opencode-metis 0.2.7 → 0.2.9

package/README.md

@@ -8,8 +8,9 @@ Persistent memory system for [OpenCode](https://opencode.ai) sessions. Captures
 - **Semantic search** — Find relevant memories by meaning via ChromaDB vector embeddings, not just keywords
 - **Context injection** — Relevant past observations are automatically injected at session start
 - **Compaction survival** — Saves and restores context when OpenCode compacts messages
+- **Multi-session support** — Run multiple OpenCode sessions concurrently with session-scoped data isolation
 - **Privacy protection** — `<private>` tag stripping and automatic secret detection (API keys, tokens, PEM keys) before storage
-- **Crash recovery** — Pending message queue with at-least-once delivery ensures no observations are lost
+- **Crash recovery** — Pending message queue with at-least-once delivery ensures no observations are lost; automatic token refresh on worker restart
 - **Quality checks** — TDD enforcement and file-length warnings on every edit
 - **Tool redirection** — Block or redirect specific tools via configuration
 - **Local-only** — All data stays on your machine at `~/.config/opencode/memory/`; only AI compression calls leave the machine
@@ -167,7 +168,7 @@ The system has four components, each built as a separate bundle under `dist/`:
 
 - **CLI** (`dist/cli.cjs`) — Orchestrates init, start, and stop commands
 - **Plugin** (`dist/plugin.cjs`) — Hooks into OpenCode's lifecycle events to capture observations, enforce quality checks, and inject context
-- **Worker** (`dist/worker.cjs`) — Bun HTTP daemon with bearer token auth that stores observations in SQLite (WAL mode), manages ChromaDB via chroma-mcp, runs AI compression, and serves search queries
+- **Worker** (`dist/worker.cjs`) — Bun HTTP daemon with bearer token auth that stores observations in SQLite (WAL mode), manages ChromaDB via chroma-mcp, runs AI compression, serves search queries, and broadcasts session-scoped SSE events
 - **MCP Server** (`dist/mcp-server.cjs`) — Exposes memory tools to the AI via the Model Context Protocol
 
 ### Data Flow
@@ -177,7 +178,7 @@ OpenCode Session
   │
   ├─ session.created ──────► Worker /api/context/inject ──► SQLite + ChromaDB query ──► context injected
   │
-  ├─ tool.execute.after ───► Worker /api/memory/save ────► privacy strip ──► SQLite write
+  ├─ tool.execute.after ───► Worker /api/memory/save ────► privacy strip ──► SQLite write (session-scoped)
   │                                                         │
   │                                                         └──► AI compression queue ──► Gemini/OpenRouter/Anthropic
   │                                                                                        │
@@ -185,13 +186,17 @@ OpenCode Session
   │
   ├─ session.idle ─────────► Worker /api/memory/save ────► session summary stored
   │
+  ├─ SSE connection ───────► Worker /api/events?sessionId= ► session-scoped event stream
+  │
   └─ session.compacted ───► Worker /api/context/inject ──► context restored after compaction
 ```
 
 ### Security
 
-- **Bearer token auth** — A cryptographically random token is generated per worker instance and stored in the PID file. All non-health endpoints require `Authorization: Bearer <token>`.
+- **Bearer token auth** — A cryptographically random token is generated per worker instance and stored in the PID file with `0o600` permissions (owner read/write only). All non-health endpoints require `Authorization: Bearer <token>`.
+- **Automatic token refresh** — When the worker restarts, sessions automatically re-read the PID file and retry with the new token (single retry to prevent crash-loop storms).
 - **Privacy stripping** — `<private>` tags are removed at the hook layer before data leaves the plugin process. Secrets (AWS keys, GitHub tokens, API keys, PEM keys, JWTs) are detected via regex and redacted with `[REDACTED]`.
+- **Secure API key transmission** — Gemini API keys are sent via `x-goog-api-key` header rather than URL query parameters to prevent exposure in logs and proxy traces.
 - **Localhost binding** — The worker binds to `127.0.0.1` by default.
 
 ## MCP Tools