fix(opencode): pass missing auth headers in `run --attach` by ericclemmons · Pull Request #16097 · anomalyco/opencode

ericclemmons · 2026-03-05T04:22:57Z

Issue for this PR

Type of change

Bug fix
New feature
Refactor / code improvement
Documentation

What does this PR do?

Adds missing Basic auth headers to run command, just like attach.

How did you verify your code works?

Relied on tests (that I've since removed to be consistent with the other patterns) and comparing run against opencode serve vs. one with Basic auth (like what OpenCode.app starts):

✅ opencode --attach http://127.0.0.1:45103 --dir ~/workspace run howdy
❌ OPENCODE_SERVER_USERNAME=opencode OPENCODE_SERVER_PASSWORD=hunter2 opencode --attach=localhost:4096 run howdy
Error: Session not found

Checklist

I have tested my changes locally
I have not included unrelated changes in this PR

Notes

I originally started refactoring out a getAuthorizationHeader utility based on

opencode/packages/opencode/src/cli/cmd/tui/worker.ts

Line 147 in 85ff056

functiongetAuthorizationHeader(): string|undefined{

, but opted for inlining & duplicating what was in

opencode/packages/opencode/src/cli/cmd/tui/attach.ts

Lines 63 to 68 in 85ff056

constheaders=(()=>{
constpassword=args.password??process.env.OPENCODE_SERVER_PASSWORD
if(!password)returnundefined
constauth=`Basic ${Buffer.from(`opencode:${password}`).toString("base64")}`
return{Authorization: auth}
})()

I did use AI to author this because I was in the middle of another project when I finally asked Claude "Wait, is this an opencode bug??" and wound up here.

I'm sorry. 😔

github-actions · 2026-03-05T04:23:35Z

The following comment was made by an LLM, it may be inaccurate:

Based on my search, I found one potentially related PR:

feat(github-action): Support remote server connection via --attach (#15866)

This PR also deals with the --attach functionality and remote server connections, which is related to the auth headers fix being addressed in PR fix(opencode): pass missing auth headers in run --attach #16097.

However, this appears to be a feature addition for GitHub Actions rather than a direct duplicate of the auth headers bug fix. The current PR (#16097) is specifically addressing a bug where auth headers are missing when using run --attach, while #15866 focuses on enabling remote server connection support in GitHub Actions.

No duplicate PRs found

Fixesanomalyco#16096 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Consolidates auth header logic from worker.ts and attach.ts into a shared util used by run.ts, attach.ts, and worker.ts. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Match existing inline pattern from attach.ts instead of extracting. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Match attach.ts pattern: accept --password/-p flag and fall back to OPENCODE_SERVER_PASSWORD env var. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Matches the pattern in worker.ts to support non-default usernames. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com> (cherry picked from commit 18fb19d)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com> (cherry picked from commit 18fb19d)

…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

…#16097) Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

fix(opencode): pass auth headers in run --attach
35405a3
Fixesanomalyco#16096 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ericclemmons force-pushed the fix/run-attach-auth branch from c8a6687 to 35405a3Compare March 5, 2026 04:27

ericclemmonsand others added 4 commits March 4, 2026 22:28

test: add tests for getAttachHeaders auth logic
22c2dbf
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

refactor: extract shared getAuthorizationHeader to src/util/auth
aa38e05
Consolidates auth header logic from worker.ts and attach.ts into a shared util used by run.ts, attach.ts, and worker.ts. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

revert: remove extracted util, inline auth pattern in run.ts
7679679
Match existing inline pattern from attach.ts instead of extracting. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

fix(opencode): add --password flag and auth headers to run --attach
a2d78d7
Match attach.ts pattern: accept --password/-p flag and fall back to OPENCODE_SERVER_PASSWORD env var. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ericclemmons commented Mar 5, 2026
View reviewed changes

Comment threadpackages/opencode/src/cli/cmd/run.ts

ericclemmons commented Mar 5, 2026
View reviewed changes

Comment threadpackages/opencode/src/cli/cmd/run.ts

ericclemmons marked this pull request as ready for review March 5, 2026 04:53

github-actionsBot mentioned this pull request Mar 5, 2026
Fix: opencode run --attach should pass auth headers from env vars #16119
Closed

nexxeln requested changes Mar 5, 2026
View reviewed changes

Comment threadpackages/opencode/src/cli/cmd/run.ts

fix: read OPENCODE_SERVER_USERNAME from env instead of hardcoding
a683880
Matches the pattern in worker.ts to support non-default usernames. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ericclemmons requested a review from nexxeln March 6, 2026 02:48

ericclemmonsand others added 6 commits March 5, 2026 21:39

Merge branch 'dev' into fix/run-attach-auth
d446a82

Merge branch 'dev' into fix/run-attach-auth
883eacc

Merge branch 'dev' into fix/run-attach-auth
f1f8392

Merge branch 'dev' into fix/run-attach-auth
9c2e9e0

Merge branch 'dev' into fix/run-attach-auth
827620b

Merge branch 'dev' into fix/run-attach-auth
7f32a99

nexxeln enabled auto-merge (squash) March 9, 2026 07:25

nexxeln approved these changes Mar 9, 2026
View reviewed changes

nexxeln merged commit 18fb19d into anomalyco:devMar 9, 2026
9 checks passed

Grappeggia referenced this pull request in teamslop/slopcode Mar 16, 2026
fix(opencode): pass missing auth headers in run --attach (#16097)
dd6f896
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com> (cherry picked from commit 18fb19d)

demostanis pushed a commit to demostanis/opencode that referenced this pull request Mar 19, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
e9a7968
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

demostanis pushed a commit to demostanis/opencode that referenced this pull request Mar 20, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
93f453b
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

balcsida pushed a commit to balcsida/opencode that referenced this pull request Mar 24, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
0299dfe
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

ugoenyioha pushed a commit to ugoenyioha/opencode that referenced this pull request Apr 5, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
91a0a41
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

balcsida pushed a commit to balcsida/opencode that referenced this pull request Apr 8, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
a803ba9
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

RobertWsp pushed a commit to RobertWsp/opencode that referenced this pull request Apr 16, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
7f4833b
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

coleleavitt mentioned this pull request Apr 21, 2026
fix/memory 20695 coleleavitt/opencode#5
Merged

xywsxp pushed a commit to xywsxp/opencode that referenced this pull request Apr 24, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
0a2b96c
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

Rwanbt pushed a commit to Rwanbt/unifia that referenced this pull request May 5, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
9f7e9d3
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

avion23 pushed a commit to avion23/opencode that referenced this pull request Jun 10, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
07ef635
…#16097) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

Rwanbt pushed a commit to Rwanbt/unifia that referenced this pull request Jun 14, 2026
fix(opencode): pass missing auth headers inrun --attach(anomalyco…
28b6230
…#16097) Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

MarsQiu007 referenced this pull request in MarsQiu007/openNovel Jul 31, 2026
fix(opencode): pass missing auth headers in run --attach (#16097)
3c43ee4
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Shoubhit Dash <shoubhit2005@gmail.com>

coderabbitaiBot mentioned this pull request Aug 7, 2026
fix(opencode): narrow session_not_found regex to opencode's real erro… RunMaestro/Maestro#1359
Merged

Navigation Menu

Uh oh!

fix(opencode): pass missing auth headers in `run --attach` - #16097

fix(opencode): pass missing auth headers in `run --attach`#16097
nexxeln merged 12 commits into
anomalyco:devfrom
ericclemmons:fix/run-attach-auth

ericclemmons commented Mar 5, 2026•
edited
Loading

Uh oh!

github-actionsBot commented Mar 5, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	constheaders=(()=>{
	constpassword=args.password??process.env.OPENCODE_SERVER_PASSWORD
	if(!password)returnundefined
	constauth=`Basic ${Buffer.from(`opencode:${password}`).toString("base64")}`
	return{Authorization: auth}
	})()

Uh oh!

Conversation

ericclemmons commented Mar 5, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Issue for this PR

Type of change

What does this PR do?

How did you verify your code works?

Checklist

Notes

Uh oh!

github-actionsBot commented Mar 5, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ericclemmons commented Mar 5, 2026•
edited
Loading