From 6cb6f490c92ee09f25ff742cbaade12cb5174b0e Mon Sep 17 00:00:00 2001 From: Yogesh Singla Date: Wed, 15 Apr 2026 18:43:06 +0530 Subject: [PATCH] prompt user to approve before running well-known auth command Signed-off-by: Yogesh Singla --- packages/opencode/src/cli/cmd/providers.ts | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/packages/opencode/src/cli/cmd/providers.ts b/packages/opencode/src/cli/cmd/providers.ts index d2afbabfb078..ff096b4f9938 100644 --- a/packages/opencode/src/cli/cmd/providers.ts +++ b/packages/opencode/src/cli/cmd/providers.ts @@ -300,7 +300,14 @@ export const ProvidersLoginCommand = cmd({ if (args.url) { const url = args.url.replace(/\/+$/, "") const wellknown = await fetch(`${url}/.well-known/opencode`).then((x) => x.json() as any) - prompts.log.info(`Running \`${wellknown.auth.command.join(" ")}\``) + const confirmed = await prompts.confirm({ + message: `Allow running \`${wellknown.auth.command.join(" ")}\` from ${url}?`, + }) + if (!confirmed || prompts.isCancel(confirmed)) { + prompts.log.error("Cancelled") + prompts.outro("Done") + return + } const proc = Process.spawn(wellknown.auth.command, { stdout: "pipe", })