From da3f47c7ca20d0d814c509d622efbd2720e63087 Mon Sep 17 00:00:00 2001
From: Lucas Jo <jty016@gmail.com>
Date: Sun, 1 Feb 2026 19:15:18 +0900
Subject: [PATCH] fix(plugin): pass server auth headers to plugin client

---
 packages/opencode/src/plugin/index.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages/opencode/src/plugin/index.ts b/packages/opencode/src/plugin/index.ts
index 6032935f8480..ab85a2c05861 100644
--- a/packages/opencode/src/plugin/index.ts
+++ b/packages/opencode/src/plugin/index.ts
@@ -21,8 +21,14 @@ export namespace Plugin {
   const INTERNAL_PLUGINS: PluginInstance[] = [CodexAuthPlugin, CopilotAuthPlugin]
 
   const state = Instance.state(async () => {
+    const password = process.env.OPENCODE_SERVER_PASSWORD
     const client = createOpencodeClient({
       baseUrl: "http://localhost:4096",
+      headers: password
+        ? {
+            Authorization: `Basic ${btoa(`opencode:${password}`)}`,
+          }
+        : {},
       // @ts-ignore - fetch type incompatibility
       fetch: async (...args) => Server.App().fetch(...args),
     })