feat: add --skipSSL flag to disable TLS certificate verification

- --skipSSL or --skip-ssl sets NODE_TLS_REJECT_UNAUTHORIZED=0
- Useful behind corporate proxies with self-signed certificates
- Flag can appear anywhere in args (before or after subcommands)
- Automatically passed into Docker container when sandbox mode is used
- Added to --help output

Author: weisser-dev

cli-tool/src/index.js

@@ -3,8 +3,15 @@
 import { intro, checkExistingSetup, detectProject, promptAgents, promptSkills, promptModels, promptMcp, promptMcpSearch, promptCostControl, generateFiles, promptAgentsMd, outro, launchOpenCode } from './setup.js';
 
 const args = process.argv.slice(2);
-const command = args[0] || '';
-const subcommand = args[1] || '';
+
+// ── Handle --skipSSL flag (can appear anywhere in args) ───────────────────
+if (args.includes('--skipSSL') || args.includes('--skip-ssl')) {
+  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
+}
+
+const filteredArgs = args.filter(a => a !== '--skipSSL' && a !== '--skip-ssl');
+const command = filteredArgs[0] || '';
+const subcommand = filteredArgs[1] || '';
 
 async function main() {
   try {
@@ -54,10 +61,15 @@ function showHelp() {
     awesome-opencode configure mcp      Add/remove MCP servers
     awesome-opencode --help             Show this help
 
+  Flags:
+    --skipSSL                           Set NODE_TLS_REJECT_UNAUTHORIZED=0
+                                        (useful behind corporate proxies)
+
   Examples:
     npx @weisser-dev/awesome-opencode
     awesome-opencode configure mcp
-    awesome-opencode --help
+    awesome-opencode --skipSSL
+    awesome-opencode --skipSSL configure models
 
   Docs: https://github.com/weisser-dev/awesome-opencode
 `);

cli-tool/src/setup.js

@@ -2436,6 +2436,10 @@ export async function launchOpenCode({ forceSandbox } = {}) {
     }
 
     // Build Docker command
+    // If NODE_TLS_REJECT_UNAUTHORIZED=0 is set (via --skipSSL), pass it into the container
+    if (process.env.NODE_TLS_REJECT_UNAUTHORIZED === '0') {
+      envFlags.push('-e NODE_TLS_REJECT_UNAUTHORIZED=0');
+    }
     const envString = envFlags.length > 0 ? ' \\\n  ' + envFlags.join(' \\\n  ') : '';
     const dockerCmd = `docker run -it --rm \\\n  -v "$PWD":"$PWD" \\\n  -w "$PWD"${envString} \\\n  node:22 \\\n  bash -c "npm i -g opencode-ai && opencode"`;