opencode/packages
Alex Sadleir 0c8f4475e9 feat: add per-provider TLS and proxy configuration
Add support for configuring TLS options and HTTP proxy per provider,
enabling use of corporate proxies, self-signed certificates, and mTLS.

New provider options:
- tls.rejectUnauthorized: Accept self-signed certificates
- tls.cert: Client certificate path for mTLS
- tls.key: Client private key path for mTLS
- tls.ca: Custom CA certificate path(s)
- proxy: HTTP proxy URL (overrides HTTPS_PROXY env var)

The TLS config is passed to Bun's native fetch using Bun.file() for
cert/key/ca paths. The proxy option uses Bun's built-in proxy support.

For system-wide certificate trust, users can set:
- NODE_OPTIONS="--use-system-ca" or BUN_OPTIONS="--use-system-ca"
- NODE_EXTRA_CA_CERTS=/path/to/ca.pem

Fixes #1694 - Users with corporate CAs can now either use the system
trust store via --use-system-ca flag, or specify their CA cert path
in the provider's tls.ca option.

Documentation added to packages/web/src/content/docs/network.mdx with
examples for proxy configuration, custom CAs, and mTLS setup.
2025-12-23 20:07:24 +11:00
..
app release: v1.0.191 2025-12-23 05:57:23 +00:00
console release: v1.0.191 2025-12-23 05:57:23 +00:00
desktop release: v1.0.191 2025-12-23 05:57:23 +00:00
docs ci 2025-12-07 21:51:22 -05:00
enterprise release: v1.0.191 2025-12-23 05:57:23 +00:00
extensions/zed release: v1.0.191 2025-12-23 05:57:23 +00:00
function release: v1.0.191 2025-12-23 05:57:23 +00:00
identity chore: identity cleanup, vscode ext images 2025-12-08 06:47:57 -06:00
opencode feat: add per-provider TLS and proxy configuration 2025-12-23 20:07:24 +11:00
plugin release: v1.0.191 2025-12-23 05:57:23 +00:00
script ci 2025-12-10 02:57:39 +00:00
sdk release: v1.0.191 2025-12-23 05:57:23 +00:00
slack release: v1.0.191 2025-12-23 05:57:23 +00:00
ui release: v1.0.191 2025-12-23 05:57:23 +00:00
util release: v1.0.191 2025-12-23 05:57:23 +00:00
web feat: add per-provider TLS and proxy configuration 2025-12-23 20:07:24 +11:00