@agentmemory/agentmemory 0.9.30 → 0.9.31

package/plugin/cursor/hooks.json

@@ -3,38 +3,53 @@
   "hooks": {
     "sessionStart": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/session-start.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" sessionStart"
       }
     ],
     "beforeSubmitPrompt": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/prompt-submit.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" beforeSubmitPrompt"
       }
     ],
     "preToolUse": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/pre-tool-use.mjs",
-        "matcher": "Shell|Read|Write|Grep"
+        "matcher": "Edit|Write|Read|Glob|Grep|Shell",
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" preToolUse"
       }
     ],
     "postToolUse": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/post-tool-use.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" postToolUse"
       }
     ],
     "postToolUseFailure": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/post-tool-failure.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" postToolUseFailure"
+      }
+    ],
+    "preCompact": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" preCompact"
+      }
+    ],
+    "subagentStart": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" subagentStart"
+      }
+    ],
+    "subagentStop": [
+      {
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-hook.mjs\" subagentStop"
       }
     ],
     "stop": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/stop.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-detached.mjs\" stop"
       }
     ],
     "sessionEnd": [
       {
-        "command": "node ${CURSOR_PLUGIN_ROOT}/plugin/scripts/session-end.mjs"
+        "command": "node \"${CURSOR_PLUGIN_ROOT}/plugin/scripts/cursor/run-detached.mjs\" sessionEnd"
       }
     ]
   }

package/plugin/hooks.json

@@ -0,0 +1,67 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-start.mjs\""
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/prompt-submit.mjs\""
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "^(exec|edit|write|read|apply_patch|grep|glob)$",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/post-tool-use.mjs\""
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/stop.mjs\""
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/session-end.mjs\""
+          }
+        ]
+      }
+    ]
+  }
+}

package/plugin/opencode/README.md

@@ -440,7 +440,7 @@ agentmemory  ──push──▶  OpenCode system prompt
 
 ### Why OpenCode goes direct
 
-agentmemory already persists everything in SQLite (`data/state_store.db`). Adding an intermediate MEMORY.md file would duplicate data, introduce sync lag, and require the model to re-parse structured context from markdown. Direct injection delivers the same data with lower latency and zero staleness — the agent always sees what agentmemory knows right now.
+agentmemory persists state through the iii state worker, using file-backed KV (`data/state_store.db`) by default or Redis when configured. Adding an intermediate MEMORY.md file would duplicate data, introduce sync lag, and require the model to re-parse structured context from markdown. Direct injection delivers the same data with lower latency and zero staleness — the agent always sees what agentmemory knows right now.
 
 ## Slash commands
 

package/plugin/opencode/agentmemory-capture.ts

@@ -1,8 +1,8 @@
 import type { Plugin } from "@opencode-ai/plugin";
 import { execFileSync } from "node:child_process";
-import { readFileSync } from "node:fs";
+import { readFileSync, realpathSync } from "node:fs";
 import { homedir } from "node:os";
-import { basename, join } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 
 const API = process.env.AGENTMEMORY_URL || "http://localhost:3111";
 // OpenCode reports tool names in lowercase ("read", "edit", ...); matching is
@@ -116,7 +116,7 @@ async function observe(
 let activeSessionId: string | null = null;
 let pendingConfig: Record<string, unknown> | null = null;
 // Default scope resolved at plugin init (same resolution order as the hooks'
-// resolveProject: env override, git toplevel basename, cwd basename). In a
+// resolveProject: env override, git repository basename, cwd basename). In a
 // long-lived OpenCode process serving multiple directories these defaults are
 // only a fallback — attribution is per-session via sessionProjects, resolved
 // from each session's own directory at session.created. Module-level-only
@@ -138,13 +138,19 @@ function resolveProjectName(dir: string): string {
   const cached = projectNameCache.get(dir);
   if (cached !== undefined) return cached;
   try {
-    const top = execFileSync("git", ["rev-parse", "--show-toplevel"], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8",
-    }).trim();
+    const [top, gitDir, commonDir] = execFileSync(
+      "git",
+      ["rev-parse", "--show-toplevel", "--git-dir", "--git-common-dir"],
+      {
+        cwd: dir,
+        stdio: ["ignore", "pipe", "ignore"],
+        encoding: "utf8",
+      },
+    )
+      .trim()
+      .split(/\r?\n/);
     if (top) {
-      const name = basename(top);
+      const name = basename(repositoryRoot(dir, top, gitDir, commonDir));
       projectNameCache.set(dir, name);
       return name;
     }
@@ -155,6 +161,14 @@ function resolveProjectName(dir: string): string {
   projectNameCache.set(dir, fallback);
   return fallback;
 }
+
+function repositoryRoot(dir: string, top: string, gitDir?: string, commonDir?: string): string {
+  if (!gitDir || !commonDir) return top;
+  const physical = realpathSync(dir);
+  const common = resolve(physical, commonDir);
+  if (resolve(physical, gitDir) === common || basename(common) !== ".git") return top;
+  return dirname(common);
+}
 const stashedFiles = new Map<string, Set<string>>();
 const seenSubtaskIds = new Map<string, Set<string>>();
 const seenToolCallIds = new Map<string, Set<string>>();
@@ -380,7 +394,7 @@ const v1Hooks: Plugin = async (ctx) => {
           if (DEBUG) console.error("[agentmemory] session.deleted with no session ID");
           return;
         }
-        await post("/session/end", { sessionId: sid });
+        await post("/session/end", { sessionId: sid, final: true });
         post("/crystals/auto", { olderThanDays: 7 }, 30000);
         post("/consolidate-pipeline", { tier: "all", force: true }, 30000);
         if (sid === activeSessionId) activeSessionId = null;
@@ -1260,7 +1274,7 @@ async function v2Setup(ctx: any) {
       case "session.deleted": {
         const sid = (data.sessionID as string) || activeSessionId;
         if (!sid) return;
-        await post("/session/end", { sessionId: sid });
+        await post("/session/end", { sessionId: sid, final: true });
         void post("/crystals/auto", { olderThanDays: 7 }, 30000);
         void post("/consolidate-pipeline", { tier: "all", force: true }, 30000);
         if (sid === activeSessionId) activeSessionId = null;

package/plugin/opencode/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentmemory-capture",
-  "version": "0.9.30",
+  "version": "0.9.31",
   "description": "OpenCode plugin for agentmemory — full Claude Code hook parity: session lifecycle (create/idle/status/compacted/update/diff/delete/error), messages & prompts (chat.message, message.updated user+assistant, message.removed), tool lifecycle (ToolPart states with timing), part tracking (subtask, step-finish, reasoning, file, patch, compaction, agent, retry), file enrichment pipeline, permissions, task tracking (w/ priority), commands, config & model tracking. 22 hooks, 2 slash commands.",
   "author": {
     "name": "Rohit Ghumare",

package/plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentmemory",
-  "version": "0.9.30",
+  "version": "0.9.31",
   "description": "Persistent memory for AI coding agents -- captures tool usage, compresses via LLM, injects context into future sessions. 12 hooks, 54 MCP tools, 17 skills, real-time viewer.",
   "author": {
     "name": "Rohit Ghumare",

package/plugin/scripts/_capture.d.mts

@@ -1,5 +1,8 @@
+//#region src/functions/privacy.d.ts
+declare function stripPrivateData(input: string): string;
+//#endregion
 //#region src/hooks/_capture.d.ts
-declare const REST_URL: string;
+declare const REST_URL: any;
 type CaptureOutcome = "delivered" | "duplicate" | "rejected" | "spooled" | "dropped";
 interface ObserveBody {
   hookType: string;
@@ -18,5 +21,5 @@ declare function captureObservation(body: ObserveBody, timeoutMs: number): Promi
 declare function isDrainChild(): boolean;
 declare function runDrainChild(): Promise<void>;
 //#endregion
-export { CaptureOutcome, ObserveBody, REST_URL, authHeaders, captureObservation, isDrainChild, runDrainChild, withEventId };
+export { CaptureOutcome, ObserveBody, REST_URL, authHeaders, captureObservation, isDrainChild, runDrainChild, stripPrivateData, withEventId };
 //# sourceMappingURL=_capture.d.mts.map

package/plugin/scripts/_capture.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"_capture.d.mts","names":[],"sources":["../../src/hooks/_capture.ts"],"mappings":";cAgBa,QAAA;AAAA,KAOD,cAAA;AAAA,UAEK,WAAA;EACf,QAAA;EACA,SAAA;EACA,OAAA;EACA,GAAA;EACA,SAAA;EACA,IAAA;EACA,OAAA;AAAA;AAAA,iBAGc,WAAA,CAAA,GAAe,MAAA;AAAA,iBAMf,WAAA,CACd,IAAA,EAAM,WAAA,EACN,IAAA,EAAM,MAAA,mBACN,OAAA,YACA,OAAA;EAAW,MAAA;AAAA,IACV,WAAA;AAAA,iBAoDmB,kBAAA,CAAmB,IAAA,EAAM,WAAA,EAAa,SAAA,WAAoB,OAAA,CAAQ,cAAA;AAAA,iBAmBxE,YAAA,CAAA;AAAA,iBAIM,aAAA,CAAA,GAAiB,OAAA"}
+{"version":3,"file":"_capture.d.mts","names":[],"sources":["../../src/functions/privacy.ts","../../src/hooks/_capture.ts"],"mappings":";iBA2BgB,gBAAA,CAAiB,KAAA;;;cCTpB,QAAA;AAAA,KAOD,cAAA;AAAA,UAEK,WAAA;EACf,QAAA;EACA,SAAA;EACA,OAAA;EACA,GAAA;EACA,SAAA;EACA,IAAA;EACA,OAAA;AAAA;AAAA,iBAGc,WAAA,CAAA,GAAe,MAAA;AAAA,iBAMf,WAAA,CACd,IAAA,EAAM,WAAA,EACN,IAAA,EAAM,MAAA,mBACN,OAAA,YACA,OAAA;EAAW,MAAA;AAAA,IACV,WAAA;AAAA,iBAoDmB,kBAAA,CAAmB,IAAA,EAAM,WAAA,EAAa,SAAA,WAAoB,OAAA,CAAQ,cAAA;AAAA,iBAmBxE,YAAA,CAAA;AAAA,iBAIM,aAAA,CAAA,GAAiB,OAAA"}

package/plugin/scripts/_capture.mjs

@@ -6,7 +6,7 @@ import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 //#region src/secret-store.ts
 const SECRET_KEY = "AGENTMEMORY_SECRET";
 function agentmemoryHomeDir() {
-	return join(homedir(), ".agentmemory");
+	return process.env["AGENTMEMORY_DATA_DIR"] || join(homedir(), ".agentmemory");
 }
 function secretFilePath() {
 	return join(agentmemoryHomeDir(), "secret");
@@ -30,7 +30,7 @@ function unquote(value) {
 function readEnvFileSecret() {
 	let content;
 	try {
-		content = readFileSync(join(agentmemoryHomeDir(), ".env"), "utf-8");
+		content = readFileSync(process.env["AGENTMEMORY_ENV_FILE"] || join(homedir(), ".agentmemory", ".env"), "utf-8");
 	} catch {
 		return "";
 	}
@@ -46,13 +46,29 @@ function readEnvFileSecret() {
 	}
 	return found;
 }
-function readStoredSecret() {
+function readSecretFile(path) {
 	try {
-		return usable(readFileSync(secretFilePath(), "utf-8"));
+		return usable(readFileSync(path, "utf-8"));
 	} catch {
 		return "";
 	}
 }
+function legacyDataDirSecretPaths(env = process.env) {
+	const dataDir = env["AGENTMEMORY_DATA_DIR"];
+	if (!dataDir) return [];
+	const paths = [
+		join(dataDir, "secret"),
+		join(dataDir, ".hmac"),
+		join(dataDir, "..", ".hmac")
+	];
+	return [...new Set(paths.filter((path) => path !== secretFilePath()))];
+}
+function readStoredSecret(env = process.env) {
+	const canonicalPath = canonicalSecretPath();
+	const localPath = secretFilePath();
+	const legacyPaths = legacyDataDirSecretPaths(env);
+	return readSecretFile(canonicalPath) || (localPath === canonicalPath ? "" : readSecretFile(localPath)) || legacyPaths.map(readSecretFile).find(Boolean) || "";
+}
 function isLoopbackUrl(url) {
 	let hostname;
 	try {
@@ -66,8 +82,12 @@ function isLoopbackUrl(url) {
 function resolveClientSecret(baseUrl, env = process.env) {
 	const fromEnv = usable(env[SECRET_KEY]);
 	if (fromEnv) return fromEnv;
+	if (env.AGENTMEMORY_CREDENTIAL_MODE === "explicit") return "";
 	if (!isLoopbackUrl(baseUrl)) return "";
-	return readEnvFileSecret() || readStoredSecret();
+	return readEnvFileSecret() || readStoredSecret(env);
+}
+function canonicalSecretPath() {
+	return join(homedir(), ".agentmemory", "secret");
 }
 //#endregion
 //#region src/capture/event-id.ts
@@ -220,9 +240,9 @@ const PRIVATE_TAG_RE = /<private>[\s\S]*?<\/private>/gi;
 const SECRET_PATTERN_SOURCES = [
 	/(?:api[_-]?key|secret|token|password|credential|auth)[\s]*[=:]\s*["']?[A-Za-z0-9_\-/.+]{20,}["']?/gi,
 	/Bearer\s+[A-Za-z0-9._\-+/=]{20,}/gi,
-	/sk-proj-[A-Za-z0-9\-_]{20,}/g,
-	/(?:sk|pk|rk|ak)-[A-Za-z0-9][A-Za-z0-9\-_]{19,}/g,
-	/sk-ant-[A-Za-z0-9\-_]{20,}/g,
+	/(?<![\p{L}\p{N}\p{M}_])sk-proj-[A-Za-z0-9\-_]{20,}/gu,
+	/(?<![\p{L}\p{N}\p{M}_])(?:sk|pk|rk|ak)-[A-Za-z0-9][A-Za-z0-9\-_]{19,}/gu,
+	/(?<![\p{L}\p{N}\p{M}_])sk-ant-[A-Za-z0-9\-_]{20,}/gu,
 	/gh[pus]_[A-Za-z0-9]{36,}/g,
 	/github_pat_[A-Za-z0-9_]{22,}/g,
 	/xoxb-[A-Za-z0-9\-]+/g,
@@ -245,6 +265,29 @@ function stripPrivateData(input) {
 	}
 	return result;
 }
+function scrubRecord(value, options = {}) {
+	if (typeof value === "string") return stripPrivateData(value);
+	if (Array.isArray(value)) return value.map((item) => scrubRecord(item, options));
+	if (value !== null && typeof value === "object") {
+		const proto = Object.getPrototypeOf(value);
+		if (proto !== Object.prototype && proto !== null) return value;
+		const entries = Object.entries(value).map(([key, item]) => [options.scrubKeys ? stripPrivateData(key) : key, item]);
+		const reserved = new Set(entries.map(([key]) => key));
+		const used = /* @__PURE__ */ new Set();
+		return Object.fromEntries(entries.map(([key, item]) => {
+			let unique = key;
+			if (used.has(unique)) {
+				let suffix = 2;
+				do
+					unique = `${key}_${suffix++}`;
+				while (reserved.has(unique) || used.has(unique));
+			}
+			used.add(unique);
+			return [unique, scrubRecord(item, options)];
+		}));
+	}
+	return value;
+}
 //#endregion
 //#region src/capture/spool.ts
 const DEFAULT_MAX_BYTES = 5 * 1024 * 1024;
@@ -258,7 +301,7 @@ const IMAGE_PLACEHOLDER = "[image dropped from capture spool]";
 const BOOT_ID_RE = /^[A-Za-z0-9]{8,64}$/;
 const SENT_FILE_RE = /^([A-Za-z0-9]{8,64})-(\d+)\.jsonl$/;
 const SENT_BUCKET_MS = 1e3;
-const MAX_DURABLE_AFTER_MS = 10 * 6e4;
+const MAX_DURABLE_AFTER_MS = 61 * 6e4;
 function emptyStats() {
 	return {
 		spooled: 0,
@@ -390,13 +433,6 @@ function fileSize(path) {
 		return 0;
 	}
 }
-function sanitizeBody(body) {
-	try {
-		return JSON.parse(stripPrivateData(JSON.stringify(body)));
-	} catch {
-		return body;
-	}
-}
 function withoutImage(body) {
 	const data = body["data"];
 	if (!data || typeof data !== "object" || Array.isArray(data)) return body;
@@ -482,7 +518,7 @@ function appendSpool(url, eventId, body, reason, options = {}) {
 			spooledAt: (/* @__PURE__ */ new Date()).toISOString(),
 			reason,
 			attempts: options.attempts ?? 0,
-			body: sanitizeBody(body)
+			body: scrubRecord(JSON.parse(JSON.stringify(body)), { scrubKeys: true })
 		};
 		let line = JSON.stringify(record) + "\n";
 		if (Buffer.byteLength(line) > policy.maxRecordBytes) {
@@ -582,7 +618,7 @@ function retainSent(url, eventId, body, mark, options = {}) {
 			spooledAt: new Date(now).toISOString(),
 			reason: "sent",
 			attempts: 0,
-			body: sanitizeBody(body),
+			body: scrubRecord(JSON.parse(JSON.stringify(body)), { scrubKeys: true }),
 			bootId: mark.bootId
 		};
 		let line = JSON.stringify(record) + "\n";
@@ -903,6 +939,6 @@ async function runDrainChild() {
 	}).catch(() => void 0);
 }
 //#endregion
-export { REST_URL, authHeaders, captureObservation, isDrainChild, runDrainChild, withEventId };
+export { REST_URL, authHeaders, captureObservation, isDrainChild, runDrainChild, stripPrivateData, withEventId };
 
 //# sourceMappingURL=_capture.mjs.map