feat(config): add server.docker (and image) to auto-use Docker server for TUI when enabled; update TUI to honor config

Author: opencode-bot

.opencode/docker-server-pr.md

@@ -0,0 +1,24 @@
+Adds an optional Docker-backed server mode for the TUI and headless server to isolate the runtime environment without sacrificing TUI performance.
+
+Why
+- Improve security/isolation by running the server in a container
+- Avoid host tooling/version conflicts while keeping the TUI native on the host
+- Keep this fully optional; default behavior is unchanged
+
+What
+- TUI/Serve: `--docker` flag to start the server in Docker, mounting `$PWD` to `/workspace` and mapping a host port to container `8080`.
+- Image: default to `opencodeai/opencode:server`; support `--docker-image`.
+- Local builds: support `--dockerfile`, `--docker-context`, `--docker-build` for building a local image; added `script/docker-build` and `docker:build` script.
+- Auth: sync only opencode-managed provider credentials to the server (`PUT /auth/:id`) and inject only provider-defined env vars (from models.dev) into the container (e.g. `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`). No $HOME/XDG dirs are mounted.
+- Dockerfile: based on `oven/bun`; installs minimal tools (`git`, `curl`, `unzip`, `tar`, `nodejs`, `npm`, `golang`) and runs `bun run /app/src/index.ts serve --hostname 0.0.0.0 --port 8080`.
+- CI: GitHub Action to publish `opencodeai/opencode:server` on release (multi-arch).
+- Docs: README snippet for Docker usage.
+
+Usage
+- TUI: `opencode --docker` (uses Hub image) or `opencode --docker --docker-image opencode:local` after a local build
+- Serve: `opencode serve --docker --port 8080`
+- Build: `bun run docker:build` (tags both `opencodeai/opencode:server` and `opencode:local`)
+
+Notes
+- Backwards-compatible and opt-in.
+- Only provider credentials are synced; no other host secrets are exposed.

README.md

@@ -126,6 +126,18 @@ Or use the helper:
 ./script/docker-build [Dockerfile] [context]
 ```
 
+Auto-enable Docker mode via config:
+
+```jsonc
+// ~/.config/opencode/config.json
+{
+  "server": {
+    "docker": true,
+    "image": "opencodeai/opencode:server"
+  }
+}
+```
+
 #### Development Notes
 
 **API Client**: After making changes to the TypeScript API endpoints in `packages/opencode/src/server/server.ts`, you will need the opencode team to generate a new stainless sdk for the clients.

packages/opencode/src/cli/cmd/tui.ts

@@ -132,10 +132,17 @@ export const TuiCommand = cmd({
           return "needs_provider"
         }
         const cfg = await Config.get()
+<<<<<<< HEAD
         const useDocker = (args.docker ?? (cfg.server?.docker === true)) === true
 
         const server = await (async () => {
           if (!useDocker) {
+=======
+        const docker = (args.docker ?? (cfg.server?.docker === true)) === true
+
+        const server = await (async () => {
+          if (!docker) {
+>>>>>>> 31983999 (feat(config): add server.docker (and image) to auto-use Docker server for TUI when enabled; update TUI to honor config)
             return Server.listen({ port: args.port, hostname: args.hostname })
           }
 
@@ -228,9 +235,15 @@ export const TuiCommand = cmd({
             port,
             url,
             stop: async () => {
+<<<<<<< HEAD
               const stop = Bun.spawn({ cmd: [dockerBin, "stop", id], stdout: "ignore", stderr: "inherit" })
               await stop.exited
             },
+=======
+            const stop = Bun.spawn({ cmd: [dockerBin, "stop", id], stdout: "ignore", stderr: "inherit" })
+            await stop.exited
+          },
+>>>>>>> 31983999 (feat(config): add server.docker (and image) to auto-use Docker server for TUI when enabled; update TUI to honor config)
           }
         })()
 
@@ -254,7 +267,11 @@ export const TuiCommand = cmd({
         Log.Default.info("tui", {
           cmd,
         })
+<<<<<<< HEAD
         if (useDocker) {
+=======
+        if (docker) {
+>>>>>>> 31983999 (feat(config): add server.docker (and image) to auto-use Docker server for TUI when enabled; update TUI to honor config)
           const auth = await Auth.all()
           await Promise.all(
             Object.entries(auth).map(([id, info]) =>

packages/opencode/src/config/config.ts

@@ -485,6 +485,13 @@ export namespace Config {
             .optional(),
         })
         .optional(),
+      server: z
+        .object({
+          docker: z.boolean().optional().describe("Run the server in Docker by default for the TUI"),
+          image: z.string().optional().describe("Default Docker image to use for the server"),
+        })
+        .optional()
+        .describe("Server runtime preferences"),
     })
     .strict()
     .openapi({