Openwork Debug

Credential check

Set these before running the HTTP checks:

• OPENWORK_SERVER_URL
• OPENWORK_SERVER_TOKEN
• OPENWORK_WORKSPACE_ID (optional; use /workspaces to discover)

Quick usage (read-only)

curl -s "$OPENWORK_SERVER_URL/health"
curl -s "$OPENWORK_SERVER_URL/capabilities" \
  -H "Authorization: Bearer $OPENWORK_SERVER_TOKEN"

curl -s "$OPENWORK_SERVER_URL/workspaces" \
  -H "Authorization: Bearer $OPENWORK_SERVER_TOKEN"

Workspace config snapshot

curl -s "$OPENWORK_SERVER_URL/workspace/$OPENWORK_WORKSPACE_ID/config" \
  -H "Authorization: Bearer $OPENWORK_SERVER_TOKEN"

Audit log (recent)

curl -s "$OPENWORK_SERVER_URL/workspace/$OPENWORK_WORKSPACE_ID/audit?limit=25" \
  -H "Authorization: Bearer $OPENWORK_SERVER_TOKEN"

OpenCode engine checks

opencode -p "ping" -f json -q
opencode mcp list
opencode mcp debug <name>

DB fallback (read-only)

When the engine API is unavailable, you can inspect the SQLite db:

sqlite3 ~/.opencode/opencode.db "select id, title, status from sessions order by updated_at desc limit 5;"
sqlite3 ~/.opencode/opencode.db "select role, content from messages order by created_at desc limit 10;"

Notes

• Audit logs are stored at .opencode/openwork/audit.jsonl in the workspace root.
• OpenWork server writes only within approved workspace roots.