reset.php

<?php
// Reset chat session - deletes the session on OpenCode server and clears persisted ID
header('Content-Type: application/json');

// CORS: default allow-all for compatibility; set OPENCODE_CORS_ORIGIN to tighten.
$corsOrigin = getenv('OPENCODE_CORS_ORIGIN');
if (!$corsOrigin) {
    $corsOrigin = '*';
}
header('Access-Control-Allow-Origin: ' . $corsOrigin);
header('Access-Control-Allow-Methods: GET, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type');

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

$opencode = getenv('OPENCODE_URL');
if (!$opencode) {
    $opencode = 'http://127.0.0.1:4096';
}
$opencode = rtrim($opencode, '/');
$sessionFile = __DIR__ . '/.opencode_session';

$deleted = false;

if (file_exists($sessionFile)) {
    $sessionID = trim(file_get_contents($sessionFile));
    if ($sessionID !== '') {
        // Delete session on OpenCode server
        $cmd = 'curl -s -X DELETE ' . escapeshellarg($opencode . '/session/' . $sessionID);
        $descriptors = array(
            0 => array('pipe', 'r'),
            1 => array('pipe', 'w'),
            2 => array('pipe', 'w')
        );
        $proc = proc_open($cmd, $descriptors, $pipes);
        if (is_resource($proc)) {
            fclose($pipes[0]);
            fclose($pipes[1]);
            fclose($pipes[2]);
            proc_close($proc);
        }
        $deleted = true;
    }
    unlink($sessionFile);
}

echo json_encode(array('ok' => true, 'deleted' => $deleted));
?>