Added support for CLI global flag configurations through coder.globalFlags

Author: EhabY

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+### Added
+
+- Add support for CLI global flag configurations.
+
 ## [1.10.1](https://github.com/coder/vscode-coder/releases/tag/v1.10.1) 2025-08-13
 
 ### Fixed

package.json

@@ -119,6 +119,14 @@
 					"markdownDescription": "Disable Coder CLI signature verification, which can be useful if you run an unsigned fork of the binary.",
 					"type": "boolean",
 					"default": false
+				},
+				"coder.globalFlags": {
+					"markdownDescription": "Global flags to pass to every Coder CLI invocation. Enter each flag as a separate array item; values are passed verbatim and in order. Do **not** include the `coder` command itself. See the [CLI reference](https://coder.com/docs/reference/cli) for available global flags.\n\nNote that the `#coder.headerCommand#` setting **takes precedence** and will override any `--header-command` value specified here.",
+					"type": "array",
+					"items": {
+						"type": "string"
+					},
+					"default": []
 				}
 			}
 		},

src/api.ts

@@ -13,7 +13,7 @@ import * as ws from "ws";
 import { errToStr } from "./api-helper";
 import { CertificateError } from "./error";
 import { FeatureSet } from "./featureSet";
-import { getHeaderArgs } from "./headers";
+import { getGlobalFlags } from "./globalFlags";
 import { getProxyForUrl } from "./proxy";
 import { Storage } from "./storage";
 import { expandPath } from "./util";
@@ -186,9 +186,7 @@ export async function startWorkspaceIfStoppedOrFailed(
 
 	return new Promise((resolve, reject) => {
 		const startArgs = [
-			"--global-config",
-			globalConfigDir,
-			...getHeaderArgs(vscode.workspace.getConfiguration()),
+			...getGlobalFlags(vscode.workspace.getConfiguration(), globalConfigDir),
 			"start",
 			"--yes",
 			workspace.owner_name + "/" + workspace.name,

src/commands.ts

@@ -10,8 +10,9 @@ import * as vscode from "vscode";
 import { makeCoderSdk, needToken } from "./api";
 import { extractAgents } from "./api-helper";
 import { CertificateError } from "./error";
+import { getGlobalFlags } from "./globalFlags";
 import { Storage } from "./storage";
-import { toRemoteAuthority, toSafeHost } from "./util";
+import { escapeCommandArg, toRemoteAuthority, toSafeHost } from "./util";
 import {
 	AgentTreeItem,
 	WorkspaceTreeItem,
@@ -494,12 +495,16 @@ export class Commands {
 						this.restClient,
 						toSafeHost(url),
 					);
-					const escape = (str: string): string =>
-						`"${str.replace(/"/g, '\\"')}"`;
+
+					const configDir = path.dirname(
+						this.storage.getSessionTokenPath(toSafeHost(url)),
+					);
+					const globalFlags = getGlobalFlags(
+						vscode.workspace.getConfiguration(),
+						configDir,
+					);
 					terminal.sendText(
-						`${escape(binary)} ssh --global-config ${escape(
-							path.dirname(this.storage.getSessionTokenPath(toSafeHost(url))),
-						)} ${app.workspace_name}`,
+						`${escapeCommandArg(binary)}${globalFlags.length === 0 ? "" : ` ${globalFlags.join(" ")}`} ssh ${app.workspace_name}`,
 					);
 					await new Promise((resolve) => setTimeout(resolve, 5000));
 					terminal.sendText(app.command ?? "");

src/globalFlags.ts

@@ -0,0 +1,29 @@
+import { WorkspaceConfiguration } from "vscode";
+import { getHeaderArgs } from "./headers";
+import { escapeCommandArg } from "./util";
+
+export function getGlobalFlags(
+	configs: WorkspaceConfiguration,
+	configDir?: string,
+): string[] {
+	const globalFlags = configs.get<string[]>("coder.globalFlags") || [];
+	const headerArgs = getHeaderArgs(configs);
+	const globalConfigArgs = configDir
+		? ["--global-config", escapeCommandArg(configDir)]
+		: [];
+
+	// Precedence of "coder.headerCommand" is higher than "coder.globalConfig" with the "--header-command" flag
+	let filteredGlobalFlags = globalFlags;
+	if (headerArgs.length > 0) {
+		filteredGlobalFlags = globalFlags.filter(
+			(flag) => !flag.startsWith("--header-command"),
+		);
+	}
+
+	if (globalConfigArgs.length > 0) {
+		filteredGlobalFlags = globalFlags.filter(
+			(flag) => !flag.startsWith("--global-config"),
+		);
+	}
+	return [...filteredGlobalFlags, ...headerArgs, ...globalConfigArgs];
+}

src/remote.ts

@@ -26,7 +26,7 @@ import { extractAgents } from "./api-helper";
 import * as cli from "./cliManager";
 import { Commands } from "./commands";
 import { featureSetForVersion, FeatureSet } from "./featureSet";
-import { getHeaderArgs } from "./headers";
+import { getGlobalFlags } from "./globalFlags";
 import { Inbox } from "./inbox";
 import { SSHConfig, SSHValues, mergeSSHConfigValues } from "./sshConfig";
 import { computeSSHProperties, sshSupportsSetEnv } from "./sshSupport";
@@ -758,19 +758,15 @@ export class Remote {
 		const sshConfig = new SSHConfig(sshConfigFile);
 		await sshConfig.load();
 
-		const headerArgs = getHeaderArgs(vscode.workspace.getConfiguration());
-		const headerArgList =
-			headerArgs.length > 0 ? ` ${headerArgs.join(" ")}` : "";
-
 		const hostPrefix = label
 			? `${AuthorityPrefix}.${label}--`
 			: `${AuthorityPrefix}--`;
 
+		const globalConfigs = this.globalConfigs(featureSet, label);
+
 		const proxyCommand = featureSet.wildcardSSH
-			? `${escapeCommandArg(binaryPath)}${headerArgList} --global-config ${escapeCommandArg(
-					path.dirname(this.storage.getSessionTokenPath(label)),
-				)} ssh --stdio --usage-app=vscode --disable-autostart --network-info-dir ${escapeCommandArg(this.storage.getNetworkInfoPath())}${await this.formatLogArg(logDir)} --ssh-host-prefix ${hostPrefix} %h`
-			: `${escapeCommandArg(binaryPath)}${headerArgList} vscodessh --network-info-dir ${escapeCommandArg(
+			? `${escapeCommandArg(binaryPath)}${globalConfigs} ssh --stdio --usage-app=vscode --disable-autostart --network-info-dir ${escapeCommandArg(this.storage.getNetworkInfoPath())}${await this.formatLogArg(logDir)} --ssh-host-prefix ${hostPrefix} %h`
+			: `${escapeCommandArg(binaryPath)}${globalConfigs} vscodessh --network-info-dir ${escapeCommandArg(
 					this.storage.getNetworkInfoPath(),
 				)}${await this.formatLogArg(logDir)} --session-token-file ${escapeCommandArg(this.storage.getSessionTokenPath(label))} --url-file ${escapeCommandArg(
 					this.storage.getUrlPath(label),
@@ -828,6 +824,20 @@ export class Remote {
 		return sshConfig.getRaw();
 	}
 
+	private globalConfigs(featureSet: FeatureSet, label: string): string {
+		const vscodeConfig = vscode.workspace.getConfiguration();
+		let args: string[];
+		if (featureSet.wildcardSSH) {
+			args = getGlobalFlags(
+				vscodeConfig,
+				path.dirname(this.storage.getSessionTokenPath(label)),
+			);
+		} else {
+			args = getGlobalFlags(vscodeConfig);
+		}
+		return args.length === 0 ? "" : ` ${args.join(" ")}`;
+	}
+
 	// showNetworkUpdates finds the SSH process ID that is being used by this
 	// workspace and reads the file being created by the Coder CLI.
 	private showNetworkUpdates(sshPid: number): vscode.Disposable {