlers/session.ts
 import { Instance } from "@opencode/core/instance/service";

package/dist/chunks/{workerd-zmgfywqd.js → service-status-zmgfywqd.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/project.ts
 import { Project } from "@opencode/core/project";

package/dist/chunks/{workerd-zyntahe8.js → service-status-zyntahe8.js}

@@ -1,6 +1,6 @@
 import {
   Api2
-} from "./workerd-r5696se6.js";
+} from "./service-status-r5696se6.js";
 
 // src/handlers/rpc.ts
 import { Rpc } from "@opencode/core/rpc";

package/dist/cors.js

@@ -2,7 +2,7 @@ import {
   CorsConfig2,
   isAllowedCorsOrigin2,
   isAllowedRequestOrigin2
-} from "./chunks/workerd-q4bn6dy8.js";
+} from "./chunks/service-status-q4bn6dy8.js";
 export {
   CorsConfig2 as CorsConfig,
   isAllowedCorsOrigin2 as isAllowedCorsOrigin,

package/dist/event-feed.js

@@ -2,19 +2,19 @@ import {
   SubscriberCapacity2,
   SubscriberOverflowError2,
   EncodingError2,
-  Service3,
+  Service2,
   frame2,
-  make3,
+  make4,
   layer2,
   exports_event_feed
-} from "./chunks/workerd-20b2yx1f.js";
+} from "./chunks/service-status-fvpjvjpp.js";
 export {
   EncodingError2 as EncodingError,
   exports_event_feed as EventFeed,
-  Service3 as Service,
+  Service2 as Service,
   SubscriberCapacity2 as SubscriberCapacity,
   SubscriberOverflowError2 as SubscriberOverflowError,
   frame2 as frame,
   layer2 as layer,
-  make3 as make
+  make4 as make
 };