engrm 0.4.37 → 0.4.39

package/dist/cli.js

@@ -18,10 +18,10 @@ var __export = (target, all) => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/cli.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync7, statSync } from "fs";
-import { hostname as hostname2, homedir as homedir4, networkInterfaces as networkInterfaces2 } from "os";
-import { dirname as dirname5, join as join7 } from "path";
-import { createHash as createHash3 } from "crypto";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync8, statSync } from "fs";
+import { hostname as hostname3, homedir as homedir5, networkInterfaces as networkInterfaces3 } from "os";
+import { dirname as dirname5, join as join8 } from "path";
+import { createHash as createHash4 } from "crypto";
 import { fileURLToPath as fileURLToPath4 } from "url";
 
 // src/config.ts
@@ -104,6 +104,16 @@ function createDefaultConfig() {
     },
     transcript_analysis: {
       enabled: false
+    },
+    http: {
+      enabled: false,
+      port: 3767,
+      bearer_tokens: []
+    },
+    fleet: {
+      project_name: "shared-experience",
+      namespace: "",
+      api_key: ""
     }
   };
 }
@@ -165,6 +175,16 @@ function loadConfig() {
     },
     transcript_analysis: {
       enabled: asBool(config["transcript_analysis"]?.["enabled"], defaults.transcript_analysis.enabled)
+    },
+    http: {
+      enabled: asBool(config["http"]?.["enabled"], defaults.http.enabled),
+      port: asNumber(config["http"]?.["port"], defaults.http.port),
+      bearer_tokens: asStringArray(config["http"]?.["bearer_tokens"], defaults.http.bearer_tokens)
+    },
+    fleet: {
+      project_name: asString(config["fleet"]?.["project_name"], defaults.fleet.project_name),
+      namespace: asString(config["fleet"]?.["namespace"], defaults.fleet.namespace),
+      api_key: asString(config["fleet"]?.["api_key"], defaults.fleet.api_key)
     }
   };
 }
@@ -2583,7 +2603,7 @@ function errorPage(message) {
 }
 
 // src/register.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, copyFileSync } from "node:fs";
 import { homedir as homedir2 } from "node:os";
 import { join as join2, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -2591,6 +2611,8 @@ var CLAUDE_JSON = join2(homedir2(), ".claude.json");
 var CLAUDE_SETTINGS = join2(homedir2(), ".claude", "settings.json");
 var CODEX_CONFIG = join2(homedir2(), ".codex", "config.toml");
 var CODEX_HOOKS = join2(homedir2(), ".codex", "hooks.json");
+var OPENCODE_CONFIG = join2(homedir2(), ".config", "opencode", "opencode.json");
+var OPENCODE_PLUGIN = join2(homedir2(), ".config", "opencode", "plugins", "engrm.js");
 var LEGACY_CODEX_SERVER_NAME = `candengo-${"mem"}`;
 function isBuiltDist() {
   const thisDir = dirname(fileURLToPath(import.meta.url));
@@ -2780,6 +2802,26 @@ function registerCodexHooks() {
   writeFileSync2(CODEX_HOOKS, content, "utf-8");
   return { path: CODEX_HOOKS, added: true };
 }
+function registerOpenCode() {
+  const root = findPackageRoot();
+  const pluginSource = join2(root, "opencode", "plugin", "engrm-opencode.js");
+  const config = readJsonFile(OPENCODE_CONFIG);
+  const mcp = config["mcp"] ?? {};
+  mcp["engrm"] = {
+    type: "local",
+    command: ["engrm", "serve"],
+    enabled: true,
+    timeout: 5000
+  };
+  config["$schema"] = "https://opencode.ai/config.json";
+  config["mcp"] = mcp;
+  writeJsonFile(OPENCODE_CONFIG, config);
+  ensureParentDir(OPENCODE_PLUGIN);
+  if (existsSync2(pluginSource)) {
+    copyFileSync(pluginSource, OPENCODE_PLUGIN);
+  }
+  return { path: OPENCODE_CONFIG, added: true, pluginPath: OPENCODE_PLUGIN };
+}
 function registerHooks() {
   const runtime = findRuntime();
   const root = findPackageRoot();
@@ -2830,6 +2872,7 @@ function registerAll() {
   let hooks = { path: CLAUDE_SETTINGS, added: false };
   let codex = { path: CODEX_CONFIG, added: false };
   let codexHooks = { path: CODEX_HOOKS, added: false };
+  let opencode = { path: OPENCODE_CONFIG, added: false, pluginPath: OPENCODE_PLUGIN };
   try {
     mcp = registerMcpServer();
   } catch {}
@@ -2842,11 +2885,15 @@ function registerAll() {
   try {
     codexHooks = registerCodexHooks();
   } catch {}
+  try {
+    opencode = registerOpenCode();
+  } catch {}
   return {
     mcp,
     hooks,
     codex,
-    codexHooks
+    codexHooks,
+    opencode
   };
 }
 
@@ -2990,6 +3037,12 @@ function containsSecrets(text, customPatterns = []) {
   }
   return false;
 }
+var FLEET_HOSTNAME_PATTERN = /\b(?=.{1,253}\b)(?!-)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}\b/gi;
+var FLEET_IP_PATTERN = /\b(?:\d{1,3}\.){3}\d{1,3}\b/g;
+var FLEET_MAC_PATTERN = /\b(?:[0-9a-f]{2}[:-]){5}[0-9a-f]{2}\b/gi;
+function scrubFleetIdentifiers(text) {
+  return text.replace(FLEET_MAC_PATTERN, "[REDACTED_MAC]").replace(FLEET_IP_PATTERN, "[REDACTED_IP]").replace(FLEET_HOSTNAME_PATTERN, "[REDACTED_HOSTNAME]");
+}
 
 // src/capture/quality.ts
 var QUALITY_THRESHOLD = 0.1;
@@ -3577,6 +3630,35 @@ function narrativesConflict(narrative1, narrative2) {
   return null;
 }
 
+// src/sync/targets.ts
+function isFleetProjectName(projectName, config) {
+  const fleetProjectName = config.fleet?.project_name ?? "shared-experience";
+  if (!projectName || !fleetProjectName)
+    return false;
+  return projectName.trim().toLowerCase() === fleetProjectName.trim().toLowerCase();
+}
+function hasFleetTarget(config) {
+  return Boolean(config.fleet?.namespace?.trim() && config.fleet?.api_key?.trim() && (config.fleet?.project_name ?? "shared-experience").trim());
+}
+function resolveSyncTarget(config, projectName) {
+  if (isFleetProjectName(projectName, config) && hasFleetTarget(config)) {
+    return {
+      key: `fleet:${config.fleet.namespace}`,
+      apiKey: config.fleet.api_key,
+      namespace: config.fleet.namespace,
+      siteId: config.site_id,
+      isFleet: true
+    };
+  }
+  return {
+    key: `default:${config.namespace}`,
+    apiKey: config.candengo_api_key,
+    namespace: config.namespace,
+    siteId: config.site_id,
+    isFleet: false
+  };
+}
+
 // src/tools/save.ts
 var VALID_TYPES = [
   "bugfix",
@@ -3625,7 +3707,8 @@ async function saveObservation(db, config, input) {
   const factsJson = structuredFacts.length > 0 ? config.scrubbing.enabled ? scrubSecrets(JSON.stringify(structuredFacts), customPatterns) : JSON.stringify(structuredFacts) : null;
   const filesReadJson = filesRead ? JSON.stringify(filesRead) : null;
   const filesModifiedJson = filesModified ? JSON.stringify(filesModified) : null;
-  let sensitivity = input.sensitivity ?? config.scrubbing.default_sensitivity;
+  const fleetProject = isFleetProjectName(project.name, config);
+  let sensitivity = input.sensitivity ?? (fleetProject ? "shared" : config.scrubbing.default_sensitivity);
   if (config.scrubbing.enabled && containsSecrets([input.title, input.narrative, JSON.stringify(input.facts)].filter(Boolean).join(" "), customPatterns)) {
     if (sensitivity === "shared") {
       sensitivity = "personal";
@@ -3835,26 +3918,250 @@ async function installRulePacks(db, config, packNames) {
 }
 
 // src/tools/capture-status.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
+import { existsSync as existsSync7, readFileSync as readFileSync7 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { join as join7 } from "node:path";
+
+// src/config.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir3, hostname as hostname2, networkInterfaces as networkInterfaces2 } from "node:os";
 import { join as join6 } from "node:path";
+import { createHash as createHash3 } from "node:crypto";
+var CONFIG_DIR2 = join6(homedir3(), ".engrm");
+var SETTINGS_PATH2 = join6(CONFIG_DIR2, "settings.json");
+var DB_PATH2 = join6(CONFIG_DIR2, "engrm.db");
+function getDbPath2() {
+  return DB_PATH2;
+}
+function generateDeviceId2() {
+  const host = hostname2().toLowerCase().replace(/[^a-z0-9-]/g, "");
+  let mac = "";
+  const ifaces = networkInterfaces2();
+  for (const entries of Object.values(ifaces)) {
+    if (!entries)
+      continue;
+    for (const entry of entries) {
+      if (!entry.internal && entry.mac && entry.mac !== "00:00:00:00:00:00") {
+        mac = entry.mac;
+        break;
+      }
+    }
+    if (mac)
+      break;
+  }
+  const material = `${host}:${mac || "no-mac"}`;
+  const suffix = createHash3("sha256").update(material).digest("hex").slice(0, 8);
+  return `${host}-${suffix}`;
+}
+function createDefaultConfig2() {
+  return {
+    candengo_url: "",
+    candengo_api_key: "",
+    site_id: "",
+    namespace: "",
+    user_id: "",
+    user_email: "",
+    device_id: generateDeviceId2(),
+    teams: [],
+    sync: {
+      enabled: true,
+      interval_seconds: 30,
+      batch_size: 50
+    },
+    search: {
+      default_limit: 10,
+      local_boost: 1.2,
+      scope: "all"
+    },
+    scrubbing: {
+      enabled: true,
+      custom_patterns: [],
+      default_sensitivity: "shared"
+    },
+    sentinel: {
+      enabled: false,
+      mode: "advisory",
+      provider: "openai",
+      model: "gpt-4o-mini",
+      api_key: "",
+      base_url: "",
+      skip_patterns: [],
+      daily_limit: 100,
+      tier: "free"
+    },
+    observer: {
+      enabled: true,
+      mode: "per_event",
+      model: "sonnet"
+    },
+    transcript_analysis: {
+      enabled: false
+    },
+    http: {
+      enabled: false,
+      port: 3767,
+      bearer_tokens: []
+    },
+    fleet: {
+      project_name: "shared-experience",
+      namespace: "",
+      api_key: ""
+    }
+  };
+}
+function loadConfig2() {
+  if (!existsSync6(SETTINGS_PATH2)) {
+    throw new Error(`Config not found at ${SETTINGS_PATH2}. Run 'engrm init --manual' to configure.`);
+  }
+  const raw = readFileSync6(SETTINGS_PATH2, "utf-8");
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`Invalid JSON in ${SETTINGS_PATH2}`);
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    throw new Error(`Config at ${SETTINGS_PATH2} is not a JSON object`);
+  }
+  const config = parsed;
+  const defaults = createDefaultConfig2();
+  return {
+    candengo_url: asString2(config["candengo_url"], defaults.candengo_url),
+    candengo_api_key: asString2(config["candengo_api_key"], defaults.candengo_api_key),
+    site_id: asString2(config["site_id"], defaults.site_id),
+    namespace: asString2(config["namespace"], defaults.namespace),
+    user_id: asString2(config["user_id"], defaults.user_id),
+    user_email: asString2(config["user_email"], defaults.user_email),
+    device_id: asString2(config["device_id"], defaults.device_id),
+    teams: asTeams2(config["teams"], defaults.teams),
+    sync: {
+      enabled: asBool2(config["sync"]?.["enabled"], defaults.sync.enabled),
+      interval_seconds: asNumber2(config["sync"]?.["interval_seconds"], defaults.sync.interval_seconds),
+      batch_size: asNumber2(config["sync"]?.["batch_size"], defaults.sync.batch_size)
+    },
+    search: {
+      default_limit: asNumber2(config["search"]?.["default_limit"], defaults.search.default_limit),
+      local_boost: asNumber2(config["search"]?.["local_boost"], defaults.search.local_boost),
+      scope: asScope2(config["search"]?.["scope"], defaults.search.scope)
+    },
+    scrubbing: {
+      enabled: asBool2(config["scrubbing"]?.["enabled"], defaults.scrubbing.enabled),
+      custom_patterns: asStringArray2(config["scrubbing"]?.["custom_patterns"], defaults.scrubbing.custom_patterns),
+      default_sensitivity: asSensitivity2(config["scrubbing"]?.["default_sensitivity"], defaults.scrubbing.default_sensitivity)
+    },
+    sentinel: {
+      enabled: asBool2(config["sentinel"]?.["enabled"], defaults.sentinel.enabled),
+      mode: asSentinelMode2(config["sentinel"]?.["mode"], defaults.sentinel.mode),
+      provider: asLlmProvider2(config["sentinel"]?.["provider"], defaults.sentinel.provider),
+      model: asString2(config["sentinel"]?.["model"], defaults.sentinel.model),
+      api_key: asString2(config["sentinel"]?.["api_key"], defaults.sentinel.api_key),
+      base_url: asString2(config["sentinel"]?.["base_url"], defaults.sentinel.base_url),
+      skip_patterns: asStringArray2(config["sentinel"]?.["skip_patterns"], defaults.sentinel.skip_patterns),
+      daily_limit: asNumber2(config["sentinel"]?.["daily_limit"], defaults.sentinel.daily_limit),
+      tier: asTier2(config["sentinel"]?.["tier"], defaults.sentinel.tier)
+    },
+    observer: {
+      enabled: asBool2(config["observer"]?.["enabled"], defaults.observer.enabled),
+      mode: asObserverMode2(config["observer"]?.["mode"], defaults.observer.mode),
+      model: asString2(config["observer"]?.["model"], defaults.observer.model)
+    },
+    transcript_analysis: {
+      enabled: asBool2(config["transcript_analysis"]?.["enabled"], defaults.transcript_analysis.enabled)
+    },
+    http: {
+      enabled: asBool2(config["http"]?.["enabled"], defaults.http.enabled),
+      port: asNumber2(config["http"]?.["port"], defaults.http.port),
+      bearer_tokens: asStringArray2(config["http"]?.["bearer_tokens"], defaults.http.bearer_tokens)
+    },
+    fleet: {
+      project_name: asString2(config["fleet"]?.["project_name"], defaults.fleet.project_name),
+      namespace: asString2(config["fleet"]?.["namespace"], defaults.fleet.namespace),
+      api_key: asString2(config["fleet"]?.["api_key"], defaults.fleet.api_key)
+    }
+  };
+}
+function saveConfig2(config) {
+  if (!existsSync6(CONFIG_DIR2)) {
+    mkdirSync3(CONFIG_DIR2, { recursive: true });
+  }
+  writeFileSync3(SETTINGS_PATH2, JSON.stringify(config, null, 2) + `
+`, "utf-8");
+}
+function configExists2() {
+  return existsSync6(SETTINGS_PATH2);
+}
+function asString2(value, fallback) {
+  return typeof value === "string" ? value : fallback;
+}
+function asNumber2(value, fallback) {
+  return typeof value === "number" && !Number.isNaN(value) ? value : fallback;
+}
+function asBool2(value, fallback) {
+  return typeof value === "boolean" ? value : fallback;
+}
+function asStringArray2(value, fallback) {
+  return Array.isArray(value) && value.every((v) => typeof v === "string") ? value : fallback;
+}
+function asScope2(value, fallback) {
+  if (value === "personal" || value === "team" || value === "all")
+    return value;
+  return fallback;
+}
+function asSensitivity2(value, fallback) {
+  if (value === "shared" || value === "personal" || value === "secret")
+    return value;
+  return fallback;
+}
+function asSentinelMode2(value, fallback) {
+  if (value === "advisory" || value === "blocking")
+    return value;
+  return fallback;
+}
+function asLlmProvider2(value, fallback) {
+  if (value === "openai" || value === "anthropic" || value === "ollama" || value === "custom")
+    return value;
+  return fallback;
+}
+function asTier2(value, fallback) {
+  if (value === "free" || value === "vibe" || value === "solo" || value === "pro" || value === "team" || value === "enterprise")
+    return value;
+  return fallback;
+}
+function asObserverMode2(value, fallback) {
+  if (value === "per_event" || value === "per_session")
+    return value;
+  return fallback;
+}
+function asTeams2(value, fallback) {
+  if (!Array.isArray(value))
+    return fallback;
+  return value.filter((t) => typeof t === "object" && t !== null && typeof t.id === "string" && typeof t.name === "string" && typeof t.namespace === "string");
+}
+
+// src/tools/capture-status.ts
 var LEGACY_CODEX_SERVER_NAME2 = `candengo-${"mem"}`;
 function getCaptureStatus(db, input = {}) {
   const hours = Math.max(1, Math.min(input.lookback_hours ?? 24, 24 * 30));
   const sinceEpoch = Math.floor(Date.now() / 1000) - hours * 3600;
-  const home = input.home_dir ?? homedir3();
-  const claudeJson = join6(home, ".claude.json");
-  const claudeSettings = join6(home, ".claude", "settings.json");
-  const codexConfig = join6(home, ".codex", "config.toml");
-  const codexHooks = join6(home, ".codex", "hooks.json");
-  const claudeJsonContent = existsSync6(claudeJson) ? readFileSync6(claudeJson, "utf-8") : "";
-  const claudeSettingsContent = existsSync6(claudeSettings) ? readFileSync6(claudeSettings, "utf-8") : "";
-  const codexConfigContent = existsSync6(codexConfig) ? readFileSync6(codexConfig, "utf-8") : "";
-  const codexHooksContent = existsSync6(codexHooks) ? readFileSync6(codexHooks, "utf-8") : "";
+  const home = input.home_dir ?? homedir4();
+  const claudeJson = join7(home, ".claude.json");
+  const claudeSettings = join7(home, ".claude", "settings.json");
+  const codexConfig = join7(home, ".codex", "config.toml");
+  const codexHooks = join7(home, ".codex", "hooks.json");
+  const opencodeConfig = join7(home, ".config", "opencode", "opencode.json");
+  const opencodePlugin = join7(home, ".config", "opencode", "plugins", "engrm.js");
+  const config = configExists2() ? loadConfig2() : null;
+  const claudeJsonContent = existsSync7(claudeJson) ? readFileSync7(claudeJson, "utf-8") : "";
+  const claudeSettingsContent = existsSync7(claudeSettings) ? readFileSync7(claudeSettings, "utf-8") : "";
+  const codexConfigContent = existsSync7(codexConfig) ? readFileSync7(codexConfig, "utf-8") : "";
+  const codexHooksContent = existsSync7(codexHooks) ? readFileSync7(codexHooks, "utf-8") : "";
+  const opencodeConfigContent = existsSync7(opencodeConfig) ? readFileSync7(opencodeConfig, "utf-8") : "";
   const claudeMcpRegistered = claudeJsonContent.includes('"engrm"');
   const claudeHooksRegistered = claudeSettingsContent.includes("engrm") || claudeSettingsContent.includes("session-start") || claudeSettingsContent.includes("user-prompt-submit");
   const codexMcpRegistered = codexConfigContent.includes("[mcp_servers.engrm]") || codexConfigContent.includes(`[mcp_servers.${LEGACY_CODEX_SERVER_NAME2}]`);
   const codexHooksRegistered = codexHooksContent.includes('"SessionStart"') && codexHooksContent.includes('"Stop"');
+  const opencodeMcpRegistered = opencodeConfigContent.includes('"engrm"') && opencodeConfigContent.includes('"type"') && opencodeConfigContent.includes('"local"');
+  const opencodePluginRegistered = existsSync7(opencodePlugin);
   let claudeHookCount = 0;
   let claudeSessionStartHook = false;
   let claudeUserPromptHook = false;
@@ -3927,6 +4234,11 @@ function getCaptureStatus(db, input = {}) {
   return {
     schema_version: schemaVersion,
     schema_current: schemaVersion >= LATEST_SCHEMA_VERSION,
+    http_enabled: Boolean(config?.http?.enabled || process.env.ENGRM_HTTP_PORT),
+    http_port: config?.http?.port ?? (process.env.ENGRM_HTTP_PORT ? Number(process.env.ENGRM_HTTP_PORT) : null),
+    http_bearer_token_count: config?.http?.bearer_tokens?.length ?? 0,
+    fleet_project_name: config?.fleet?.project_name ?? null,
+    fleet_configured: Boolean(config?.fleet?.namespace && config?.fleet?.api_key),
     claude_mcp_registered: claudeMcpRegistered,
     claude_hooks_registered: claudeHooksRegistered,
     claude_hook_count: claudeHookCount,
@@ -3939,6 +4251,8 @@ function getCaptureStatus(db, input = {}) {
     codex_session_start_hook: codexSessionStartHook,
     codex_stop_hook: codexStopHook,
     codex_raw_chronology_supported: false,
+    opencode_mcp_registered: opencodeMcpRegistered,
+    opencode_plugin_registered: opencodePluginRegistered,
     recent_user_prompts: recentUserPrompts,
     recent_tool_events: recentToolEvents,
     recent_sessions_with_raw_capture: recentSessionsWithRawCapture,
@@ -4096,7 +4410,7 @@ async function initWithToken(baseUrl, token) {
   try {
     const result = await provision(baseUrl, {
       token,
-      device_name: hostname2()
+      device_name: hostname3()
     });
     writeConfigFromProvision(baseUrl, result);
     console.log(`
@@ -4122,7 +4436,7 @@ async function initWithBrowser(baseUrl) {
     console.log("Exchanging authorization code...");
     const result = await provision(baseUrl, {
       code,
-      device_name: hostname2()
+      device_name: hostname3()
     });
     writeConfigFromProvision(baseUrl, result);
     console.log(`
@@ -4159,7 +4473,7 @@ function writeConfigFromProvision(baseUrl, result) {
     namespace: result.namespace,
     user_id: result.user_id,
     user_email: result.user_email,
-    device_id: existingDeviceId || generateDeviceId2(),
+    device_id: existingDeviceId || generateDeviceId3(),
     teams: result.teams ?? [],
     sync: {
       enabled: true,
@@ -4203,13 +4517,13 @@ function writeConfigFromProvision(baseUrl, result) {
   console.log(`Database initialised at ${getDbPath()}`);
 }
 function initFromFile(configPath) {
-  if (!existsSync7(configPath)) {
+  if (!existsSync8(configPath)) {
     console.error(`Config file not found: ${configPath}`);
     process.exit(1);
   }
   let parsed;
   try {
-    const raw = readFileSync7(configPath, "utf-8");
+    const raw = readFileSync8(configPath, "utf-8");
     parsed = JSON.parse(raw);
   } catch {
     console.error(`Invalid JSON in ${configPath}`);
@@ -4241,7 +4555,7 @@ function initFromFile(configPath) {
     namespace: input["namespace"].trim(),
     user_id: input["user_id"].trim(),
     user_email: typeof input["user_email"] === "string" ? input["user_email"].trim() : "",
-    device_id: typeof input["device_id"] === "string" ? input["device_id"] : generateDeviceId2(),
+    device_id: typeof input["device_id"] === "string" ? input["device_id"] : generateDeviceId3(),
     teams: [],
     sync: {
       enabled: true,
@@ -4314,7 +4628,7 @@ async function initManual() {
     namespace: namespace.trim(),
     user_id: userId.trim(),
     user_email: userEmail.trim(),
-    device_id: generateDeviceId2(),
+    device_id: generateDeviceId3(),
     teams: [],
     sync: {
       enabled: true,
@@ -4391,17 +4705,26 @@ function handleStatus() {
   Integration`);
   console.log(`    Server:        ${config.candengo_url ? normalizeBaseUrl(config.candengo_url) : "(not set)"}`);
   console.log(`    Sync:          ${config.sync.enabled ? "enabled" : "disabled"}`);
-  const claudeJson = join7(homedir4(), ".claude.json");
-  const claudeSettings = join7(homedir4(), ".claude", "settings.json");
-  const codexConfig = join7(homedir4(), ".codex", "config.toml");
-  const codexHooks = join7(homedir4(), ".codex", "hooks.json");
-  const mcpRegistered = existsSync7(claudeJson) && readFileSync7(claudeJson, "utf-8").includes('"engrm"');
-  const settingsContent = existsSync7(claudeSettings) ? readFileSync7(claudeSettings, "utf-8") : "";
-  const codexContent = existsSync7(codexConfig) ? readFileSync7(codexConfig, "utf-8") : "";
-  const codexHooksContent = existsSync7(codexHooks) ? readFileSync7(codexHooks, "utf-8") : "";
+  console.log(`    HTTP MCP:      ${config.http.enabled ? `enabled (:${config.http.port})` : "disabled"}`);
+  console.log(`    HTTP tokens:   ${config.http.bearer_tokens.length}`);
+  console.log(`    Fleet project: ${config.fleet.project_name || "(not set)"}`);
+  console.log(`    Fleet sync:    ${config.fleet.namespace && config.fleet.api_key ? "configured" : "not configured"}`);
+  const claudeJson = join8(homedir5(), ".claude.json");
+  const claudeSettings = join8(homedir5(), ".claude", "settings.json");
+  const codexConfig = join8(homedir5(), ".codex", "config.toml");
+  const codexHooks = join8(homedir5(), ".codex", "hooks.json");
+  const opencodeConfig = join8(homedir5(), ".config", "opencode", "opencode.json");
+  const opencodePlugin = join8(homedir5(), ".config", "opencode", "plugins", "engrm.js");
+  const mcpRegistered = existsSync8(claudeJson) && readFileSync8(claudeJson, "utf-8").includes('"engrm"');
+  const settingsContent = existsSync8(claudeSettings) ? readFileSync8(claudeSettings, "utf-8") : "";
+  const codexContent = existsSync8(codexConfig) ? readFileSync8(codexConfig, "utf-8") : "";
+  const codexHooksContent = existsSync8(codexHooks) ? readFileSync8(codexHooks, "utf-8") : "";
+  const opencodeConfigContent = existsSync8(opencodeConfig) ? readFileSync8(opencodeConfig, "utf-8") : "";
   const hooksRegistered = settingsContent.includes("engrm") || settingsContent.includes("session-start") || settingsContent.includes("user-prompt-submit");
   const codexRegistered = codexContent.includes("[mcp_servers.engrm]") || codexContent.includes(`[mcp_servers.${LEGACY_CODEX_SERVER_NAME3}]`);
   const codexHooksRegistered = codexHooksContent.includes('"SessionStart"') && codexHooksContent.includes('"Stop"');
+  const opencodeRegistered = opencodeConfigContent.includes('"engrm"') && opencodeConfigContent.includes('"local"');
+  const opencodePluginRegistered = existsSync8(opencodePlugin);
   let hookCount = 0;
   if (hooksRegistered) {
     try {
@@ -4421,8 +4744,10 @@ function handleStatus() {
   }
   console.log(`    MCP server:    ${mcpRegistered ? "registered" : "not registered"}`);
   console.log(`    Codex MCP:     ${codexRegistered ? "registered" : "not registered"}`);
+  console.log(`    OpenCode MCP:  ${opencodeRegistered ? "registered" : "not registered"}`);
   console.log(`    Hooks:         ${hooksRegistered ? `registered (${hookCount || "?"} hooks)` : "not registered"}`);
   console.log(`    Codex hooks:   ${codexHooksRegistered ? "registered (2 hooks)" : "not registered"}`);
+  console.log(`    OpenCode plug: ${opencodePluginRegistered ? "registered" : "not registered"}`);
   if (config.sentinel?.enabled) {
     console.log(`
   Sentinel`);
@@ -4431,7 +4756,7 @@ function handleStatus() {
     if (config.sentinel.provider) {
       console.log(`    Provider:      ${config.sentinel.provider}${config.sentinel.model ? ` (${config.sentinel.model})` : ""}`);
     }
-    if (existsSync7(getDbPath())) {
+    if (existsSync8(getDbPath())) {
       try {
         const db = new MemDatabase(getDbPath());
         const todayStart = Math.floor(new Date().setHours(0, 0, 0, 0) / 1000);
@@ -4444,7 +4769,7 @@ function handleStatus() {
     console.log(`
   Sentinel:        disabled`);
   }
-  if (existsSync7(getDbPath())) {
+  if (existsSync8(getDbPath())) {
     try {
       const db = new MemDatabase(getDbPath());
       const obsCount = db.getActiveObservationCount();
@@ -4549,8 +4874,10 @@ function handleStatus() {
   Files`);
   console.log(`    Config:        ${getSettingsPath()}`);
   console.log(`    Database:      ${getDbPath()}`);
-  console.log(`    Codex config:  ${join7(homedir4(), ".codex", "config.toml")}`);
-  console.log(`    Codex hooks:   ${join7(homedir4(), ".codex", "hooks.json")}`);
+  console.log(`    Codex config:  ${join8(homedir5(), ".codex", "config.toml")}`);
+  console.log(`    Codex hooks:   ${join8(homedir5(), ".codex", "hooks.json")}`);
+  console.log(`    OpenCode cfg:  ${join8(homedir5(), ".config", "opencode", "opencode.json")}`);
+  console.log(`    OpenCode plug: ${join8(homedir5(), ".config", "opencode", "plugins", "engrm.js")}`);
 }
 function formatTimeAgo(epoch) {
   const ago = Math.floor(Date.now() / 1000) - epoch;
@@ -4572,14 +4899,14 @@ function formatSyncTime(epochStr) {
 }
 function ensureConfigDir() {
   const dir = getConfigDir();
-  if (!existsSync7(dir)) {
-    mkdirSync3(dir, { recursive: true });
+  if (!existsSync8(dir)) {
+    mkdirSync4(dir, { recursive: true });
   }
 }
-function generateDeviceId2() {
-  const host = hostname2().toLowerCase().replace(/[^a-z0-9-]/g, "");
+function generateDeviceId3() {
+  const host = hostname3().toLowerCase().replace(/[^a-z0-9-]/g, "");
   let mac = "";
-  const ifaces = networkInterfaces2();
+  const ifaces = networkInterfaces3();
   for (const entries of Object.values(ifaces)) {
     if (!entries)
       continue;
@@ -4593,7 +4920,7 @@ function generateDeviceId2() {
       break;
   }
   const material = `${host}:${mac || "no-mac"}`;
-  const suffix = createHash3("sha256").update(material).digest("hex").slice(0, 8);
+  const suffix = createHash4("sha256").update(material).digest("hex").slice(0, 8);
   return `${host}-${suffix}`;
 }
 async function handleInstallPack(flags) {
@@ -4723,6 +5050,22 @@ async function handleDoctor() {
     printDoctorReport(results);
     return;
   }
+  if (config.http.enabled) {
+    if (config.http.bearer_tokens.length > 0) {
+      pass(`HTTP MCP enabled on port ${config.http.port} with ${config.http.bearer_tokens.length} bearer token(s)`);
+    } else {
+      warn("HTTP MCP is enabled but no bearer tokens are configured");
+    }
+  } else {
+    info("HTTP MCP disabled");
+  }
+  if (config.fleet.project_name) {
+    if (config.fleet.namespace && config.fleet.api_key) {
+      pass(`Fleet project '${config.fleet.project_name}' is configured`);
+    } else {
+      info(`Fleet project '${config.fleet.project_name}' is reserved but not fully configured`);
+    }
+  }
   let db = null;
   try {
     db = new MemDatabase(getDbPath());
@@ -4742,10 +5085,10 @@ async function handleDoctor() {
   } catch {
     warn("Could not check database schema version");
   }
-  const claudeJson = join7(homedir4(), ".claude.json");
+  const claudeJson = join8(homedir5(), ".claude.json");
   try {
-    if (existsSync7(claudeJson)) {
-      const content = readFileSync7(claudeJson, "utf-8");
+    if (existsSync8(claudeJson)) {
+      const content = readFileSync8(claudeJson, "utf-8");
       if (content.includes('"engrm"')) {
         pass("MCP server registered in Claude Code");
       } else {
@@ -4757,10 +5100,10 @@ async function handleDoctor() {
   } catch {
     warn("Could not check MCP server registration");
   }
-  const claudeSettings = join7(homedir4(), ".claude", "settings.json");
+  const claudeSettings = join8(homedir5(), ".claude", "settings.json");
   try {
-    if (existsSync7(claudeSettings)) {
-      const content = readFileSync7(claudeSettings, "utf-8");
+    if (existsSync8(claudeSettings)) {
+      const content = readFileSync8(claudeSettings, "utf-8");
       let hookCount = 0;
       let hasSessionStart = false;
       let hasUserPrompt = false;
@@ -4806,10 +5149,10 @@ async function handleDoctor() {
   } catch {
     warn("Could not check hooks registration");
   }
-  const codexConfig = join7(homedir4(), ".codex", "config.toml");
+  const codexConfig = join8(homedir5(), ".codex", "config.toml");
   try {
-    if (existsSync7(codexConfig)) {
-      const content = readFileSync7(codexConfig, "utf-8");
+    if (existsSync8(codexConfig)) {
+      const content = readFileSync8(codexConfig, "utf-8");
       if (content.includes("[mcp_servers.engrm]") || content.includes(`[mcp_servers.${LEGACY_CODEX_SERVER_NAME3}]`)) {
         pass("MCP server registered in Codex");
       } else {
@@ -4821,10 +5164,10 @@ async function handleDoctor() {
   } catch {
     warn("Could not check Codex MCP registration");
   }
-  const codexHooks = join7(homedir4(), ".codex", "hooks.json");
+  const codexHooks = join8(homedir5(), ".codex", "hooks.json");
   try {
-    if (existsSync7(codexHooks)) {
-      const content = readFileSync7(codexHooks, "utf-8");
+    if (existsSync8(codexHooks)) {
+      const content = readFileSync8(codexHooks, "utf-8");
       if (content.includes('"SessionStart"') && content.includes('"Stop"')) {
         pass("Hooks registered in Codex");
       } else {
@@ -4836,6 +5179,27 @@ async function handleDoctor() {
   } catch {
     warn("Could not check Codex hooks registration");
   }
+  const opencodeConfig = join8(homedir5(), ".config", "opencode", "opencode.json");
+  try {
+    if (existsSync8(opencodeConfig)) {
+      const content = readFileSync8(opencodeConfig, "utf-8");
+      if (content.includes('"engrm"') && content.includes('"local"')) {
+        pass("MCP server registered in OpenCode");
+      } else {
+        warn("MCP server not registered in OpenCode");
+      }
+    } else {
+      warn("OpenCode config not found (~/.config/opencode/opencode.json)");
+    }
+  } catch {
+    warn("Could not check OpenCode MCP registration");
+  }
+  const opencodePlugin = join8(homedir5(), ".config", "opencode", "plugins", "engrm.js");
+  if (existsSync8(opencodePlugin)) {
+    pass("Plugin installed in OpenCode");
+  } else {
+    warn("OpenCode plugin not installed (~/.config/opencode/plugins/engrm.js)");
+  }
   if (config.candengo_url) {
     try {
       const baseUrl = normalizeBaseUrl(config.candengo_url);
@@ -4946,7 +5310,7 @@ async function handleDoctor() {
   }
   try {
     const dbPath = getDbPath();
-    if (existsSync7(dbPath)) {
+    if (existsSync8(dbPath)) {
       const stats = statSync(dbPath);
       const sizeMB = stats.size / (1024 * 1024);
       const sizeStr = sizeMB >= 1 ? `${sizeMB.toFixed(1)} MB` : `${(stats.size / 1024).toFixed(0)} KB`;
@@ -5011,16 +5375,18 @@ Registering with Claude Code and Codex...`);
     console.log(`  Claude hooks registered \u2192 ${result.hooks.path}`);
     console.log(`  Codex MCP registered \u2192 ${result.codex.path}`);
     console.log(`  Codex hooks registered \u2192 ${result.codexHooks.path}`);
+    console.log(`  OpenCode MCP registered \u2192 ${result.opencode.path}`);
+    console.log(`  OpenCode plugin installed \u2192 ${result.opencode.pluginPath}`);
     console.log(`
-Engrm is ready! Start a new Claude Code or Codex session to use memory.`);
+Engrm is ready! Start a new Claude Code, Codex, or OpenCode session to use memory.`);
   } catch (error) {
-    const packageRoot = join7(THIS_DIR, "..");
+    const packageRoot = join8(THIS_DIR, "..");
     const runtime = IS_BUILT_DIST ? process.execPath : "bun";
-    const serverArgs = IS_BUILT_DIST ? [join7(packageRoot, "dist", "server.js")] : ["run", join7(packageRoot, "src", "server.ts")];
-    const sessionStartCommand = IS_BUILT_DIST ? `${process.execPath} ${join7(packageRoot, "dist", "hooks", "session-start.js")}` : `bun run ${join7(packageRoot, "hooks", "session-start.ts")}`;
-    const codexStopCommand = IS_BUILT_DIST ? `${process.execPath} ${join7(packageRoot, "dist", "hooks", "codex-stop.js")}` : `bun run ${join7(packageRoot, "hooks", "codex-stop.ts")}`;
+    const serverArgs = IS_BUILT_DIST ? [join8(packageRoot, "dist", "server.js")] : ["run", join8(packageRoot, "src", "server.ts")];
+    const sessionStartCommand = IS_BUILT_DIST ? `${process.execPath} ${join8(packageRoot, "dist", "hooks", "session-start.js")}` : `bun run ${join8(packageRoot, "hooks", "session-start.ts")}`;
+    const codexStopCommand = IS_BUILT_DIST ? `${process.execPath} ${join8(packageRoot, "dist", "hooks", "codex-stop.js")}` : `bun run ${join8(packageRoot, "hooks", "codex-stop.ts")}`;
     console.log(`
-Could not auto-register with Claude Code and Codex.`);
+Could not auto-register with Claude Code, Codex, and OpenCode.`);
     console.log(`Error: ${error instanceof Error ? error.message : String(error)}`);
     console.log(`
 Manual setup \u2014 add to ~/.claude.json:`);
@@ -5074,6 +5440,24 @@ And add to ~/.codex/hooks.json:`);
   }
 }
 `);
+    console.log(`
+And add to ~/.config/opencode/opencode.json:`);
+    console.log(`
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "engrm": {
+      "type": "local",
+      "command": ["engrm", "serve"],
+      "enabled": true,
+      "timeout": 5000
+    }
+  }
+}
+`);
+    console.log(`
+And copy the OpenCode plugin file to ~/.config/opencode/plugins/engrm.js:`);
+    console.log(`  ${join8(packageRoot, "opencode", "plugin", "engrm-opencode.js")}`);
   }
 }
 function formatTomlArray(values) {