@openviking/opencode-plugin 2026.10.15 → 2026.10.19

package/INSTALL-ZH.md

@@ -178,7 +178,7 @@ OpenCode 的 `mcp.openviking` 配置。
 进入新的 OpenCode session 后，可以让 agent 浏览 OpenViking memory，或搜索一个已索引的资源。插件应暴露 OpenViking MCP server，OpenCode 中的工具名会带 `openviking_` 前缀：
 
 - `openviking_search`、`openviking_find`
-- `openviking_read`、`openviking_list`、`openviking_tree`、`openviking_grep`、`openviking_glob`
+- `openviking_read`、`openviking_download`、`openviking_list`、`openviking_tree`、`openviking_grep`、`openviking_glob`
 - `openviking_remember`、`openviking_write`、`openviking_edit`、`openviking_add_resource`、`openviking_add_skill`
 - `openviking_list_watches`、`openviking_cancel_watch`、`openviking_forget`、`openviking_health`
 
@@ -203,6 +203,7 @@ curl http://localhost:1933/health
 - `openviking_find`：快速语义检索
 - `openviking_remember`：存储重要事实或决策，供记忆提取
 - `openviking_read`：读取一个或多个 `viking://` 文件
+- `openviking_download`：获取一次性 URL，用 `curl` 下载文件原始字节
 - `openviking_list`：列出 `viking://` 目录
 - `openviking_tree`：展示 `viking://` 目录树
 - `openviking_grep`：精确文本或正则搜索

package/INSTALL.md

@@ -175,7 +175,7 @@ Restart OpenCode after changing plugin or OpenViking configuration.
 In a new OpenCode session, ask the agent to browse OpenViking memory or search for a known indexed resource. The plugin should expose the OpenViking MCP server, with tools namespaced by OpenCode as `openviking_*`:
 
 - `openviking_search`, `openviking_find`
-- `openviking_read`, `openviking_list`, `openviking_tree`, `openviking_grep`, `openviking_glob`
+- `openviking_read`, `openviking_download`, `openviking_list`, `openviking_tree`, `openviking_grep`, `openviking_glob`
 - `openviking_remember`, `openviking_write`, `openviking_edit`, `openviking_add_resource`, `openviking_add_skill`
 - `openviking_list_watches`, `openviking_cancel_watch`, `openviking_forget`, `openviking_health`
 
@@ -200,6 +200,7 @@ The plugin registers OpenViking's stdio MCP proxy through OpenCode config. The s
 - `openviking_find`: fast semantic retrieval.
 - `openviking_remember`: store important facts or decisions for memory extraction.
 - `openviking_read`: read one or more `viking://` files.
+- `openviking_download`: get a one-time URL for fetching a file's original bytes with `curl`.
 - `openviking_list`: list a `viking://` directory.
 - `openviking_tree`: show a `viking://` directory tree.
 - `openviking_grep`: exact text or regex search.

package/README.md

@@ -226,6 +226,7 @@ OpenCode sees the OpenViking MCP server as `openviking`, so tool names are names
 - `openviking_find`: fast semantic retrieval.
 - `openviking_remember`: store important facts or decisions for memory extraction.
 - `openviking_read`: read one or more `viking://` files.
+- `openviking_download`: get a one-time URL for fetching a file's original bytes with `curl`.
 - `openviking_list`: list a `viking://` directory.
 - `openviking_tree`: show a `viking://` directory tree.
 - `openviking_grep`: exact text or regex search.

package/lib/memory-session.mjs

@@ -316,7 +316,11 @@ export function createMemorySessionManager({ config, pluginRoot }) {
     const run = (state.flushChain ?? Promise.resolve()).then(async () => {
       const added = await flushPendingMessages(opencodeSessionId, state)
       if (commit && isCaptureEnabled(config)) {
-        await commitOvSession(state.ovSessionId, { force: true, reason })
+        const result = await commitOvSession(state.ovSessionId, { force: true, reason })
+        // Server lost the session (reset/reinstall); drop the stale mapping.
+        if (result.status === "not_found" && sessions.get(opencodeSessionId) === state) {
+          sessions.delete(opencodeSessionId)
+        }
       } else if (added > 0) {
         await maybeCommitByThreshold(state)
       }
@@ -346,7 +350,10 @@ export function createMemorySessionManager({ config, pluginRoot }) {
   }
 
   function createSessionState(opencodeSessionId, event = {}) {
-    const parentId = event?.properties?.info?.parentID ?? event?.properties?.parentID ?? event?.parentID ?? ""
+    const isSessionEvent = typeof event?.type === "string" && event.type.startsWith("session.")
+    const parentId = isSessionEvent
+      ? (event?.properties?.info?.parentID ?? event?.properties?.parentID ?? event?.parentID ?? "")
+      : ""
     const ovSessionId = parentId
       ? deriveHarnessSessionId("oc-", parentId, `subagent-${opencodeSessionId}`)
       : deriveHarnessSessionId("oc-", opencodeSessionId)
@@ -515,6 +522,14 @@ export function createMemorySessionManager({ config, pluginRoot }) {
       })
       return { status: "queued" }
     }
+    if (res.status === 404) {
+      log("WARN", "session", "OpenViking session not found", {
+        openviking_session: ovSessionId,
+        reason,
+        trace_id: res.traceId,
+      })
+      return { status: "not_found" }
+    }
     log("ERROR", "session", "Failed to commit OpenViking session", {
       openviking_session: ovSessionId,
       reason,

package/lib/shared/capture-utils.mjs

@@ -362,14 +362,41 @@ export function extractPartsFromPayload(payload, options = {}) {
   return parts;
 }
 
+function substituteValue(value, rules, role) {
+  if (typeof value === "string") {
+    let current = value;
+    for (const rule of rules) {
+      if (rule.op !== "s" || (rule.scope && rule.scope !== role)) continue;
+      current = current.replace(rule.re, rule.replacement);
+    }
+    return current;
+  }
+  if (Array.isArray(value)) return value.map((item) => substituteValue(item, rules, role));
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, item]) => [key, substituteValue(item, rules, role)]),
+    );
+  }
+  return value;
+}
+
+function substituteToolPart(part, rules, role) {
+  if (part.type !== "tool") return part;
+  const out = { ...part };
+  if (part.tool_input !== undefined) out.tool_input = substituteValue(part.tool_input, rules, role);
+  if (part.tool_output !== undefined) out.tool_output = substituteValue(part.tool_output, rules, role);
+  return out;
+}
+
 /**
  * Prune blank text parts and run `cfg.captureFilters` over the ones that remain.
  *
  * One drop verdict is taken per turn, on the aggregate of its text parts; the
  * individual parts are then rewritten with the substitutions only, so a rule can
- * never both keep and drop the same turn. Tool call/result parts are carried
- * through untouched — filters match conversation text, not tool payloads — but a
- * turn dropped on its text takes its tool parts with it.
+ * never both keep and drop the same turn. Tool call/result parts get the
+ * substitutions too, on their input values and output, so a redaction rule also
+ * covers a secret that reached a command or its output; only text parts decide
+ * the drop verdict, and a turn dropped on its text takes its tool parts with it.
  */
 export function filterCaptureParts(parts, role, cfg = {}) {
   const kept = [];
@@ -389,7 +416,9 @@ export function filterCaptureParts(parts, role, cfg = {}) {
   if (!compiled.rules.length || kept.length === 0) return blank;
 
   const textParts = kept.filter((part) => part.type === "text");
-  if (textParts.length === 0) return blank;
+  if (textParts.length === 0) {
+    return { parts: kept.map((part) => substituteToolPart(part, compiled.rules, role)), dropped: false };
+  }
 
   const verdict = applyInputFilters(textParts.map((part) => part.text).join("\n\n"), compiled.rules, {
     role,
@@ -399,7 +428,7 @@ export function filterCaptureParts(parts, role, cfg = {}) {
   const out = [];
   for (const part of kept) {
     if (part.type !== "text") {
-      out.push(part);
+      out.push(substituteToolPart(part, compiled.rules, role));
       continue;
     }
     const shaped = applyInputFilters(part.text, compiled.rules, { role, substituteOnly: true });
@@ -431,7 +460,7 @@ function faithfulCaptureDecision(text, cfg) {
 /**
  * Shape one host message before an adapter builds its session payload.
  * Sanitize injected context before evaluating keep/drop rules, so text that
- * will not be sent cannot satisfy a keep rule. Tool parts are never filtered.
+ * will not be sent cannot satisfy a keep rule. Tool parts never decide keep or drop.
  */
 export function shapeCapturePayload(payload, role, cfg = {}, { toolNameById = {}, faithful = false } = {}) {
   const options = { toolMaxChars: cfg.captureToolMaxChars, toolNameById };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openviking/opencode-plugin",
-  "version": "2026.10.15",
+  "version": "2026.10.19",
   "author": "@openviking",
   "description": "Unified OpenCode plugin for OpenViking repository retrieval and long-term memory",
   "type": "module",
@@ -46,5 +46,5 @@
     "code-search"
   ],
   "license": "Apache-2.0",
-  "openvikingSourceCommit": "60629f92bfd7d05c67bc50aa452f852acbc77c39"
+  "openvikingSourceCommit": "66f528de3ce20770c24335535137e6a1cecfe29f"
 }