gemini-cli-leo 0.1.19-fix.11 → 0.1.20

package/docs/cli/settings.md

@@ -141,18 +141,19 @@ they appear in the UI.
 
 ### Security
 
-| UI Label                              | Setting                                         | Description                                                                                                                                                                                                                          | Default |
-| ------------------------------------- | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------- |
-| Tool Sandboxing                       | `security.toolSandboxing`                       | Tool-level sandboxing. Isolates individual tools instead of the entire CLI process.                                                                                                                                                  | `false` |
-| Disable YOLO Mode                     | `security.disableYoloMode`                      | Disable YOLO mode, even if enabled by a flag.                                                                                                                                                                                        | `false` |
-| Disable Always Allow                  | `security.disableAlwaysAllow`                   | Disable "Always allow" options in tool confirmation dialogs.                                                                                                                                                                         | `false` |
-| Allow Permanent Tool Approval         | `security.enablePermanentToolApproval`          | Enable the "Allow for all future sessions" option in tool confirmation dialogs.                                                                                                                                                      | `false` |
-| Auto-add to Policy by Default         | `security.autoAddToPolicyByDefault`             | When enabled, the "Allow for all future sessions" option becomes the default choice for low-risk tools in trusted workspaces.                                                                                                        | `false` |
-| Blocks extensions from Git            | `security.blockGitExtensions`                   | Blocks installing and loading extensions from Git.                                                                                                                                                                                   | `false` |
-| Extension Source Regex Allowlist      | `security.allowedExtensions`                    | List of Regex patterns for allowed extensions. If nonempty, only extensions that match the patterns in this list are allowed. Overrides the blockGitExtensions setting.                                                              | `[]`    |
-| Folder Trust                          | `security.folderTrust.enabled`                  | Setting to track whether Folder trust is enabled.                                                                                                                                                                                    | `true`  |
-| Enable Environment Variable Redaction | `security.environmentVariableRedaction.enabled` | Enable redaction of environment variables that may contain secrets.                                                                                                                                                                  | `false` |
-| Enable Context-Aware Security         | `security.enableConseca`                        | Enable the context-aware security checker. This feature uses an LLM to dynamically generate and enforce security policies for tool use based on your prompt, providing an additional layer of protection against unintended actions. | `false` |
+| UI Label                              | Setting                                         | Description                                                                                                                                                                                                                                                                                                                                                         | Default |
+| ------------------------------------- | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
+| Tool Sandboxing                       | `security.toolSandboxing`                       | Tool-level sandboxing. Isolates individual tools instead of the entire CLI process.                                                                                                                                                                                                                                                                                 | `false` |
+| Disable YOLO Mode                     | `security.disableYoloMode`                      | Disable YOLO mode, even if enabled by a flag.                                                                                                                                                                                                                                                                                                                       | `false` |
+| Disable Always Allow                  | `security.disableAlwaysAllow`                   | Disable "Always allow" options in tool confirmation dialogs.                                                                                                                                                                                                                                                                                                        | `false` |
+| Allow Permanent Tool Approval         | `security.enablePermanentToolApproval`          | Enable the "Allow for all future sessions" option in tool confirmation dialogs.                                                                                                                                                                                                                                                                                     | `false` |
+| Auto-add to Policy by Default         | `security.autoAddToPolicyByDefault`             | When enabled, the "Allow for all future sessions" option becomes the default choice for low-risk tools in trusted workspaces.                                                                                                                                                                                                                                       | `false` |
+| Blocks extensions from Git            | `security.blockGitExtensions`                   | Blocks installing and loading extensions from Git.                                                                                                                                                                                                                                                                                                                  | `false` |
+| Extension Source Regex Allowlist      | `security.allowedExtensions`                    | List of Regex patterns for allowed extensions. If nonempty, only extensions that match the patterns in this list are allowed. Overrides the blockGitExtensions setting.                                                                                                                                                                                             | `[]`    |
+| Folder Trust                          | `security.folderTrust.enabled`                  | Setting to track whether Folder trust is enabled.                                                                                                                                                                                                                                                                                                                   | `true`  |
+| Enable Environment Variable Redaction | `security.environmentVariableRedaction.enabled` | Enable redaction of environment variables that may contain secrets.                                                                                                                                                                                                                                                                                                 | `false` |
+| OpenCode Request Headers              | `security.auth.openAiOpencodeHeaders`           | Adapt OpenAI-compatible requests to look like they came from the OpenCode CLI: client-identity headers plus the tool names some free endpoints require. Only enable this when the endpoint rejects requests that do not look like they came from the OpenCode CLI; some providers issue a key that is only accepted with the disguise in place. Requires a restart. | `false` |
+| Enable Context-Aware Security         | `security.enableConseca`                        | Enable the context-aware security checker. This feature uses an LLM to dynamically generate and enforce security policies for tool use based on your prompt, providing an additional layer of protection against unintended actions.                                                                                                                                | `false` |
 
 ### Advanced
 

package/docs/reference/configuration.md

@@ -2016,6 +2016,16 @@ their corresponding top-level category object in your `settings.json` file.
     the file's first entry.
   - **Default:** `undefined`
 
+- **`security.auth.openAiOpencodeHeaders`** (boolean):
+
+  - **Description:** Adapt OpenAI-compatible requests to look like they came
+    from the OpenCode CLI: client-identity headers plus the tool names some free
+    endpoints require. Only enable this when the endpoint rejects requests that
+    do not look like they came from the OpenCode CLI; some providers issue a key
+    that is only accepted with the disguise in place. Requires a restart.
+  - **Default:** `false`
+  - **Requires restart:** Yes
+
 - **`security.auth.enforcedType`** (string):
 
   - **Description:** The required auth type. If this does not match the selected

package/gemini.mjs

@@ -41486,7 +41486,7 @@ var require_websocket = __commonJS({
     var http9 = __require("http");
     var net3 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes8, createHash: createHash20 } = __require("crypto");
+    var { randomBytes: randomBytes9, createHash: createHash21 } = __require("crypto");
     var { Duplex: Duplex4, Readable: Readable9 } = __require("stream");
     var { URL: URL8 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate();
@@ -42013,7 +42013,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes8(16).toString("base64");
+      const key = randomBytes9(16).toString("base64");
       const request = isSecure ? https6.request : http9.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -42143,7 +42143,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -42510,7 +42510,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter21 = __require("events");
     var http9 = __require("http");
     var { Duplex: Duplex4 } = __require("stream");
-    var { createHash: createHash20 } = __require("crypto");
+    var { createHash: createHash21 } = __require("crypto");
     var extension = require_extension();
     var PerMessageDeflate = require_permessage_deflate();
     var subprotocol = require_subprotocol();
@@ -42807,7 +42807,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -173107,8 +173107,8 @@ var GIT_COMMIT_INFO, CLI_VERSION;
 var init_git_commit = __esm({
   "packages/core/dist/src/generated/git-commit.js"() {
     "use strict";
-    GIT_COMMIT_INFO = "ebe514a";
-    CLI_VERSION = "0.1.19-fix.11";
+    GIT_COMMIT_INFO = "aa945fc";
+    CLI_VERSION = "0.1.20";
   }
 });
 
@@ -218502,8 +218502,8 @@ var require_context = __commonJS({
     var SPAN_ID_RANDOM_BYTES = 8;
     var spanIdBuffer = Buffer.alloc(SPAN_ID_RANDOM_BYTES);
     var randomFillSync2 = crypto27.randomFillSync;
-    var randomBytes8 = crypto27.randomBytes;
-    var spanRandomBuffer = randomFillSync2 ? () => randomFillSync2(spanIdBuffer) : () => randomBytes8(SPAN_ID_RANDOM_BYTES);
+    var randomBytes9 = crypto27.randomBytes;
+    var spanRandomBuffer = randomFillSync2 ? () => randomFillSync2(spanIdBuffer) : () => randomBytes9(SPAN_ID_RANDOM_BYTES);
     exports2.W3C_TRACE_PARENT_HEADER = "traceparent";
     function makeHeaderWrapper(req) {
       if (!req.headers)
@@ -316255,7 +316255,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.1.19-fix.11";
+    return "0.1.20";
   })();
   return versionPromise;
 }
@@ -323274,10 +323274,11 @@ async function* parseSseStream(body2) {
     });
   }
 }
-var HEADERS_TIMEOUT_MS, STREAM_IDLE_TIMEOUT_MS, OpenAIHttpError, MAX_ERROR_BODY_CHARS, OpenAICompatibleClient;
+var import_undici2, HEADERS_TIMEOUT_MS, STREAM_IDLE_TIMEOUT_MS, OpenAIHttpError, MAX_ERROR_BODY_CHARS, OpenAICompatibleClient;
 var init_openaiClient = __esm({
   "packages/core/dist/src/core/openai/openaiClient.js"() {
     "use strict";
+    import_undici2 = __toESM(require_undici(), 1);
     init_fetch();
     init_debugLogger();
     HEADERS_TIMEOUT_MS = 6e4;
@@ -323299,6 +323300,19 @@ var init_openaiClient = __esm({
       apiKey;
       extraHeaders;
       dispatcher;
+      /**
+       * `fetch` from the same undici instance that created `dispatcher`.
+       *
+       * A dispatcher cannot be handed to the platform `fetch`: the two undici
+       * copies do not share the private symbols that carry a request through the
+       * dispatcher, so the platform `fetch` treats the proxied hop's raw bytes as
+       * the response body — a 200 with TLS-looking garbage that later fails JSON
+       * parsing — or throws a bare `TypeError: fetch failed`. Both were reproduced
+       * on Node 26 with the packaged undici 7.10 through ClashX. Keeping `fetch`
+       * and the agent in one instance is the pattern `createProxyAwareFetch` in
+       * `ide-connection-utils.ts` already uses.
+       */
+      fetchImpl;
       constructor(options) {
         if (!options.baseUrl) {
           throw new Error("OpenAI-compatible mode requires GEMINI_OPENAI_BASE_URL to be set.");
@@ -323307,6 +323321,10 @@ var init_openaiClient = __esm({
         this.apiKey = options.apiKey;
         this.extraHeaders = options.headers ?? {};
         this.dispatcher = this.resolveDispatcher(options.proxy);
+        this.fetchImpl = this.dispatcher ? (
+          // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+          import_undici2.fetch
+        ) : fetch;
       }
       /**
        * Builds the proxy dispatcher for the request, if one is needed.
@@ -323361,7 +323379,7 @@ var init_openaiClient = __esm({
           options.dispatcher = this.dispatcher;
         }
         try {
-          const response = await fetch(url4, options);
+          const response = await this.fetchImpl(url4, options);
           if (!response.ok) {
             bounded.clear();
             throw await toHttpError(response);
@@ -323438,7 +323456,7 @@ var init_openaiClient = __esm({
         }
         let response;
         try {
-          response = await fetch(url4, options);
+          response = await this.fetchImpl(url4, options);
           if (!response.ok)
             throw await toHttpError(response);
         } catch (error40) {
@@ -323938,6 +323956,33 @@ var init_constants4 = __esm({
   }
 });
 
+// packages/core/dist/src/core/openai/opencode/body.js
+function freeLaneTool(name3) {
+  return {
+    type: "function",
+    function: {
+      name: name3,
+      description: "Reserved for the host runtime; do not call it.",
+      parameters: { type: "object", properties: {} }
+    }
+  };
+}
+function ensureOpencodeFreeLaneShape(body2) {
+  const declared = new Set((body2.tools ?? []).map((tool) => tool.function.name));
+  const missing = FREE_LANE_TOOL_NAMES.filter((name3) => !declared.has(name3));
+  if (missing.length === 0) {
+    return;
+  }
+  body2.tools = [...body2.tools ?? [], ...missing.map(freeLaneTool)];
+}
+var FREE_LANE_TOOL_NAMES;
+var init_body3 = __esm({
+  "packages/core/dist/src/core/openai/opencode/body.js"() {
+    "use strict";
+    FREE_LANE_TOOL_NAMES = ["bash", "read"];
+  }
+});
+
 // packages/core/dist/src/core/openai/openaiContentGenerator.js
 function isGeminiModelName(model) {
   if (isAutoModel(model))
@@ -323979,6 +324024,7 @@ var init_openaiContentGenerator = __esm({
     init_converters();
     init_constants4();
     init_models();
+    init_body3();
     OpenAIContentGenerator = class {
       client;
       configuredModelId;
@@ -324035,6 +324081,9 @@ var init_openaiContentGenerator = __esm({
       async generateContent(request, _userPromptId, _role) {
         const modelId = this.resolveModelId();
         const body2 = toOpenAIRequest(request, modelId, false);
+        if (this.gcConfig.getOpenAiOpencodeHeaders?.()) {
+          ensureOpencodeFreeLaneShape(body2);
+        }
         const completion3 = await this.client.chatCompletion(body2, request.config?.abortSignal);
         if (completion3.error) {
           throw new OpenAIHttpError(`OpenAI-compatible endpoint returned an error: ${completion3.error.message ?? "unknown error"}`, 502);
@@ -324044,6 +324093,9 @@ var init_openaiContentGenerator = __esm({
       async generateContentStream(request, _userPromptId, _role) {
         const modelId = this.resolveModelId();
         const body2 = toOpenAIRequest(request, modelId, true);
+        if (this.gcConfig.getOpenAiOpencodeHeaders?.()) {
+          ensureOpencodeFreeLaneShape(body2);
+        }
         const pending = await this.client.startChatCompletionStream(body2, request.config?.abortSignal);
         return this.consumeStream(pending.response.body, pending.release, modelId);
       }
@@ -324392,6 +324444,77 @@ var init_providers = __esm({
   }
 });
 
+// packages/core/dist/src/core/openai/opencode/headers.js
+import { createHash as createHash7, randomBytes as randomBytes3 } from "node:crypto";
+function base62Fixed(value, width) {
+  const base = 62n;
+  let n3 = value;
+  const out2 = new Array(width);
+  for (let i4 = width - 1; i4 >= 0; i4--) {
+    out2[i4] = BASE62_ALPHABET.charAt(Number(n3 % base));
+    n3 /= base;
+  }
+  return out2.join("");
+}
+function invertedTimestampHex(now = Date.now()) {
+  const current = BigInt(now) * 0x1000n + 1n;
+  const inverted = ~current & 0xffffffffffffn;
+  return inverted.toString(16).padStart(12, "0");
+}
+function opencodeUserAgent() {
+  return `opencode/${OPENCODE_USER_AGENT_VERSION} (${process.platform} ${process.arch}; node${process.versions.node})`;
+}
+function canonicalOpencodeSessionId(signal, now = Date.now()) {
+  if (SESSION_ID_PATTERN.test(signal)) {
+    return signal;
+  }
+  const memoized = sessionMemo.get(signal);
+  if (memoized !== void 0) {
+    return memoized;
+  }
+  const digest = createHash7("sha256").update("ses\0" + signal).digest();
+  const tail = base62Fixed(BigInt("0x" + digest.subarray(6, 16).toString("hex")), 14);
+  const session = `ses_${invertedTimestampHex(now)}${tail}`;
+  if (sessionMemo.size >= SESSION_MEMO_LIMIT) {
+    const oldest = sessionMemo.keys().next();
+    if (!oldest.done) {
+      sessionMemo.delete(oldest.value);
+    }
+  }
+  sessionMemo.set(signal, session);
+  return session;
+}
+function opencodeRequestId() {
+  return `req_${randomBytes3(16).toString("hex")}`;
+}
+function opencodeProjectId(seed = "gemini-cli:default-project") {
+  const digest = createHash7("sha256").update("prj\0" + seed).digest();
+  return `prj_${digest.subarray(0, 12).toString("hex")}`;
+}
+function buildOpencodeDisguiseHeaders(options) {
+  const session = canonicalOpencodeSessionId(options.sessionSignal, options.now);
+  return {
+    "user-agent": opencodeUserAgent(),
+    "x-opencode-client": "cli",
+    "x-opencode-session": session,
+    "x-session-affinity": session,
+    "X-Session-Id": session,
+    "x-opencode-request": opencodeRequestId(),
+    "x-opencode-project": opencodeProjectId()
+  };
+}
+var OPENCODE_USER_AGENT_VERSION, SESSION_ID_PATTERN, BASE62_ALPHABET, SESSION_MEMO_LIMIT, sessionMemo;
+var init_headers3 = __esm({
+  "packages/core/dist/src/core/openai/opencode/headers.js"() {
+    "use strict";
+    OPENCODE_USER_AGENT_VERSION = "1.18.31";
+    SESSION_ID_PATTERN = /^ses_[0-9a-f]{12}[0-9A-Za-z]{14}$/;
+    BASE62_ALPHABET = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+    SESSION_MEMO_LIMIT = 1024;
+    sessionMemo = /* @__PURE__ */ new Map();
+  }
+});
+
 // packages/core/dist/src/core/openai/integration.js
 import * as fs42 from "node:fs";
 function applyProviderToContentGeneratorConfig(options) {
@@ -324413,6 +324536,17 @@ function applyProviderToContentGeneratorConfig(options) {
       ...customHeaders
     };
   }
+  const opencodeSessionId = config2?.getSessionId?.();
+  if (config2?.getOpenAiOpencodeHeaders?.() && opencodeSessionId) {
+    contentGeneratorConfig.customHeaders = {
+      ...buildOpencodeDisguiseHeaders({ sessionSignal: opencodeSessionId }),
+      // The caller's headers (session-scoped override) still win, including the
+      // case where no provider profile was resolved and the block above did not
+      // merge them in.
+      ...customHeaders,
+      ...contentGeneratorConfig.customHeaders
+    };
+  }
   contentGeneratorConfig.modelId = provider?.modelId;
 }
 function resolveActiveProvider(options) {
@@ -324498,6 +324632,7 @@ var init_integration = __esm({
     init_events();
     init_errors2();
     init_providers();
+    init_headers3();
     init_constants4();
   }
 });
@@ -364721,7 +364856,7 @@ var init_nextSpeakerChecker = __esm({
 });
 
 // packages/core/dist/src/services/loopDetectionService.js
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 var TOOL_CALL_LOOP_THRESHOLD, CONTENT_LOOP_THRESHOLD, CONTENT_CHUNK_SIZE, MAX_HISTORY_LENGTH, LLM_LOOP_CHECK_HISTORY_COUNT, LLM_CHECK_AFTER_TURNS, DEFAULT_LLM_CHECK_INTERVAL, MIN_LLM_CHECK_INTERVAL, MAX_LLM_CHECK_INTERVAL, LLM_CONFIDENCE_THRESHOLD, DOUBLE_CHECK_MODEL_ALIAS, LOOP_DETECTION_SYSTEM_PROMPT, LOOP_DETECTION_SCHEMA, LoopDetectionService;
 var init_loopDetectionService = __esm({
   "packages/core/dist/src/services/loopDetectionService.js"() {
@@ -364824,7 +364959,7 @@ If the original user request is provided, use it to contextualize the assistant'
       getToolCallKey(toolCall) {
         const argsString = JSON.stringify(toolCall.args);
         const keyString = `${toolCall.name}:${argsString}`;
-        return createHash10("sha256").update(keyString).digest("hex");
+        return createHash11("sha256").update(keyString).digest("hex");
       }
       /**
        * Processes a stream event and checks for loop conditions.
@@ -365007,7 +365142,7 @@ If the original user request is provided, use it to contextualize the assistant'
       analyzeContentChunksForLoop() {
         while (this.hasMoreChunksToProcess()) {
           const currentChunk = this.streamContentHistory.substring(this.lastContentIndex, this.lastContentIndex + CONTENT_CHUNK_SIZE);
-          const chunkHash = createHash10("sha256").update(currentChunk).digest("hex");
+          const chunkHash = createHash11("sha256").update(currentChunk).digest("hex");
           if (this.isLoopDetectedForChunk(currentChunk, chunkHash)) {
             return true;
           }
@@ -367361,7 +367496,7 @@ var init_inbox = __esm({
 });
 
 // packages/core/dist/src/context/graph/toGraph.js
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 function isTextPart3(part) {
   return typeof part.text === "string";
 }
@@ -367396,33 +367531,33 @@ function getStableId(obj, idService, turnSalt = "", partIdx = 0) {
   const part = obj;
   let contentHash;
   if (isTextPart3(part)) {
-    contentHash = createHash11("sha256").update(part.text).digest("hex");
+    contentHash = createHash12("sha256").update(part.text).digest("hex");
     id = `text_${contentHash}_${turnSalt}_${partIdx}`;
   } else if (isInlineDataPart(part)) {
-    contentHash = createHash11("sha256").update(part.inlineData.data).digest("hex");
+    contentHash = createHash12("sha256").update(part.inlineData.data).digest("hex");
     id = `media_${contentHash}_${turnSalt}_${partIdx}`;
   } else if (isFileDataPart(part)) {
-    contentHash = createHash11("sha256").update(part.fileData.fileUri).digest("hex");
+    contentHash = createHash12("sha256").update(part.fileData.fileUri).digest("hex");
     id = `file_${contentHash}_${turnSalt}_${partIdx}`;
   } else if (isFunctionCallPart(part)) {
     if (part.functionCall.id) {
       id = `call_${part.functionCall.id}`;
     } else {
-      contentHash = createHash11("sha256").update(`call:${part.functionCall.name}:${JSON.stringify(part.functionCall.args)}`).digest("hex");
+      contentHash = createHash12("sha256").update(`call:${part.functionCall.name}:${JSON.stringify(part.functionCall.args)}`).digest("hex");
       id = `call_h_${contentHash}_${turnSalt}_${partIdx}`;
     }
   } else if (isFunctionResponsePart(part)) {
     if (part.functionResponse.id) {
       id = `resp_${part.functionResponse.id}`;
     } else {
-      contentHash = createHash11("sha256").update(`resp:${part.functionResponse.name}:${JSON.stringify(part.functionResponse.response)}`).digest("hex");
+      contentHash = createHash12("sha256").update(`resp:${part.functionResponse.name}:${JSON.stringify(part.functionResponse.response)}`).digest("hex");
       id = `resp_h_${contentHash}_${turnSalt}_${partIdx}`;
     }
   } else if (isExecutableCodePart(part)) {
-    contentHash = createHash11("sha256").update(`exec:${part.executableCode.language}:${part.executableCode.code}`).digest("hex");
+    contentHash = createHash12("sha256").update(`exec:${part.executableCode.language}:${part.executableCode.code}`).digest("hex");
     id = `exec_${contentHash}_${turnSalt}_${partIdx}`;
   } else if (isCodeExecutionResultPart(part)) {
-    contentHash = createHash11("sha256").update(`result:${part.codeExecutionResult.outcome}:${part.codeExecutionResult.output}`).digest("hex");
+    contentHash = createHash12("sha256").update(`result:${part.codeExecutionResult.outcome}:${part.codeExecutionResult.output}`).digest("hex");
     id = `result_${contentHash}_${turnSalt}_${partIdx}`;
   }
   if (contentHash) {
@@ -385694,7 +385829,7 @@ var init_memoryContextManager = __esm({
 // packages/core/dist/src/services/trackerService.js
 import fs74 from "node:fs/promises";
 import path84 from "node:path";
-import { randomBytes as randomBytes4 } from "node:crypto";
+import { randomBytes as randomBytes5 } from "node:crypto";
 var TrackerService;
 var init_trackerService = __esm({
   "packages/core/dist/src/services/trackerService.js"() {
@@ -385720,7 +385855,7 @@ var init_trackerService = __esm({
        * Generates a 6-character hex ID.
        */
       generateId() {
-        return randomBytes4(3).toString("hex");
+        return randomBytes5(3).toString("hex");
       }
       /**
        * Creates a new task and saves it to disk.
@@ -393309,7 +393444,7 @@ async function connectToMcpServer(clientVersion, mcpServerName, mcpServerConfig,
 }
 function createUrlTransport(mcpServerName, mcpServerConfig, transportOptions) {
   const noProxy = process.env["NO_PROXY"] || process.env["no_proxy"];
-  const agent = new import_undici2.EnvHttpProxyAgent({ noProxy });
+  const agent = new import_undici3.EnvHttpProxyAgent({ noProxy });
   const baseFetch = transportOptions.fetch ?? globalThis.fetch;
   const httpOptions = {
     ...transportOptions,
@@ -393447,7 +393582,7 @@ function isEnabled(funcDecl, mcpServerName, mcpServerConfig) {
   }
   return !includeTools || includeTools.some((tool) => tool === funcDecl.name || tool.startsWith(`${funcDecl.name}(`));
 }
-var import_undici2, import_shell_quote8, MCP_DEFAULT_TIMEOUT_MSEC, MCPServerStatus, MCPDiscoveryState, McpClient, serverStatuses, mcpDiscoveryState, mcpServerRequiresOAuth, statusChangeListeners, LenientJsonSchemaValidator, McpCallableTool2;
+var import_undici3, import_shell_quote8, MCP_DEFAULT_TIMEOUT_MSEC, MCPServerStatus, MCPDiscoveryState, McpClient, serverStatuses, mcpDiscoveryState, mcpServerRequiresOAuth, statusChangeListeners, LenientJsonSchemaValidator, McpCallableTool2;
 var init_mcp_client = __esm({
   "packages/core/dist/src/tools/mcp-client.js"() {
     "use strict";
@@ -393456,7 +393591,7 @@ var init_mcp_client = __esm({
     init_sse();
     init_stdio3();
     init_streamableHttp();
-    import_undici2 = __toESM(require_undici(), 1);
+    import_undici3 = __toESM(require_undici(), 1);
     init_types12();
     import_shell_quote8 = __toESM(require_shell_quote(), 1);
     init_config4();
@@ -393999,7 +394134,7 @@ var init_mcp_client = __esm({
 });
 
 // packages/core/dist/src/tools/mcp-client-manager.js
-import { createHash as createHash13 } from "node:crypto";
+import { createHash as createHash14 } from "node:crypto";
 var McpClientManager;
 var init_mcp_client_manager = __esm({
   "packages/core/dist/src/tools/mcp-client-manager.js"() {
@@ -394216,7 +394351,7 @@ var init_mcp_client_manager = __esm({
           config: rest,
           extensionId: extension?.id
         };
-        return createHash13("sha256").update(stableStringify(keyData)).digest("hex");
+        return createHash14("sha256").update(stableStringify(keyData)).digest("hex");
       }
       /**
        * Merges two MCP configurations. The second configuration (override)
@@ -398945,7 +399080,7 @@ var init_dist_node = __esm({
 });
 
 // packages/core/dist/src/agents/a2a-client-manager.js
-var grpc2, import_undici3, A2A_TIMEOUT, A2AClientManager;
+var grpc2, import_undici4, A2A_TIMEOUT, A2AClientManager;
 var init_a2a_client_manager = __esm({
   "packages/core/dist/src/agents/a2a-client-manager.js"() {
     "use strict";
@@ -398953,7 +399088,7 @@ var init_a2a_client_manager = __esm({
     init_grpc();
     grpc2 = __toESM(require_src15(), 1);
     init_dist_node();
-    import_undici3 = __toESM(require_undici(), 1);
+    import_undici4 = __toESM(require_undici(), 1);
     init_a2aUtils();
     init_debugLogger();
     init_a2a_errors();
@@ -398973,12 +399108,12 @@ var init_a2a_client_manager = __esm({
           bodyTimeout: A2A_TIMEOUT
         };
         if (proxyUrl) {
-          this.a2aDispatcher = new import_undici3.ProxyAgent({
+          this.a2aDispatcher = new import_undici4.ProxyAgent({
             uri: proxyUrl,
             ...agentOptions
           });
         } else {
-          this.a2aDispatcher = new import_undici3.Agent(agentOptions);
+          this.a2aDispatcher = new import_undici4.Agent(agentOptions);
         }
         this.a2aFetch = (input, init2) => fetch(input, { ...init2, dispatcher: this.a2aDispatcher });
       }
@@ -399344,6 +399479,8 @@ var init_config4 = __esm({
       contentGenerator;
       /** Set by `/provider`; read when building the OpenAI content generator. */
       activeOpenAiProviderId;
+      /** Opt-in OpenCode request headers; read by the OpenAI content generator. */
+      openAiOpencodeHeaders;
       modelConfigService;
       embeddingModel;
       sandbox;
@@ -399836,6 +399973,7 @@ var init_config4 = __esm({
         this.a2aClientManager = new A2AClientManager(this);
         this.modelRouterService = new ModelRouterService(this);
         this.setActiveOpenAiProvider(params.openAiProviderId);
+        this.openAiOpencodeHeaders = params.openAiOpencodeHeaders === true;
       }
       isInitialized() {
         return this.initialized;
@@ -400176,6 +400314,17 @@ var init_config4 = __esm({
       getActiveOpenAiProviderId() {
         return this.activeOpenAiProviderId;
       }
+      /**
+       * Whether OpenAI-compatible requests should carry OpenCode's client headers.
+       *
+       * Set once at construction from `security.auth.openAiOpencodeHeaders`. The
+       * request layer is built when the content generator is created and rebuilt on
+       * `refreshAuth`, so toggling the setting takes effect on the next start —
+       * which is what the setting's `requiresRestart` promises.
+       */
+      getOpenAiOpencodeHeaders() {
+        return this.openAiOpencodeHeaders;
+      }
       setActiveOpenAiProvider(providerId) {
         this.activeOpenAiProviderId = providerId && providerId.trim().length > 0 ? providerId : void 0;
       }
@@ -402908,7 +403057,7 @@ var init_integrityTypes = __esm({
 // packages/core/dist/src/config/extensions/integrity.js
 import * as fs84 from "node:fs";
 import * as path96 from "node:path";
-import { createHash as createHash15, createHmac, randomBytes as randomBytes6, timingSafeEqual } from "node:crypto";
+import { createHash as createHash16, createHmac, randomBytes as randomBytes7, timingSafeEqual } from "node:crypto";
 var import_json_stable_stringify, IntegrityKeyManager, ExtensionIntegrityStore, ExtensionIntegrityManager;
 var init_integrity2 = __esm({
   "packages/core/dist/src/config/extensions/integrity.js"() {
@@ -402952,7 +403101,7 @@ var init_integrity2 = __esm({
       async getSecretKeyFromKeychain() {
         let key = await this.keychainService.getPassword(SECRET_KEY_ACCOUNT);
         if (!key) {
-          key = randomBytes6(32).toString("hex");
+          key = randomBytes7(32).toString("hex");
           await this.keychainService.setPassword(SECRET_KEY_ACCOUNT, key);
         }
         return key;
@@ -402965,7 +403114,7 @@ var init_integrity2 = __esm({
           if (isNodeError(e3) && e3.code === "ENOENT") {
             const configDir = path96.dirname(this.fallbackKeyPath);
             await fs84.promises.mkdir(configDir, { recursive: true });
-            const key = randomBytes6(32).toString("hex");
+            const key = randomBytes7(32).toString("hex");
             await fs84.promises.writeFile(this.fallbackKeyPath, key, { mode: 384 });
             return key;
           }
@@ -403032,7 +403181,7 @@ var init_integrity2 = __esm({
        */
       generateHash(metadata2) {
         const content = (0, import_json_stable_stringify.default)(metadata2) ?? "";
-        return createHash15("sha256").update(content).digest("hex");
+        return createHash16("sha256").update(content).digest("hex");
       }
       /**
        * Generates an HMAC-SHA256 signature using the master secret key.
@@ -437205,6 +437354,19 @@ var init_settingsSchema = __esm({
                 description: "The OpenAI-compatible provider this session should use, as configured by `/provider`. Values are the provider ids from `~/.gemini/openai-providers.json`; an id that no longer exists falls back to the file's first entry.",
                 showInDialog: false
               },
+              // Fork-owned key: opt-in OpenCode-compatible request headers for
+              // OpenAI-compatible endpoints that accept a credential but still gate
+              // on client identity. Off by default; see
+              // `core/openai/opencode/headers.ts` for what is sent and why.
+              openAiOpencodeHeaders: {
+                type: "boolean",
+                label: "OpenCode Request Headers",
+                category: "Security",
+                requiresRestart: true,
+                default: false,
+                description: "Adapt OpenAI-compatible requests to look like they came from the OpenCode CLI: client-identity headers plus the tool names some free endpoints require. Only enable this when the endpoint rejects requests that do not look like they came from the OpenCode CLI; some providers issue a key that is only accepted with the disguise in place. Requires a restart.",
+                showInDialog: true
+              },
               enforcedType: {
                 type: "string",
                 label: "Enforced Auth Type",
@@ -464549,7 +464711,7 @@ var init_retry2 = __esm({
 import * as fs113 from "node:fs";
 import * as path132 from "node:path";
 import { stat as stat17 } from "node:fs/promises";
-import { createHash as createHash17, randomUUID as randomUUID25 } from "node:crypto";
+import { createHash as createHash18, randomUUID as randomUUID25 } from "node:crypto";
 function filterMcpConfig(original) {
   const { trust, ...rest } = original;
   return Object.freeze(rest);
@@ -464685,7 +464847,7 @@ function getExtensionId(config2, installMetadata) {
   return hashValue(idValue);
 }
 function hashValue(value) {
-  return createHash17("sha256").update(value).digest("hex");
+  return createHash18("sha256").update(value).digest("hex");
 }
 var import_chalk2, ExtensionManager;
 var init_extension_manager = __esm({
@@ -470261,7 +470423,7 @@ var init_start2 = __esm({
 });
 
 // packages/cli/src/commands/gemma/setup.ts
-import { createHash as createHash18 } from "node:crypto";
+import { createHash as createHash19 } from "node:crypto";
 import fs120 from "node:fs";
 import path141 from "node:path";
 import { execFileSync as execFileSync3, spawn as nodeSpawn } from "node:child_process";
@@ -470340,7 +470502,7 @@ async function downloadFile3(url4, destPath) {
   fs120.renameSync(tmpPath, destPath);
 }
 async function computeFileSha256(filePath) {
-  const hash = createHash18("sha256");
+  const hash = createHash19("sha256");
   const fileStream = fs120.createReadStream(filePath);
   return new Promise((resolve48, reject) => {
     fileStream.on("data", (chunk) => {
@@ -472078,6 +472240,10 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
     // `/provider` switches. An id that no longer exists degrades to the first
     // entry with a warning (see core/openai/integration.ts).
     openAiProviderId: settings.security?.auth?.openAiProviderId,
+    // Fork-owned: opt-in OpenCode-compatible request headers for
+    // OpenAI-compatible endpoints that gate on client identity. Off by default;
+    // see core/openai/opencode/headers.ts.
+    openAiOpencodeHeaders: settings.security?.auth?.openAiOpencodeHeaders,
     targetDir: cwd7,
     includeDirectoryTree,
     includeDirectories,
@@ -473656,7 +473822,7 @@ import fs124 from "node:fs";
 import os41 from "node:os";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 import { promisify as promisify12 } from "node:util";
-import { randomBytes as randomBytes7 } from "node:crypto";
+import { randomBytes as randomBytes8 } from "node:crypto";
 function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -473734,7 +473900,7 @@ async function start_sandbox(config2, nodeArgs = [], cliConfig, cliArgs = []) {
           if (content) {
             try {
               const tempDir = fs124.realpathSync(os41.tmpdir());
-              const rand = randomBytes7(8).toString("hex");
+              const rand = randomBytes8(8).toString("hex");
               tempProfileFile = path146.join(
                 tempDir,
                 `gemini-sandbox-macos-${profile}-${rand}.sb`
@@ -474152,7 +474318,7 @@ async function start_sandbox(config2, nodeArgs = [], cliConfig, cliArgs = []) {
     const imageName = parseImageName(image3);
     const isIntegrationTest = process.env["GEMINI_CLI_INTEGRATION_TEST"] === "true";
     const containerNamePrefix = isIntegrationTest ? "gemini-cli-integration-test" : imageName;
-    const containerName = `${containerNamePrefix}-${randomBytes7(6).toString(
+    const containerName = `${containerNamePrefix}-${randomBytes8(6).toString(
       "hex"
     )}`;
     debugLogger.log(`ContainerName: ${containerName}`);
@@ -474451,7 +474617,7 @@ async function start_lxc_sandbox(config2, nodeArgs = [], cliArgs = []) {
     }
   };
   try {
-    const workspaceDeviceName = `gemini-workspace-${randomBytes7(4).toString(
+    const workspaceDeviceName = `gemini-workspace-${randomBytes8(4).toString(
       "hex"
     )}`;
     devicesToRemove.push(workspaceDeviceName);
@@ -474483,7 +474649,7 @@ async function start_lxc_sandbox(config2, nodeArgs = [], cliArgs = []) {
             );
             continue;
           }
-          const allowedDeviceName = `gemini-allowed-${randomBytes7(4).toString(
+          const allowedDeviceName = `gemini-allowed-${randomBytes8(4).toString(
             "hex"
           )}`;
           devicesToRemove.push(allowedDeviceName);
@@ -478901,7 +479067,7 @@ var GIT_COMMIT_INFO2;
 var init_git_commit2 = __esm({
   "packages/cli/src/generated/git-commit.ts"() {
     "use strict";
-    GIT_COMMIT_INFO2 = "ebe514a";
+    GIT_COMMIT_INFO2 = "aa945fc";
   }
 });
 
@@ -574260,12 +574426,12 @@ function getGitHubRepoInfo() {
   }
   return { owner: parts2[0], repo: parts2[1].replace(/\.git$/, "") };
 }
-var import_undici4, isGitHubRepository, getGitRepoRoot, getLatestGitHubRelease;
+var import_undici5, isGitHubRepository, getGitRepoRoot, getLatestGitHubRelease;
 var init_gitUtils2 = __esm({
   "packages/cli/src/utils/gitUtils.ts"() {
     "use strict";
     init_dist4();
-    import_undici4 = __toESM(require_undici2(), 1);
+    import_undici5 = __toESM(require_undici2(), 1);
     isGitHubRepository = () => {
       try {
         const remotes = (execSync7("git remote -v", {
@@ -574298,7 +574464,7 @@ var init_gitUtils2 = __esm({
             "Content-Type": "application/json",
             "X-GitHub-Api-Version": "2022-11-28"
           },
-          dispatcher: proxy2 ? new import_undici4.ProxyAgent(proxy2) : void 0,
+          dispatcher: proxy2 ? new import_undici5.ProxyAgent(proxy2) : void 0,
           /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
           signal: AbortSignal.any([AbortSignal.timeout(3e4), controller.signal])
           /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
@@ -574383,7 +574549,7 @@ async function downloadFiles({
         const endpoint = `${REPO_DOWNLOAD_URL}/refs/tags/${releaseTag}/${SOURCE_DIR}/${fileBasename}`;
         const response = await fetch(endpoint, {
           method: "GET",
-          dispatcher: proxy2 ? new import_undici5.ProxyAgent(proxy2) : void 0,
+          dispatcher: proxy2 ? new import_undici6.ProxyAgent(proxy2) : void 0,
           /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
           signal: AbortSignal.any([AbortSignal.timeout(3e4), abortController.signal])
           /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
@@ -574451,11 +574617,11 @@ async function downloadSetupFiles({
     throw error40;
   }
 }
-var import_undici5, GITHUB_WORKFLOW_PATHS, GITHUB_COMMANDS_PATHS, REPO_DOWNLOAD_URL, SOURCE_DIR, setupGithubCommand;
+var import_undici6, GITHUB_WORKFLOW_PATHS, GITHUB_COMMANDS_PATHS, REPO_DOWNLOAD_URL, SOURCE_DIR, setupGithubCommand;
 var init_setupGithubCommand = __esm({
   "packages/cli/src/ui/commands/setupGithubCommand.ts"() {
     "use strict";
-    import_undici5 = __toESM(require_undici2(), 1);
+    import_undici6 = __toESM(require_undici2(), 1);
     init_gitUtils2();
     init_types22();
     init_commandUtils2();
@@ -578180,7 +578346,7 @@ var require_websocket4 = __commonJS({
     var http9 = __require("http");
     var net3 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes8, createHash: createHash20 } = __require("crypto");
+    var { randomBytes: randomBytes9, createHash: createHash21 } = __require("crypto");
     var { Duplex: Duplex4, Readable: Readable9 } = __require("stream");
     var { URL: URL8 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate4();
@@ -578707,7 +578873,7 @@ var require_websocket4 = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes8(16).toString("base64");
+      const key = randomBytes9(16).toString("base64");
       const request = isSecure ? https6.request : http9.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -578836,7 +579002,7 @@ var require_websocket4 = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -579082,7 +579248,7 @@ var require_websocket_server2 = __commonJS({
     var EventEmitter21 = __require("events");
     var http9 = __require("http");
     var { Duplex: Duplex4 } = __require("stream");
-    var { createHash: createHash20 } = __require("crypto");
+    var { createHash: createHash21 } = __require("crypto");
     var extension = require_extension2();
     var PerMessageDeflate = require_permessage_deflate4();
     var subprotocol = require_subprotocol2();
@@ -579376,7 +579542,7 @@ var require_websocket_server2 = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -582380,7 +582546,7 @@ var require_websocket5 = __commonJS({
     var http9 = __require("http");
     var net3 = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes8, createHash: createHash20 } = __require("crypto");
+    var { randomBytes: randomBytes9, createHash: createHash21 } = __require("crypto");
     var { Duplex: Duplex4, Readable: Readable9 } = __require("stream");
     var { URL: URL8 } = __require("url");
     var PerMessageDeflate = require_permessage_deflate5();
@@ -582907,7 +583073,7 @@ var require_websocket5 = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes8(16).toString("base64");
+      const key = randomBytes9(16).toString("base64");
       const request = isSecure ? https6.request : http9.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -583036,7 +583202,7 @@ var require_websocket5 = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -583282,7 +583448,7 @@ var require_websocket_server3 = __commonJS({
     var EventEmitter21 = __require("events");
     var http9 = __require("http");
     var { Duplex: Duplex4 } = __require("stream");
-    var { createHash: createHash20 } = __require("crypto");
+    var { createHash: createHash21 } = __require("crypto");
     var extension = require_extension3();
     var PerMessageDeflate = require_permessage_deflate5();
     var subprotocol = require_subprotocol3();
@@ -583576,7 +583742,7 @@ var require_websocket_server3 = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash20("sha1").update(key + GUID).digest("base64");
+        const digest = createHash21("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -620707,7 +620873,7 @@ var init_constants9 = __esm({
 
 // node_modules/ky/distribution/utils/body.js
 var getBodySize, withProgress, streamResponse, streamRequest;
-var init_body3 = __esm({
+var init_body4 = __esm({
   "node_modules/ky/distribution/utils/body.js"() {
     init_constants9();
     getBodySize = (body2) => {
@@ -621107,7 +621273,7 @@ var init_Ky = __esm({
   "node_modules/ky/distribution/core/Ky.js"() {
     init_HTTPError();
     init_NonError();
-    init_body3();
+    init_body4();
     init_merge2();
     init_normalize2();
     init_timeout2();
@@ -628428,7 +628594,7 @@ __export(gemini_exports, {
   startInteractiveUI: () => startInteractiveUI2,
   validateDnsResolutionOrder: () => validateDnsResolutionOrder
 });
-import { createHash as createHash19 } from "node:crypto";
+import { createHash as createHash20 } from "node:crypto";
 import v83 from "node:v8";
 import os51 from "node:os";
 import dns from "node:dns";
@@ -628969,7 +629135,7 @@ ${finalArgs[promptIndex + 1]}`;
     const rawStartupWarnings = await rawStartupWarningsPromise;
     const startupWarnings = [
       ...rawStartupWarnings.map((message) => ({
-        id: `startup-${createHash19("sha256").update(message).digest("hex").substring(0, 16)}`,
+        id: `startup-${createHash20("sha256").update(message).digest("hex").substring(0, 16)}`,
         message,
         priority: WarningPriority.High
       })),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gemini-cli-leo",
-  "version": "0.1.19-fix.11",
+  "version": "0.1.20",
   "type": "module",
   "bin": {
     "gemini-leo": "gemini.mjs"