feat: providers, perf, security, CI — MIMO/Verboo/AtlasCloud/Astraflow, web search, agent loop

.github/workflows/ci.yml

@@ -0,0 +1,63 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [20, 22]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Type check
+        run: pnpm run check-types
+
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Unit tests (vitest)
+        run: pnpm run test:unit
+
+      - name: Build production
+        run: node esbuild.js --production
+
+      - name: Package extension
+        if: matrix.node-version == 22
+        run: npx @vscode/vsce package --no-dependencies
+
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check for leaked secrets
+        run: |
+          # Ensure no .env files committed
+          if git ls-files | grep -E '\.(env|env\..*)$'; then
+            echo "ERROR: .env files found in repo!"
+            exit 1
+          fi
+          # Check no API keys in source
+          if grep -rE '(sk-|tp-|vbk_|Bearer [A-Za-z0-9]{20,})' src/ --include='*.ts' --include='*.tsx' 2>/dev/null; then
+            echo "ERROR: Potential API keys found in source code!"
+            exit 1
+          fi
+          echo "Security scan passed."

.gitignore

@@ -5,3 +5,5 @@ node_modules
 .vscode-dev-extensions
 .vscode-test/
 *.vsix
+.env
+.env.*

.vscodeignore

@@ -24,3 +24,4 @@ vsc-extension-quickstart.md
 **/*.ts
 **/.vscode-test.*
 media/readme/**/*.svg
+.env

package.json

@@ -2,7 +2,7 @@
 	"name": "ocursor",
 	"displayName": "OpenCursor Agent",
 	"description": "AI coding agent chat inside VS Code",
-	"version": "0.1.2",
+	"version": "0.1.5",
 	"publisher": "pkrd",
 	"license": "MIT",
 	"icon": "media/icon.png",
@@ -15,7 +15,7 @@
 	},
 	"homepage": "https://github.com/PawanOsman/OpenCursor#readme",
 	"engines": {
-		"vscode": "^1.96.0"
+		"vscode": "^1.85.0"
 	},
 	"categories": [
 		"AI",
@@ -119,6 +119,7 @@
 		"check-types": "tsc --noEmit && tsc --noEmit -p tsconfig.webview.json",
 		"lint": "eslint src",
 		"test": "vscode-test",
+		"test:unit": "vitest run",
 		"vsix": "pnpm run package && pnpm dlx @vscode/vsce package --no-dependencies"
 	},
 	"devDependencies": {
@@ -127,14 +128,15 @@
 		"@types/pdf-parse": "^1.1.5",
 		"@types/react": "^19.2.17",
 		"@types/react-dom": "^19.2.3",
-		"@types/vscode": "~1.96.0",
+		"@types/vscode": "~1.85.0",
 		"@vscode/test-cli": "^0.0.15",
 		"@vscode/test-electron": "^3.0.0",
 		"esbuild": "^0.28.1",
 		"eslint": "^10.5.0",
 		"npm-run-all": "^4.1.5",
 		"typescript": "^6.0.3",
-		"typescript-eslint": "^8.61.1"
+		"typescript-eslint": "^8.61.1",
+		"vitest": "^2.1.9"
 	},
 	"overrides": {
 		"diff": "^8.0.4",