openAgent

1import { Context } from "effect"
2 
3const opencodeOrigin = /^https:\/\/([a-z0-9-]+\.)*opencode\.ai$/
4 
5export type CorsOptions = { readonly cors?: ReadonlyArray<string> }
6 
7export const CorsConfig = Context.Reference<CorsOptions | undefined>("@opencode/ServerCorsConfig", {
8  defaultValue: () => undefined,
9})
10 
11export function isAllowedCorsOrigin(input: string | undefined, opts?: CorsOptions) {
12  if (!input) return true
13  if (input.startsWith("http://localhost:")) return true
14  if (input.startsWith("http://127.0.0.1:")) return true
15  if (input.startsWith("oc://renderer")) return true
16  if (input === "tauri://localhost" || input === "http://tauri.localhost" || input === "https://tauri.localhost")
17    return true
18  if (opencodeOrigin.test(input)) return true
19  return opts?.cors?.includes(input) ?? false
20}
21 
22export function isAllowedRequestOrigin(input: string | undefined, host: string | undefined, opts?: CorsOptions) {
23  if (!input) return true
24  if (host && sameHost(input, host)) return true
25  return isAllowedCorsOrigin(input, opts)
26}
27 
28function sameHost(origin: string, host: string) {
29  try {
30    return new URL(origin).host === host
31  } catch {
32    return false
33  }
34}
35