
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
@opencode-manager/memory
Advanced tools
AI-powered memory management plugin for OpenCode - semantic search and persistent knowledge storage
Semantic memory and planning plugin for OpenCode AI agents
pnpm add @opencode-manager/memory
Add to your opencode.json:
{
"plugin": ["@opencode-manager/memory@latest"]
}
The local embedding model downloads automatically on install. For API-based embeddings (OpenAI or Voyage), see Configuration.
ocm-mem binaryThe plugin bundles four agents that integrate with the memory system:
| Agent | ID | Mode | Description |
|---|---|---|---|
| code | ocm-code | primary | Primary coding agent with memory awareness. Checks memory before unfamiliar code, stores architectural decisions and conventions as it works. Delegates planning operations to @librarian subagent. |
| architect | ocm-architect | primary | Read-only planning agent. Researches the codebase, delegates to @librarian for broad knowledge retrieval, designs implementation plans, then hands off to code via memory-plan-execute. |
| librarian | ocm-librarian | subagent | Expert agent for managing project memory. Handles post-compaction memory extraction and contradiction resolution. |
| auditor | ocm-auditor | subagent | Read-only code auditor with access to project memory for convention-aware reviews. Invoked via Task tool to review diffs, commits, branches, or PRs against stored conventions and decisions. |
The auditor agent is a read-only subagent (temperature: 0.0) that can read memory but cannot write, edit, or delete memories or execute plans. It is invoked by other agents via the Task tool to review code changes against stored project conventions and decisions.
The architect agent operates in read-only mode (temperature: 0.0, all edits denied) with additional message-level read-only enforcement via the experimental.chat.messages.transform hook. After the user approves a plan, it calls memory-plan-execute which creates a new code session with the full plan as context.
| Tool | Description |
|---|---|
memory-read | Search and retrieve project memories with semantic search |
memory-write | Store a new project memory |
memory-edit | Update an existing project memory |
memory-delete | Delete a project memory by ID |
memory-health | Health check, reindex, or upgrade the plugin to latest version |
memory-plan-execute | Create a new Code session and send an approved plan as the first prompt |
Ephemeral key-value storage for project state with automatic TTL-based expiration.
| Tool | Description |
|---|---|
memory-kv-set | Store a value with optional TTL (default 24 hours) |
memory-kv-get | Retrieve a value by key |
memory-kv-list | List all active KV entries for the project |
Iterative development loops with automatic auditing. Runs in an isolated git worktree by default, or in the current directory with inPlace.
| Tool | Description |
|---|---|
ralph-cancel | Cancel an active Ralph loop and clean up the worktree |
ralph-status | Check status of active Ralph loops |
memory-plan-ralph | Execute an architect plan using a Ralph iterative loop |
| Command | Description | Agent |
|---|---|---|
/review | Run a code review on current changes | auditor (subtask) |
/ralph-loop | Start a Ralph loop (delegates to memory-plan-ralph) | code |
/cancel-ralph | Cancel the active Ralph loop | code |
Manage memories using the ocm-mem CLI. The CLI auto-detects the project ID from git and resolves the database path automatically.
ocm-mem <command> [options]
Global options (apply to all commands):
| Flag | Description |
|---|---|
--db-path <path> | Path to memory database |
--project, -p <name> | Project name or SHA (auto-detected from git) |
--dir, -d <path> | Git repo path for project detection |
--help, -h | Show help |
Export memories to file (JSON or Markdown).
ocm-mem export --format markdown --output memories.md
ocm-mem export --project my-project --scope convention
ocm-mem export --limit 50 --offset 100
| Flag | Description |
|---|---|
--format, -f | Output format: json or markdown (default: json) |
--output, -o | Output file path (prints to stdout if omitted) |
--scope, -s | Filter by scope: convention, decision, or context |
--limit, -l | Max number of memories (default: 1000) |
--offset | Pagination offset (default: 0) |
Import memories from file.
ocm-mem import memories.json --project my-project
ocm-mem import memories.md --project my-project --force
| Flag | Description |
|---|---|
--format, -f | Input format: json or markdown (auto-detected from extension) |
--force | Skip duplicate detection and import all |
List all projects with memory counts.
ocm-mem list
Show memory statistics for a project (scope breakdown).
ocm-mem stats
ocm-mem stats --project my-project
Delete memories by criteria.
ocm-mem cleanup --older-than 90
ocm-mem cleanup --ids 1,2,3 --force
ocm-mem cleanup --scope context --dry-run
ocm-mem cleanup --all --project my-project
| Flag | Description |
|---|---|
--older-than <days> | Delete memories older than N days |
--ids <id,id,...> | Delete specific memory IDs |
--scope <scope> | Filter by scope: convention, decision, or context |
--all | Delete all memories for the project |
--dry-run | Preview what would be deleted without deleting |
--force | Skip confirmation prompt |
On first run, the plugin automatically copies the bundled config to your config directory:
~/.config/opencode/memory-config.jsonc$XDG_CONFIG_HOME/opencode/memory-config.jsoncThe plugin supports JSONC format, allowing comments with // and /* */.
You can edit this file to customize settings. The file is created only if it doesn't already exist. If a config exists at the old location (~/.local/share/opencode/memory/config.json), it will be automatically migrated to the new location.
{
"embedding": {
"provider": "local",
"model": "all-MiniLM-L6-v2",
"dimensions": 384,
"baseUrl": "",
"apiKey": ""
},
"dedupThreshold": 0.25,
"logging": {
"enabled": false,
"debug": false,
"file": ""
},
"compaction": {
"customPrompt": true,
"maxContextTokens": 4000
},
"memoryInjection": {
"enabled": true,
"debug": false,
"maxTokens": 2000,
"cacheTtlMs": 30000
},
"messagesTransform": {
"enabled": true,
"debug": false
},
"executionModel": "",
"auditorModel": "",
"ralph": {
"enabled": true,
"defaultMaxIterations": 15,
"cleanupWorktree": false,
"defaultAudit": true,
"model": "",
"minAudits": 1
}
}
For API-based embeddings:
{
"embedding": {
"provider": "openai",
"model": "text-embedding-3-small",
"apiKey": "sk-..."
}
}
embedding.provider - Embedding provider: "local", "openai", or "voyage"embedding.model - Model name
"all-MiniLM-L6-v2" (384d)"text-embedding-3-small" (1536d), "text-embedding-3-large" (3072d), or "text-embedding-ada-002" (1536d)"voyage-code-3" (1024d) or "voyage-2" (1536d)embedding.dimensions - Vector dimensions (optional, auto-detected for known models)embedding.apiKey - API key for openai/voyage providersembedding.baseUrl - Custom endpoint (optional, defaults to provider's official API)dataDir - Directory for SQLite database storage (default: "~/.local/share/opencode/memory")dedupThreshold - Similarity threshold for deduplication (0–1, default: 0.25, clamped to 0.05–0.40)~/.config/opencode/memory-config.jsonc (or $XDG_CONFIG_HOME/opencode/memory-config.jsonc)~/.local/share/opencode/memory/config.json) is automatically migrated on first loadlogging.enabled - Enable file logging (default: false)logging.debug - Enable debug-level log output (default: false)logging.file - Log file path. When empty, resolves to ~/.local/share/opencode/memory/logs/memory.log (default: ""). Logs remain in the data directory, only config has moved.When enabled, logs are written to the specified file with timestamps. The log file has a 10MB size limit with automatic rotation.
compaction.customPrompt - Use a custom compaction prompt optimized for session continuity (default: true)compaction.maxContextTokens - Token budget for injected memory context with priority-based trimming (default: 4000)memoryInjection.enabled - Inject relevant project memories into user messages via semantic search (default: true)memoryInjection.debug - Enable debug logging for memory injection (default: false)memoryInjection.maxResults - Maximum number of vector search results to retrieve (default: 5)memoryInjection.distanceThreshold - Maximum vector distance for a memory to be considered relevant; lower values are stricter (default: 0.5)memoryInjection.maxTokens - Token budget for the injected <project-memory> block (default: 2000)memoryInjection.cacheTtlMs - How long (ms) to cache results for identical queries (default: 30000)messagesTransform.enabled - Enable the messages transform hook that handles memory injection and Architect read-only enforcement (default: true)messagesTransform.debug - Enable debug logging for messages transform (default: false)executionModel - Model override for plan execution sessions, format: provider/model (e.g. anthropic/claude-haiku-3-5-20241022). When set, memory-plan-execute uses this model for the new Code session. When empty or omitted, OpenCode's default model is used (typically the model field from opencode.json). Recommended: Set this to a fast, cheap model (e.g. Haiku or MiniMax) and use a smart model (e.g. Opus) for the Architect session — planning needs reasoning, execution needs speed.ralph.enabled - Enable Ralph iterative development loops (default: true)ralph.defaultMaxIterations - Default max iterations for loops, 0 = unlimited (default: 15)ralph.cleanupWorktree - Auto-remove worktree on cancel (default: false)ralph.defaultAudit - Run auditor after each coding iteration by default (default: true)ralph.model - Model override for Ralph sessions (provider/model), falls back to executionModel (default: "")ralph.minAudits - Minimum audit iterations required before completion (default: 1)auditorModel - Model override for the auditor agent (provider/model). When set, overrides the auditor agent's default model. When not set, uses platform default (default: "")Plan with a smart model, execute with a fast model. The architect agent researches and designs; the code agent implements.
After the architect presents a plan, the user approves via one of three execution modes:
memory-plan-executememory-plan-ralphSet executionModel in your config to a fast model (e.g., Haiku) and use a smart model (e.g., Opus) for the architect session.
See the full workflow guide for setup details.
The Ralph loop is an iterative development system that alternates between coding and auditing phases:
The loop completes when the Code agent outputs the completion promise. It auto-terminates after maxIterations (if set) or after 3 consecutive errors.
By default, Ralph loops run in an isolated git worktree. Set inPlace: true to run in the current directory instead (skips worktree creation, auto-commit, and cleanup).
See the full documentation for details on the Ralph loop system.
Full documentation available at chriswritescode-dev.github.io/opencode-manager/features/memory
pnpm build # Compile TypeScript to dist/
pnpm test # Run tests
pnpm typecheck # Type check without emitting
MIT
FAQs
AI-powered memory management plugin for OpenCode - semantic search and persistent knowledge storage
The npm package @opencode-manager/memory receives a total of 104 weekly downloads. As such, @opencode-manager/memory popularity was classified as not popular.
We found that @opencode-manager/memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.