@massa-ai/opencode-plugin 1.7.1 → 1.9.0

package/dist/config-cli.js

@@ -542,6 +542,9 @@ var init_massa_ai_config = __esm(() => {
     },
     handoffs: {
       enabled: true
+    },
+    security: {
+      corsOrigins: []
     }
   };
 });
@@ -563,6 +566,7 @@ __export(exports_config_loader, {
 import fs from "fs";
 import path3 from "path";
 import os2 from "os";
+import crypto from "crypto";
 function getConfigDir() {
   return CONFIG_DIR;
 }
@@ -591,7 +595,8 @@ function loadConfig() {
       llm: { ...defaultMassaAiConfig.llm, ...userConfig.llm },
       memory: { ...defaultMassaAiConfig.memory, ...userConfig.memory },
       hooks: { ...defaultMassaAiConfig.hooks, ...userConfig.hooks },
-      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs }
+      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs },
+      security: { ...defaultMassaAiConfig.security, ...userConfig.security }
     };
   } catch (error) {
     console.error(`Error loading config from ${CONFIG_FILE}:`, error);
@@ -635,7 +640,17 @@ function saveConfig(config) {
   if (!fs.existsSync(CONFIG_DIR)) {
     fs.mkdirSync(CONFIG_DIR, { recursive: true });
   }
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+  const unique = `${process.pid}.${++tempFileCounter}.${crypto.randomBytes(6).toString("hex")}`;
+  const tempFile = path3.join(CONFIG_DIR, `.config.json.${unique}.tmp`);
+  try {
+    fs.writeFileSync(tempFile, JSON.stringify(config, null, 2));
+    fs.renameSync(tempFile, CONFIG_FILE);
+  } catch (error) {
+    try {
+      fs.unlinkSync(tempFile);
+    } catch {}
+    throw error;
+  }
 }
 function initConfig() {
   if (!fs.existsSync(CONFIG_FILE)) {
@@ -663,7 +678,7 @@ function getConfigForEnv() {
   env.ENABLE_METRICS = String(config.logging.enableMetrics);
   return env;
 }
-var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false;
+var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false, tempFileCounter = 0;
 var init_config_loader = __esm(() => {
   init_massa_ai_config();
   init_xdg();
@@ -698,12 +713,16 @@ try {
   if (cfg.database?.url && !process.env.DATABASE_URL) {
     process.env.DATABASE_URL = cfg.database.url;
   }
-  if (cfg.llm?.apiKey && !process.env.RLM_LLM_API_KEY) {
-    process.env.RLM_LLM_API_KEY = cfg.llm.apiKey;
+  if (cfg.llm?.apiKey && !process.env.MASSA_AI_LLM_API_KEY) {
+    process.env.MASSA_AI_LLM_API_KEY = cfg.llm.apiKey;
   }
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
   }
+  const securityApiKey = cfg.security?.apiKey?.trim();
+  if (securityApiKey && !process.env.MASSA_AI_API_KEY?.trim()) {
+    process.env.MASSA_AI_API_KEY = securityApiKey;
+  }
 } catch {}
 
 // ../../packages/shared/dist/config/index.js
@@ -711,6 +730,11 @@ init_config_loader();
 init_massa_ai_config();
 init_config_loader();
 import path4 from "path";
+
+// ../../packages/shared/dist/config/api-key.js
+init_config_loader();
+
+// ../../packages/shared/dist/config/index.js
 var DEFAULT_LLM_MODEL = "qwen2.5:7b-instruct";
 var DEFAULT_LLM_CODE_MODEL = "qwen2.5-coder:7b";
 function envNum(key, fallback) {
@@ -735,6 +759,13 @@ function envString(key, fallback) {
   const s = process.env[key];
   return s === undefined || s === "" ? fallback : s;
 }
+function envList(key, fallback) {
+  const s = process.env[key];
+  if (s === undefined)
+    return fallback;
+  const parsed = s.split(",").map((v) => v.trim()).filter((v) => v.length > 0);
+  return parsed.length > 0 ? parsed : fallback;
+}
 var MAX_IGNORE_PATTERNS = 1024;
 function validateCapturePolicyConfig(raw) {
   if (!raw || typeof raw !== "object")
@@ -855,15 +886,15 @@ var defaultConfig = {
     }
   },
   llm: {
-    enabled: envBool("RLM_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
-    baseUrl: envString("RLM_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
-    apiKey: envString("RLM_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
-    model: envString("RLM_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
-    codeModel: envString("RLM_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
-    temperature: envNum("RLM_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
-    maxOutputTokens: envNum("RLM_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
-    timeoutMs: envNum("RLM_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
-    disableThink: envBool("RLM_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
+    enabled: envBool("MASSA_AI_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
+    baseUrl: envString("MASSA_AI_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
+    apiKey: envString("MASSA_AI_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
+    model: envString("MASSA_AI_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
+    codeModel: envString("MASSA_AI_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
+    temperature: envNum("MASSA_AI_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
+    maxOutputTokens: envNum("MASSA_AI_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
+    timeoutMs: envNum("MASSA_AI_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
+    disableThink: envBool("MASSA_AI_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
   },
   memory: {
     decay: {
@@ -913,7 +944,7 @@ var defaultConfig = {
     defaultStrategy: fileConfig.compression?.defaultStrategy ?? "code_structure",
     minTokensForCompression: envNum("MIN_TOKENS_FOR_COMPRESSION", fileConfig.compression?.minTokensForCompression ?? 100),
     targetCompressionRatio: envNum("TARGET_COMPRESSION_RATIO", fileConfig.compression?.targetCompressionRatio ?? 0.7),
-    prompt: process.env.RLM_LLM_PROMPT || fileConfig.compression?.prompt || undefined
+    prompt: process.env.MASSA_AI_LLM_PROMPT || fileConfig.compression?.prompt || undefined
   },
   impact: {
     bfsCteEnabled: envBool("MASSA_AI_IMPACT_BFS_CTE", fileConfig.impact?.bfsCteEnabled ?? false)
@@ -945,7 +976,8 @@ var defaultConfig = {
       "**/generated/**",
       "*.min.js",
       "*.min.css"
-    ]
+    ],
+    corsOrigins: envList("MASSA_AI_API_CORS_ORIGINS", fileConfig.security?.corsOrigins ?? [])
   },
   logging: {
     level: process.env.LOG_LEVEL || fileConfig.logging?.level || "info",

package/dist/index.js

@@ -541,6 +541,9 @@ var init_massa_ai_config = __esm(() => {
     },
     handoffs: {
       enabled: true
+    },
+    security: {
+      corsOrigins: []
     }
   };
 });
@@ -562,6 +565,7 @@ __export(exports_config_loader, {
 import fs from "fs";
 import path3 from "path";
 import os2 from "os";
+import crypto from "crypto";
 function getConfigDir() {
   return CONFIG_DIR;
 }
@@ -590,7 +594,8 @@ function loadConfig() {
       llm: { ...defaultMassaAiConfig.llm, ...userConfig.llm },
       memory: { ...defaultMassaAiConfig.memory, ...userConfig.memory },
       hooks: { ...defaultMassaAiConfig.hooks, ...userConfig.hooks },
-      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs }
+      handoffs: { ...defaultMassaAiConfig.handoffs, ...userConfig.handoffs },
+      security: { ...defaultMassaAiConfig.security, ...userConfig.security }
     };
   } catch (error45) {
     console.error(`Error loading config from ${CONFIG_FILE}:`, error45);
@@ -634,7 +639,17 @@ function saveConfig(config2) {
   if (!fs.existsSync(CONFIG_DIR)) {
     fs.mkdirSync(CONFIG_DIR, { recursive: true });
   }
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config2, null, 2));
+  const unique = `${process.pid}.${++tempFileCounter}.${crypto.randomBytes(6).toString("hex")}`;
+  const tempFile = path3.join(CONFIG_DIR, `.config.json.${unique}.tmp`);
+  try {
+    fs.writeFileSync(tempFile, JSON.stringify(config2, null, 2));
+    fs.renameSync(tempFile, CONFIG_FILE);
+  } catch (error45) {
+    try {
+      fs.unlinkSync(tempFile);
+    } catch {}
+    throw error45;
+  }
 }
 function initConfig() {
   if (!fs.existsSync(CONFIG_FILE)) {
@@ -662,7 +677,7 @@ function getConfigForEnv() {
   env.ENABLE_METRICS = String(config2.logging.enableMetrics);
   return env;
 }
-var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false;
+var CONFIG_DIR, CONFIG_FILE, migrationAttempted = false, tempFileCounter = 0;
 var init_config_loader = __esm(() => {
   init_massa_ai_config();
   init_xdg();
@@ -13017,12 +13032,16 @@ try {
   if (cfg.database?.url && !process.env.DATABASE_URL) {
     process.env.DATABASE_URL = cfg.database.url;
   }
-  if (cfg.llm?.apiKey && !process.env.RLM_LLM_API_KEY) {
-    process.env.RLM_LLM_API_KEY = cfg.llm.apiKey;
+  if (cfg.llm?.apiKey && !process.env.MASSA_AI_LLM_API_KEY) {
+    process.env.MASSA_AI_LLM_API_KEY = cfg.llm.apiKey;
   }
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
   }
+  const securityApiKey = cfg.security?.apiKey?.trim();
+  if (securityApiKey && !process.env.MASSA_AI_API_KEY?.trim()) {
+    process.env.MASSA_AI_API_KEY = securityApiKey;
+  }
 } catch {}
 
 // ../../packages/shared/dist/config/index.js
@@ -13030,6 +13049,11 @@ init_config_loader();
 init_massa_ai_config();
 init_config_loader();
 import path4 from "path";
+
+// ../../packages/shared/dist/config/api-key.js
+init_config_loader();
+
+// ../../packages/shared/dist/config/index.js
 var DEFAULT_LLM_MODEL = "qwen2.5:7b-instruct";
 var DEFAULT_LLM_CODE_MODEL = "qwen2.5-coder:7b";
 function envNum(key, fallback) {
@@ -13054,6 +13078,13 @@ function envString(key, fallback) {
   const s = process.env[key];
   return s === undefined || s === "" ? fallback : s;
 }
+function envList(key, fallback) {
+  const s = process.env[key];
+  if (s === undefined)
+    return fallback;
+  const parsed = s.split(",").map((v) => v.trim()).filter((v) => v.length > 0);
+  return parsed.length > 0 ? parsed : fallback;
+}
 var MAX_IGNORE_PATTERNS = 1024;
 function validateCapturePolicyConfig(raw) {
   if (!raw || typeof raw !== "object")
@@ -13174,15 +13205,15 @@ var defaultConfig = {
     }
   },
   llm: {
-    enabled: envBool("RLM_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
-    baseUrl: envString("RLM_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
-    apiKey: envString("RLM_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
-    model: envString("RLM_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
-    codeModel: envString("RLM_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
-    temperature: envNum("RLM_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
-    maxOutputTokens: envNum("RLM_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
-    timeoutMs: envNum("RLM_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
-    disableThink: envBool("RLM_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
+    enabled: envBool("MASSA_AI_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
+    baseUrl: envString("MASSA_AI_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
+    apiKey: envString("MASSA_AI_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
+    model: envString("MASSA_AI_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
+    codeModel: envString("MASSA_AI_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
+    temperature: envNum("MASSA_AI_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
+    maxOutputTokens: envNum("MASSA_AI_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
+    timeoutMs: envNum("MASSA_AI_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
+    disableThink: envBool("MASSA_AI_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
   },
   memory: {
     decay: {
@@ -13232,7 +13263,7 @@ var defaultConfig = {
     defaultStrategy: fileConfig.compression?.defaultStrategy ?? "code_structure",
     minTokensForCompression: envNum("MIN_TOKENS_FOR_COMPRESSION", fileConfig.compression?.minTokensForCompression ?? 100),
     targetCompressionRatio: envNum("TARGET_COMPRESSION_RATIO", fileConfig.compression?.targetCompressionRatio ?? 0.7),
-    prompt: process.env.RLM_LLM_PROMPT || fileConfig.compression?.prompt || undefined
+    prompt: process.env.MASSA_AI_LLM_PROMPT || fileConfig.compression?.prompt || undefined
   },
   impact: {
     bfsCteEnabled: envBool("MASSA_AI_IMPACT_BFS_CTE", fileConfig.impact?.bfsCteEnabled ?? false)
@@ -13264,7 +13295,8 @@ var defaultConfig = {
       "**/generated/**",
       "*.min.js",
       "*.min.css"
-    ]
+    ],
+    corsOrigins: envList("MASSA_AI_API_CORS_ORIGINS", fileConfig.security?.corsOrigins ?? [])
   },
   logging: {
     level: process.env.LOG_LEVEL || fileConfig.logging?.level || "info",
@@ -13738,7 +13770,7 @@ async function massaAiGetWithQuery(endpoint, params, timeoutMs = FETCH_TIMEOUT_M
 }
 var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
   ensureConfig();
-  const config3 = loadConfig();
+  loadConfig();
   const projectPath = worktree || directory;
   const projectPins = new SessionProjectPin({
     computeProjectId: () => computePluginProjectId({
@@ -13953,7 +13985,7 @@ var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
           includeSymbols: tool.schema.boolean().optional().default(true).describe("Include symbol metadata from graph"),
           includeImports: tool.schema.boolean().optional().default(true).describe("Extract and show import statements")
         },
-        async execute(args, ctx) {
+        async execute(args, _ctx) {
           const result = await massaAiFetch("/api/v1/file/read", {
             filePath: args.filePath,
             projectId: args.projectId || projectId,
@@ -14016,7 +14048,7 @@ var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
           exportedOnly: tool.schema.boolean().optional().default(false).describe("Return only exported symbols"),
           maxResults: tool.schema.number().optional().default(20).describe("Maximum number of results to return (default: 20)")
         },
-        async execute(args, ctx) {
+        async execute(args, _ctx) {
           const result = await massaAiGetWithQuery("/api/v1/symbol/definitions", {
             projectId,
             search: args.query,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/opencode-plugin",
-  "version": "1.7.1",
+  "version": "1.9.0",
   "description": "massa-ai plugin for OpenCode - Semantic code search, memory, and context compression",
   "type": "module",
   "main": "dist/index.js",
@@ -21,8 +21,8 @@
   "dependencies": {
     "@opencode-ai/plugin": "^1.2.15",
     "@opencode-ai/sdk": "^1.2.15",
-    "@massa-ai/core": "^1.7.1",
-    "@massa-ai/shared": "^1.7.1"
+    "@massa-ai/core": "^1.9.0",
+    "@massa-ai/shared": "^1.9.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",