@massa-ai/opencode-plugin 1.7.0 → 1.8.0

package/dist/config-cli.js

@@ -542,6 +542,9 @@ var init_massa_ai_config = __esm(() => {
     },
     handoffs: {
       enabled: true
+    },
+    security: {
+      corsOrigins: []
     }
   };
 });
@@ -563,6 +566,7 @@ __export(exports_config_loader, {
 import fs from "fs";
 import path3 from "path";
 import os2 from "os";
+import crypto from "crypto";
 function getConfigDir() {
   return CONFIG_DIR;
 }
@@ -591,7 +595,8 @@ function loadConfig() {
       llm: { ...defaultMassaAiConfig.llm, ...userConfig.llm },
       memory: { ...defaultMassaAiConfig.memory, ...userConfig.memory },
       hooks: { ...defaultMassaAiConfig.hooks, ...userConfig.hooks },
-      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs }
+      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs },
+      security: { ...defaultMassaAiConfig.security, ...userConfig.security }
     };
   } catch (error) {
     console.error(`Error loading config from ${CONFIG_FILE}:`, error);
@@ -635,7 +640,17 @@ function saveConfig(config) {
   if (!fs.existsSync(CONFIG_DIR)) {
     fs.mkdirSync(CONFIG_DIR, { recursive: true });
   }
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+  const unique = `${process.pid}.${++tempFileCounter}.${crypto.randomBytes(6).toString("hex")}`;
+  const tempFile = path3.join(CONFIG_DIR, `.config.json.${unique}.tmp`);
+  try {
+    fs.writeFileSync(tempFile, JSON.stringify(config, null, 2));
+    fs.renameSync(tempFile, CONFIG_FILE);
+  } catch (error) {
+    try {
+      fs.unlinkSync(tempFile);
+    } catch {}
+    throw error;
+  }
 }
 function initConfig() {
   if (!fs.existsSync(CONFIG_FILE)) {
@@ -663,7 +678,7 @@ function getConfigForEnv() {
   env.ENABLE_METRICS = String(config.logging.enableMetrics);
   return env;
 }
-var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false;
+var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false, tempFileCounter = 0;
 var init_config_loader = __esm(() => {
   init_massa_ai_config();
   init_xdg();
@@ -704,6 +719,10 @@ try {
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
   }
+  const securityApiKey = cfg.security?.apiKey?.trim();
+  if (securityApiKey && !process.env.MASSA_AI_API_KEY?.trim()) {
+    process.env.MASSA_AI_API_KEY = securityApiKey;
+  }
 } catch {}
 
 // ../../packages/shared/dist/config/index.js
@@ -711,6 +730,11 @@ init_config_loader();
 init_massa_ai_config();
 init_config_loader();
 import path4 from "path";
+
+// ../../packages/shared/dist/config/api-key.js
+init_config_loader();
+
+// ../../packages/shared/dist/config/index.js
 var DEFAULT_LLM_MODEL = "qwen2.5:7b-instruct";
 var DEFAULT_LLM_CODE_MODEL = "qwen2.5-coder:7b";
 function envNum(key, fallback) {
@@ -735,6 +759,13 @@ function envString(key, fallback) {
   const s = process.env[key];
   return s === undefined || s === "" ? fallback : s;
 }
+function envList(key, fallback) {
+  const s = process.env[key];
+  if (s === undefined)
+    return fallback;
+  const parsed = s.split(",").map((v) => v.trim()).filter((v) => v.length > 0);
+  return parsed.length > 0 ? parsed : fallback;
+}
 var MAX_IGNORE_PATTERNS = 1024;
 function validateCapturePolicyConfig(raw) {
   if (!raw || typeof raw !== "object")
@@ -945,7 +976,8 @@ var defaultConfig = {
       "**/generated/**",
       "*.min.js",
       "*.min.css"
-    ]
+    ],
+    corsOrigins: envList("MASSA_AI_API_CORS_ORIGINS", fileConfig.security?.corsOrigins ?? [])
   },
   logging: {
     level: process.env.LOG_LEVEL || fileConfig.logging?.level || "info",

package/dist/index.js

@@ -541,6 +541,9 @@ var init_massa_ai_config = __esm(() => {
     },
     handoffs: {
       enabled: true
+    },
+    security: {
+      corsOrigins: []
     }
   };
 });
@@ -562,6 +565,7 @@ __export(exports_config_loader, {
 import fs from "fs";
 import path3 from "path";
 import os2 from "os";
+import crypto from "crypto";
 function getConfigDir() {
   return CONFIG_DIR;
 }
@@ -590,7 +594,8 @@ function loadConfig() {
       llm: { ...defaultMassaAiConfig.llm, ...userConfig.llm },
       memory: { ...defaultMassaAiConfig.memory, ...userConfig.memory },
       hooks: { ...defaultMassaAiConfig.hooks, ...userConfig.hooks },
-      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs }
+      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs },
+      security: { ...defaultMassaAiConfig.security, ...userConfig.security }
     };
   } catch (error45) {
     console.error(`Error loading config from ${CONFIG_FILE}:`, error45);
@@ -634,7 +639,17 @@ function saveConfig(config2) {
   if (!fs.existsSync(CONFIG_DIR)) {
     fs.mkdirSync(CONFIG_DIR, { recursive: true });
   }
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config2, null, 2));
+  const unique = `${process.pid}.${++tempFileCounter}.${crypto.randomBytes(6).toString("hex")}`;
+  const tempFile = path3.join(CONFIG_DIR, `.config.json.${unique}.tmp`);
+  try {
+    fs.writeFileSync(tempFile, JSON.stringify(config2, null, 2));
+    fs.renameSync(tempFile, CONFIG_FILE);
+  } catch (error45) {
+    try {
+      fs.unlinkSync(tempFile);
+    } catch {}
+    throw error45;
+  }
 }
 function initConfig() {
   if (!fs.existsSync(CONFIG_FILE)) {
@@ -662,7 +677,7 @@ function getConfigForEnv() {
   env.ENABLE_METRICS = String(config2.logging.enableMetrics);
   return env;
 }
-var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false;
+var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false, tempFileCounter = 0;
 var init_config_loader = __esm(() => {
   init_massa_ai_config();
   init_xdg();
@@ -13023,6 +13038,10 @@ try {
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
   }
+  const securityApiKey = cfg.security?.apiKey?.trim();
+  if (securityApiKey && !process.env.MASSA_AI_API_KEY?.trim()) {
+    process.env.MASSA_AI_API_KEY = securityApiKey;
+  }
 } catch {}
 
 // ../../packages/shared/dist/config/index.js
@@ -13030,6 +13049,11 @@ init_config_loader();
 init_massa_ai_config();
 init_config_loader();
 import path4 from "path";
+
+// ../../packages/shared/dist/config/api-key.js
+init_config_loader();
+
+// ../../packages/shared/dist/config/index.js
 var DEFAULT_LLM_MODEL = "qwen2.5:7b-instruct";
 var DEFAULT_LLM_CODE_MODEL = "qwen2.5-coder:7b";
 function envNum(key, fallback) {
@@ -13054,6 +13078,13 @@ function envString(key, fallback) {
   const s = process.env[key];
   return s === undefined || s === "" ? fallback : s;
 }
+function envList(key, fallback) {
+  const s = process.env[key];
+  if (s === undefined)
+    return fallback;
+  const parsed = s.split(",").map((v) => v.trim()).filter((v) => v.length > 0);
+  return parsed.length > 0 ? parsed : fallback;
+}
 var MAX_IGNORE_PATTERNS = 1024;
 function validateCapturePolicyConfig(raw) {
   if (!raw || typeof raw !== "object")
@@ -13264,7 +13295,8 @@ var defaultConfig = {
       "**/generated/**",
       "*.min.js",
       "*.min.css"
-    ]
+    ],
+    corsOrigins: envList("MASSA_AI_API_CORS_ORIGINS", fileConfig.security?.corsOrigins ?? [])
   },
   logging: {
     level: process.env.LOG_LEVEL || fileConfig.logging?.level || "info",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/opencode-plugin",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "description": "massa-ai plugin for OpenCode - Semantic code search, memory, and context compression",
   "type": "module",
   "main": "dist/index.js",
@@ -21,8 +21,8 @@
   "dependencies": {
     "@opencode-ai/plugin": "^1.2.15",
     "@opencode-ai/sdk": "^1.2.15",
-    "@massa-ai/core": "^1.7.0",
-    "@massa-ai/shared": "^1.7.0"
+    "@massa-ai/core": "^1.8.0",
+    "@massa-ai/shared": "^1.8.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",