@openviking/opencode-plugin 2026.10.13 → 2026.10.15

package/INSTALL-ZH.md

@@ -28,9 +28,19 @@ openviking-server --config ~/.openviking/ov.conf
 curl http://localhost:1933/health
 ```
 
-## 安装方式一：发布包安装
+## 安装方式一：一键安装（推荐）
 
-普通用户推荐通过 OpenCode 的 package plugin 机制启用：
+OpenCode 与其他记忆插件共用同一个安装器。它会询问要安装的宿主和 OpenViking 凭据：
+
+```bash
+curl -fsSL https://openviking.ai/install | bash
+```
+
+安装器会把插件作为本地文件插件复制到 `~/.config/opencode/plugins/`，把 `openviking` MCP server 条目写进 `~/.config/opencode/opencode.json`，并配置 `~/.openviking/ovcli.conf`。
+
+## 安装方式二：发布包安装
+
+也可以通过 OpenCode 的 package plugin 机制启用：
 
 ```json
 {
@@ -40,7 +50,7 @@ curl http://localhost:1933/health
 
 这份 `plugin` 配置同时兼容 v1 和 v2；v2 会在加载时规范化为原生的 `plugins`，无需手工迁移配置。
 
-## 安装方式二：源码安装
+## 安装方式三：源码安装
 
 用于开发调试或 PR 测试。OpenCode 推荐插件目录：
 

package/INSTALL.md

@@ -28,9 +28,19 @@ Check the service:
 curl http://localhost:1933/health
 ```
 
-## Installation Method 1: Published Package
+## Installation Method 1: One-line Installer (Recommended)
 
-Normal users are recommended to enable it through OpenCode's package plugin mechanism:
+OpenCode shares the unified installer with the other memory plugins. It asks which harnesses to install and for your OpenViking credentials:
+
+```bash
+curl -fsSL https://openviking.ai/install | bash
+```
+
+The installer copies the plugin into `~/.config/opencode/plugins/` as a local file plugin, writes the `openviking` MCP server entry into `~/.config/opencode/opencode.json`, and configures `~/.openviking/ovcli.conf`.
+
+## Installation Method 2: Published Package
+
+To enable it through OpenCode's package plugin mechanism instead:
 
 ```json
 {
@@ -40,7 +50,7 @@ Normal users are recommended to enable it through OpenCode's package plugin mech
 
 This `plugin` entry works on both v1 and v2. OpenCode v2 normalizes it to the native `plugins` form at load time, so no manual config migration is required.
 
-## Installation Method 2: Source Install
+## Installation Method 3: Source Install
 
 Use this method for development, debugging, or PR testing. OpenCode's recommended plugin directory is:
 

package/README.md

@@ -68,9 +68,19 @@ openviking-server --config ~/.openviking/ov.conf
 
 ## Installation
 
+### One-line Installer (Recommended)
+
+OpenCode shares the unified installer with the other memory plugins. It asks which harnesses to install and for your OpenViking credentials:
+
+```bash
+curl -fsSL https://openviking.ai/install | bash
+```
+
+The installer copies the plugin into `~/.config/opencode/plugins/` as a local file plugin, writes the `openviking` MCP server entry into `~/.config/opencode/opencode.json`, and configures `~/.openviking/ovcli.conf`.
+
 ### Published Package
 
-Normal users should enable it through OpenCode's package plugin mechanism:
+To enable it through OpenCode's package plugin mechanism instead:
 
 The published npm package is `@openviking/opencode-plugin`; verify availability with:
 

package/lib/memory-session.mjs

@@ -25,6 +25,8 @@ import {
   safeStringify,
 } from "./utils.mjs"
 
+const STALE_SESSION_STATE_MS = 7 * 24 * 60 * 60 * 1000
+
 export function createMemorySessionManager({ config, pluginRoot }) {
   const sessions = new Map()
   const statePath = path.join(pluginRoot, "openviking-session-state.json")
@@ -77,10 +79,17 @@ export function createMemorySessionManager({ config, pluginRoot }) {
         log("ERROR", "persistence", "Unsupported session map version", { version: data.version })
         return
       }
+      const staleBefore = Date.now() - STALE_SESSION_STATE_MS
+      let pruned = 0
       for (const [opencodeSessionId, persisted] of Object.entries(data.sessions ?? {})) {
+        if (isPrunable(persisted, staleBefore)) {
+          pruned += 1
+          continue
+        }
         sessions.set(opencodeSessionId, deserializeSessionState(persisted))
       }
-      log("INFO", "persistence", "Session state loaded", { count: sessions.size })
+      log("INFO", "persistence", "Session state loaded", { count: sessions.size, pruned })
+      if (pruned > 0) await enqueueSave()
     } catch (error) {
       log("ERROR", "persistence", "Failed to load session state", { error: error?.message })
       if (fs.existsSync(statePath)) {
@@ -133,6 +142,12 @@ export function createMemorySessionManager({ config, pluginRoot }) {
     }
   }
 
+  // A stale session whose messages are all captured holds nothing left to send.
+  function isPrunable(persisted, staleBefore) {
+    if ((persisted.lastActivityAt ?? 0) >= staleBefore) return false
+    return (persisted.messages ?? []).every(([, message]) => message.captured)
+  }
+
   function deserializeSessionState(persisted) {
     return {
       ovSessionId: persisted.ovSessionId,

package/lib/shared/ov-http.mjs

@@ -17,6 +17,8 @@
 // that asks for less than a second gets a second.
 const MIN_TIMEOUT_MS = 1000;
 
+import { parseExtraHeaders } from "./mcp-proxy-config.mjs";
+
 /**
  * The headers every harness puts on every OpenViking request.
  *
@@ -59,6 +61,12 @@ export function createOvHttp(cfg = {}, {
 } = {}) {
   // dsh and pi name this field `endpoint`; every other harness names it `baseUrl`.
   const baseUrl = cfg.baseUrl || cfg.endpoint || "";
+  // A caller that owns its header map passes it in; every other harness gets the
+  // operator's escape hatch from the environment. A deployment behind an
+  // authenticating gateway (Cloudflare Access, oauth2-proxy, mTLS-terminating proxy)
+  // needs the same headers on the turn hooks as on the MCP path, and wiring each
+  // harness by hand is how the header blocks drifted in the first place.
+  const resolvedExtraHeaders = extraHeaders ?? parseExtraHeaders(process.env.OPENVIKING_EXTRA_HEADERS);
   return async function fetchJSON(path, init = {}, options = {}) {
     const timeoutMs = Math.max(MIN_TIMEOUT_MS, Number(options.timeoutMs) || Number(defaultTimeoutMs) || 0);
     const controller = new AbortController();
@@ -72,7 +80,7 @@ export function createOvHttp(cfg = {}, {
         ...buildOvHeaders(cfg, {
           actorPeerId: options.actorPeerId ?? resolveActorPeerId(),
           identityHeaders,
-          extraHeaders,
+          extraHeaders: resolvedExtraHeaders,
         }),
         ...(init.headers || {}),
       };
@@ -81,6 +89,19 @@ export function createOvHttp(cfg = {}, {
         if (!(error instanceof SyntaxError)) throw error;
         return null;
       });
+      const contentType = response.headers.get("content-type") || "";
+      if (body === null && response.ok && contentType && !/json/i.test(contentType)) {
+        // A 2xx that is not JSON is not OpenViking. An authenticating gateway's login
+        // page, a captive portal or a WAF page answers with 200 and HTML; calling that a
+        // success makes a harness believe it is connected while every capture and recall
+        // is quietly dropped.
+        return {
+          ok: false,
+          status: response.status,
+          result: null,
+          error: { message: `non-JSON response (${contentType})` },
+        };
+      }
       if (requireJsonBody && !body) {
         return {
           ok: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openviking/opencode-plugin",
-  "version": "2026.10.13",
+  "version": "2026.10.15",
   "author": "@openviking",
   "description": "Unified OpenCode plugin for OpenViking repository retrieval and long-term memory",
   "type": "module",
@@ -46,5 +46,5 @@
     "code-search"
   ],
   "license": "Apache-2.0",
-  "openvikingSourceCommit": "22ea8c7b34602fddc8b6194fea361f8ed0e79e7c"
+  "openvikingSourceCommit": "60629f92bfd7d05c67bc50aa452f852acbc77c39"
 }