New Effect HTTP_API Doesn't allow for Browser to challenge server basic auth when using the desktop web app and EXPERIMENTAL_HTTP_API flag

[OpeOginni]

Description

When using the new Effect HTTP_API and running the opencode server, trying to go the / path to access the desktop app. If the server has a password the whole site just errors out as unreachable, rather than going through the native browser flow for setting basic auth.

Plugins

none

OpenCode version

1.14.33

Steps to reproduce

1. Run the opencode server with a password and set the experemental_httpapi OPENCODE_EXPERIMENTAL_HTTPAPI=true OPENCODE_SERVER_PASSWORD=ope opencode serve
2. Try to open the desktop web app by going to the / path.
3. Notice the site doesnt work neither do you get asked for username and password

Screenshot and/or share link

No response

Operating System

macos

Terminal

Ghostty

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [Bug][Web] Basic auth causes 401 on /site.webmanifest and /global/event, then crashes with PasteTypeError #16493: Basic auth causes 401 errors on web app endpoints when OPENCODE_SERVER_PASSWORD is set, preventing the app from loading — very similar symptoms to what you're describing.
• Health check password protected #12805: Health check endpoint requires authentication when OPENCODE_SERVER_PASSWORD is set, related to server password auth behavior.