refactor: isolate legacy flags

packages/server/src/auth.ts

@@ -1,11 +1,9 @@
 export * as ServerAuth from "./auth"
 
-import { Context, Effect, Layer, Option, Redacted } from "effect"
-import { all, option, string, withDefault } from "effect/Config"
+import { Context, Layer, Option, Redacted } from "effect"
 
 export type Credentials = {
   password?: string
-  username?: string
 }
 
 export type DecodedCredentials = {
@@ -15,7 +13,6 @@ export type DecodedCredentials = {
 
 export type Info = {
   readonly password: Option.Option<string>
-  readonly username: string
 }
 
 export class Config extends Context.Service<Config, Info>()("@opencode/ServerAuthConfig") {
@@ -24,17 +21,7 @@ export class Config extends Context.Service<Config, Info>()("@opencode/ServerAut
   }
 
   static get layer() {
-    return Layer.effect(
-      this,
-      Effect.gen(function* () {
-        return Config.of(
-          yield* all({
-            password: string("OPENCODE_SERVER_PASSWORD").pipe(option),
-            username: string("OPENCODE_SERVER_USERNAME").pipe(withDefault("opencode")),
-          }),
-        )
-      }),
-    )
+    return this.configLayer({ password: Option.none() })
   }
 }
 
@@ -45,16 +32,16 @@ export function required(config: Info) {
 export function authorized(credentials: DecodedCredentials, config: Info) {
   return (
     Option.isSome(config.password) &&
-    credentials.username === config.username &&
+    credentials.username === "opencode" &&
     Redacted.value(credentials.password) === config.password.value
   )
 }
 
 export function header(credentials?: Credentials) {
-  const password = credentials?.password ?? process.env.OPENCODE_SERVER_PASSWORD
+  const password = credentials?.password
   if (!password) return undefined
 
-  return `Basic ${Buffer.from(`${credentials?.username ?? process.env.OPENCODE_SERVER_USERNAME ?? "opencode"}:${password}`).toString("base64")}`
+  return `Basic ${Buffer.from(`opencode:${password}`).toString("base64")}`
 }
 
 export function headers(credentials?: Credentials) {