@dzhi/ocpg 0.7.0 → 0.8.0

package/README.md

@@ -19,6 +19,8 @@ In `opencode.json`:
 
 ## Connecting to the database
 
+Need a Postgres instance? The [`deploy/`](./deploy) directory ships a hardened Docker Compose setup (localhost-only, `memories` schema auto-created on first boot) — see [`deploy/README.md`](./deploy/README.md).
+
 Configure the connection via environment variables, e.g. in `~/.zshenv`. Any Postgres user and database name will do — use whatever names fit your setup and mirror them here:
 
 ```bash
@@ -36,7 +38,7 @@ export OCPG_DB="ocpg"
 | `OCPG_USER`     | `ocpguser`   |
 | `OCPG_DB`       | `ocpg`       |
 
-**Password is env-only.** If `OCPG_PASSWORD` is unset, the plugin falls back to `pass show postgres-workstation-password` at startup.
+**Password is env-only.** The plugin never reads config files, options, or external secret managers — set `OCPG_PASSWORD` in your shell environment (e.g. via direnv/.envrc, however you source your secrets).
 
 ## Tools
 

package/ocpg.ts

@@ -12,18 +12,14 @@ type DbConfig = {
 type RecallArgs = { query?: string; global?: boolean; limit?: number };
 type RememberArgs = { content: string; tags?: string[] };
 
-// Defaults resolved ONCE at module init — the pass lookup here is the only permitted spawn in this file.
+// Defaults resolved ONCE at module init — env-only, no process spawning.
 const defaultConfig: DbConfig = {
   host: process.env.OCPG_HOST || "localhost",
   port: Number(process.env.OCPG_PORT) || 5432,
   user: process.env.OCPG_USER || "ocpguser",
   database: process.env.OCPG_DB || "ocpg",
 };
-const password =
-  process.env.OCPG_PASSWORD ||
-  Bun.spawnSync(["pass", "show", "postgres-workstation-password"])
-    .stdout.toString()
-    .trim();
+const password = process.env.OCPG_PASSWORD || "";
 
 // Options-object constructor, not a URL string: Bun's SQL parses string URLs via
 // url.parse(), which emits the DEP0169 DeprecationWarning at plugin load under opencode.
@@ -141,12 +137,6 @@ async function dispose(): Promise<void> {
 
 // --- Agent tools: recall + remember with dedup-on-write ---
 
-function normalizeTags(tags: string[] | undefined, projectDir: string): string[] {
-  const input = tags ?? [];
-  const base = projectDir.split('/').pop() ?? projectDir;
-  return [...input, `project:${base}`];
-}
-
 async function recall(
   args: RecallArgs,
   ctx: { directory: string },
@@ -198,7 +188,8 @@ async function remember(
       return 'ERROR: content must be at least 10 characters.';
     }
 
-    const normalizedTags = normalizeTags(args.tags, ctx.directory);
+    // Tags are stored verbatim — project scoping lives in the project column, not tags.
+    const tags = args.tags ?? [];
     const basename = ctx.directory.split('/').pop() ?? ctx.directory;
 
     // Dedup: project-scoped, common-opening-words AND-match via FTS
@@ -224,7 +215,7 @@ async function remember(
     // the element type hint is required for clean array storage.
     const inserted = await sql`
       INSERT INTO memories (content, tags, session_id, project)
-      VALUES (${args.content}, ${sql.array(normalizedTags, "text")}, ${ctx.sessionID}, ${ctx.directory})
+      VALUES (${args.content}, ${sql.array(tags, "text")}, ${ctx.sessionID}, ${ctx.directory})
       RETURNING id
     ` as { id: number }[];
 
@@ -313,7 +304,6 @@ const __internals = {
   truncateMemory,
   formatBlock,
   handleTransform,
-  normalizeTags,
   recall,
   remember,
   invalidateInjection,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhi/ocpg",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "type": "module",
   "description": "Postgres-backed persistent memory plugin for OpenCode",
   "main": "ocpg.ts",