Password authentication not working with opencode attach

[Du7chManiac]

Problem

When OPENCODE_SERVER_PASSWORD is set on the server, opencode attach cannot authenticate and returns 404 page not found.

The opencode attach CLI does not currently support passing credentials — there is no -p/--password flag, and setting OPENCODE_SERVER_PASSWORD as a client-side environment variable does not get sent as HTTP Basic Auth headers.

Upstream Issue

This is a known limitation tracked upstream:

• Cannot 'attach' to an opencode server with a password anomalyco/opencode#9011
• [FEATURE]: Attach to authenticated OC Server anomalyco/opencode#8458

Current Workaround

Disable password protection (OPENCODE_SERVER_PASSWORD) and rely on Tailscale VPN for access control instead.

Expected Resolution

Once upstream adds client-side auth support for opencode attach, update our documentation and .env.example to reflect the correct usage.

[Du7chManiac]

Should be fixed?

anomalyco/opencode#9095