OPENCODE_SERVER_PASSWORD breaks TUI startup with --mdns or --hostname

[blairhudson]

Setting OPENCODE_SERVER_PASSWORD breaks normal TUI startup when using --mdns or --hostname.

Repro

export OPENCODE_SERVER_PASSWORD=changeme123
opencode --mdns

Also fails with:

export OPENCODE_SERVER_PASSWORD=changeme123
opencode --hostname 0.0.0.0

Error

Error: 4 of 6 requests failed:
config.providers: opencode server GET http://0.0.0.0:4096/config/providers?... → 401 Unauthorized
provider.list: opencode server GET http://0.0.0.0:4096/provider?... → 401 Unauthorized
app.agents: opencode server GET http://0.0.0.0:4096/agent?... → 401 Unauthorized
config.get: opencode server GET http://0.0.0.0:4096/config?... → 401 Unauthorized

Expected

TUI should start successfully.

If OPENCODE_SERVER_PASSWORD enables Basic auth, internal TUI requests should include auth or otherwise work.

Why it matters

--mdns and --hostname 0.0.0.0 expose OpenCode on LAN. Password auth should be usable with those modes.

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• opencode run fails with Session not found when OPENCODE_SERVER_PASSWORD is set #24204: Same root cause — OPENCODE_SERVER_PASSWORD causes the internal client to receive 401 Unauthorized from its own in-process server. That issue covers opencode run; this one covers the TUI with --mdns/--hostname, but the underlying problem appears to be the same.

[OpeOginni]

I am able to reproduce, and I am looking at a fix!