@massa-ai/opencode-plugin 1.8.0 → 1.9.1

package/dist/config-cli.js

@@ -713,8 +713,8 @@ try {
   if (cfg.database?.url && !process.env.DATABASE_URL) {
     process.env.DATABASE_URL = cfg.database.url;
   }
-  if (cfg.llm?.apiKey && !process.env.RLM_LLM_API_KEY) {
-    process.env.RLM_LLM_API_KEY = cfg.llm.apiKey;
+  if (cfg.llm?.apiKey && !process.env.MASSA_AI_LLM_API_KEY) {
+    process.env.MASSA_AI_LLM_API_KEY = cfg.llm.apiKey;
   }
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
@@ -808,6 +808,20 @@ function validateCapturePolicyConfig(raw) {
     ...p.maxIgnorePatterns !== undefined && { maxIgnorePatterns: p.maxIgnorePatterns }
   };
 }
+function validateAllowedExtensionsConfig(raw) {
+  if (!Array.isArray(raw)) {
+    throw new TypeError("security.allowedExtensions must be an array of strings");
+  }
+  if (raw.length === 0) {
+    throw new TypeError("security.allowedExtensions must not be empty \u2014 an empty allow-list indexes nothing; omit the key to use the defaults");
+  }
+  for (const ext of raw) {
+    if (typeof ext !== "string" || !ext.startsWith(".") || ext.length < 2) {
+      throw new TypeError(`security.allowedExtensions[] must be dot-prefixed extensions (got ${JSON.stringify(ext)})`);
+    }
+  }
+  return [...raw];
+}
 function getGlobalDataDir() {
   const envOverride = process.env.MASSA_AI_DATA_DIR;
   if (envOverride && envOverride.trim())
@@ -886,15 +900,15 @@ var defaultConfig = {
     }
   },
   llm: {
-    enabled: envBool("RLM_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
-    baseUrl: envString("RLM_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
-    apiKey: envString("RLM_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
-    model: envString("RLM_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
-    codeModel: envString("RLM_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
-    temperature: envNum("RLM_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
-    maxOutputTokens: envNum("RLM_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
-    timeoutMs: envNum("RLM_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
-    disableThink: envBool("RLM_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
+    enabled: envBool("MASSA_AI_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
+    baseUrl: envString("MASSA_AI_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
+    apiKey: envString("MASSA_AI_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
+    model: envString("MASSA_AI_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
+    codeModel: envString("MASSA_AI_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
+    temperature: envNum("MASSA_AI_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
+    maxOutputTokens: envNum("MASSA_AI_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
+    timeoutMs: envNum("MASSA_AI_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
+    disableThink: envBool("MASSA_AI_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
   },
   memory: {
     decay: {
@@ -944,7 +958,7 @@ var defaultConfig = {
     defaultStrategy: fileConfig.compression?.defaultStrategy ?? "code_structure",
     minTokensForCompression: envNum("MIN_TOKENS_FOR_COMPRESSION", fileConfig.compression?.minTokensForCompression ?? 100),
     targetCompressionRatio: envNum("TARGET_COMPRESSION_RATIO", fileConfig.compression?.targetCompressionRatio ?? 0.7),
-    prompt: process.env.RLM_LLM_PROMPT || fileConfig.compression?.prompt || undefined
+    prompt: process.env.MASSA_AI_LLM_PROMPT || fileConfig.compression?.prompt || undefined
   },
   impact: {
     bfsCteEnabled: envBool("MASSA_AI_IMPACT_BFS_CTE", fileConfig.impact?.bfsCteEnabled ?? false)
@@ -965,7 +979,7 @@ var defaultConfig = {
     sanitizeInputs: process.env.SANITIZE_INPUTS !== "false",
     maxIndexSize: 1e5,
     maxFileSize: 1024 * 1024,
-    allowedExtensions: [...DEFAULT_ALLOWED_EXTENSIONS],
+    allowedExtensions: fileConfig.security?.allowedExtensions ? validateAllowedExtensionsConfig(fileConfig.security.allowedExtensions) : [...DEFAULT_ALLOWED_EXTENSIONS],
     excludePatterns: [
       "node_modules/**",
       ".git/**",

package/dist/index.js

@@ -13032,8 +13032,8 @@ try {
   if (cfg.database?.url && !process.env.DATABASE_URL) {
     process.env.DATABASE_URL = cfg.database.url;
   }
-  if (cfg.llm?.apiKey && !process.env.RLM_LLM_API_KEY) {
-    process.env.RLM_LLM_API_KEY = cfg.llm.apiKey;
+  if (cfg.llm?.apiKey && !process.env.MASSA_AI_LLM_API_KEY) {
+    process.env.MASSA_AI_LLM_API_KEY = cfg.llm.apiKey;
   }
   if (cfg.embedding?.apiKey && !process.env.OLLAMA_API_KEY) {
     process.env.OLLAMA_API_KEY = cfg.embedding.apiKey;
@@ -13127,6 +13127,20 @@ function validateCapturePolicyConfig(raw) {
     ...p.maxIgnorePatterns !== undefined && { maxIgnorePatterns: p.maxIgnorePatterns }
   };
 }
+function validateAllowedExtensionsConfig(raw) {
+  if (!Array.isArray(raw)) {
+    throw new TypeError("security.allowedExtensions must be an array of strings");
+  }
+  if (raw.length === 0) {
+    throw new TypeError("security.allowedExtensions must not be empty \u2014 an empty allow-list indexes nothing; omit the key to use the defaults");
+  }
+  for (const ext of raw) {
+    if (typeof ext !== "string" || !ext.startsWith(".") || ext.length < 2) {
+      throw new TypeError(`security.allowedExtensions[] must be dot-prefixed extensions (got ${JSON.stringify(ext)})`);
+    }
+  }
+  return [...raw];
+}
 function getGlobalDataDir() {
   const envOverride = process.env.MASSA_AI_DATA_DIR;
   if (envOverride && envOverride.trim())
@@ -13205,15 +13219,15 @@ var defaultConfig = {
     }
   },
   llm: {
-    enabled: envBool("RLM_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
-    baseUrl: envString("RLM_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
-    apiKey: envString("RLM_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
-    model: envString("RLM_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
-    codeModel: envString("RLM_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
-    temperature: envNum("RLM_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
-    maxOutputTokens: envNum("RLM_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
-    timeoutMs: envNum("RLM_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
-    disableThink: envBool("RLM_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
+    enabled: envBool("MASSA_AI_LLM_ENABLED", fileConfig.llm?.enabled ?? false),
+    baseUrl: envString("MASSA_AI_LLM_BASE_URL", fileConfig.llm?.baseUrl ?? "http://localhost:11434/v1"),
+    apiKey: envString("MASSA_AI_LLM_API_KEY", fileConfig.llm?.apiKey ?? "ollama"),
+    model: envString("MASSA_AI_LLM_MODEL", fileConfig.llm?.model ?? DEFAULT_LLM_MODEL),
+    codeModel: envString("MASSA_AI_LLM_CODE_MODEL", fileConfig.llm?.codeModel ?? DEFAULT_LLM_CODE_MODEL),
+    temperature: envNum("MASSA_AI_LLM_TEMPERATURE", fileConfig.llm?.temperature ?? 0.2),
+    maxOutputTokens: envNum("MASSA_AI_LLM_MAX_OUTPUT_TOKENS", fileConfig.llm?.maxOutputTokens ?? 8000),
+    timeoutMs: envNum("MASSA_AI_LLM_TIMEOUT_MS", fileConfig.llm?.timeoutMs ?? 90000),
+    disableThink: envBool("MASSA_AI_LLM_DISABLE_THINK", fileConfig.llm?.disableThink ?? true)
   },
   memory: {
     decay: {
@@ -13263,7 +13277,7 @@ var defaultConfig = {
     defaultStrategy: fileConfig.compression?.defaultStrategy ?? "code_structure",
     minTokensForCompression: envNum("MIN_TOKENS_FOR_COMPRESSION", fileConfig.compression?.minTokensForCompression ?? 100),
     targetCompressionRatio: envNum("TARGET_COMPRESSION_RATIO", fileConfig.compression?.targetCompressionRatio ?? 0.7),
-    prompt: process.env.RLM_LLM_PROMPT || fileConfig.compression?.prompt || undefined
+    prompt: process.env.MASSA_AI_LLM_PROMPT || fileConfig.compression?.prompt || undefined
   },
   impact: {
     bfsCteEnabled: envBool("MASSA_AI_IMPACT_BFS_CTE", fileConfig.impact?.bfsCteEnabled ?? false)
@@ -13284,7 +13298,7 @@ var defaultConfig = {
     sanitizeInputs: process.env.SANITIZE_INPUTS !== "false",
     maxIndexSize: 1e5,
     maxFileSize: 1024 * 1024,
-    allowedExtensions: [...DEFAULT_ALLOWED_EXTENSIONS],
+    allowedExtensions: fileConfig.security?.allowedExtensions ? validateAllowedExtensionsConfig(fileConfig.security.allowedExtensions) : [...DEFAULT_ALLOWED_EXTENSIONS],
     excludePatterns: [
       "node_modules/**",
       ".git/**",
@@ -13770,7 +13784,7 @@ async function massaAiGetWithQuery(endpoint, params, timeoutMs = FETCH_TIMEOUT_M
 }
 var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
   ensureConfig();
-  const config3 = loadConfig();
+  loadConfig();
   const projectPath = worktree || directory;
   const projectPins = new SessionProjectPin({
     computeProjectId: () => computePluginProjectId({
@@ -13985,7 +13999,7 @@ var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
           includeSymbols: tool.schema.boolean().optional().default(true).describe("Include symbol metadata from graph"),
           includeImports: tool.schema.boolean().optional().default(true).describe("Extract and show import statements")
         },
-        async execute(args, ctx) {
+        async execute(args, _ctx) {
           const result = await massaAiFetch("/api/v1/file/read", {
             filePath: args.filePath,
             projectId: args.projectId || projectId,
@@ -14048,7 +14062,7 @@ var MassaAiPlugin = async ({ project, directory, worktree, client }) => {
           exportedOnly: tool.schema.boolean().optional().default(false).describe("Return only exported symbols"),
           maxResults: tool.schema.number().optional().default(20).describe("Maximum number of results to return (default: 20)")
         },
-        async execute(args, ctx) {
+        async execute(args, _ctx) {
           const result = await massaAiGetWithQuery("/api/v1/symbol/definitions", {
             projectId,
             search: args.query,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massa-ai/opencode-plugin",
-  "version": "1.8.0",
+  "version": "1.9.1",
   "description": "massa-ai plugin for OpenCode - Semantic code search, memory, and context compression",
   "type": "module",
   "main": "dist/index.js",
@@ -21,8 +21,8 @@
   "dependencies": {
     "@opencode-ai/plugin": "^1.2.15",
     "@opencode-ai/sdk": "^1.2.15",
-    "@massa-ai/core": "^1.8.0",
-    "@massa-ai/shared": "^1.8.0"
+    "@massa-ai/core": "^1.9.1",
+    "@massa-ai/shared": "^1.9.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",