@cryer/star-cli 0.2.1 → 0.2.2

package/dist/{chunk-MJ2O7NWI.js → chunk-GN236FD4.js}

@@ -433,6 +433,12 @@ function matchAllowRule(rule, req) {
   return target !== void 0 && globMatch(rule.pattern, target);
 }
 function isAllowedByRules(rules, req) {
+  return matchesAnyRule(rules, req);
+}
+function isDeniedByRules(rules, req) {
+  return matchesAnyRule(rules, req);
+}
+function matchesAnyRule(rules, req) {
   return rules.some((raw) => {
     const rule = parseAllowRule(raw);
     return rule !== null && matchAllowRule(rule, req);
@@ -484,7 +490,7 @@ function isSensitivePath(p) {
   }
   return base === ".env" || base.startsWith(".env.") || base === "id_rsa" || base.endsWith(".pem");
 }
-function checkPermission(mode, req, ctx, allowRules = []) {
+function checkPermission(mode, req, ctx, allowRules = [], denyRules = []) {
   if (mode === "yolo") {
     return "allow";
   }
@@ -504,6 +510,9 @@ function checkPermission(mode, req, ctx, allowRules = []) {
       return "deny";
     }
   }
+  if (isDeniedByRules(denyRules, req)) {
+    return "deny";
+  }
   if (mode === "auto") {
     return "allow";
   }
@@ -745,6 +754,9 @@ function globalConfigPath() {
 function sessionsDir() {
   return path4.join(starHome(), "sessions");
 }
+function userMemoryPath() {
+  return path4.join(starHome(), "MEMORY.md");
+}
 function projectConfigPath(cwd) {
   return path4.join(cwd, ".star", "config.toml");
 }
@@ -1197,10 +1209,11 @@ import path9 from "path";
 import { z as z4 } from "zod";
 
 // src/tools/fs/util.ts
+import { readFileSync as readFileSync3, statSync as statSync3 } from "fs";
 import { readdir, stat } from "fs/promises";
 import path8 from "path";
 var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", "dist"]);
-async function walkFiles(root, skipDirs = SKIP_DIRS) {
+async function walkFiles(root, skipDirs = SKIP_DIRS, options = {}) {
   const out = [];
   async function walk(dir, relBase) {
     const entries = await readdir(dir, { withFileTypes: true }).catch(() => null);
@@ -1211,10 +1224,14 @@ async function walkFiles(root, skipDirs = SKIP_DIRS) {
       const abs = path8.join(dir, entry.name);
       const rel = relBase ? `${relBase}/${entry.name}` : entry.name;
       if (entry.isDirectory()) {
-        if (!skipDirs.has(entry.name)) {
-          await walk(abs, rel);
+        if (skipDirs.has(entry.name) || options.ignore?.(abs, true)) {
+          continue;
         }
+        await walk(abs, rel);
       } else if (entry.isFile()) {
+        if (options.ignore?.(abs, false)) {
+          continue;
+        }
         try {
           const st = await stat(abs);
           out.push({ abs, rel, mtimeMs: st.mtimeMs });
@@ -1263,6 +1280,69 @@ function matchesGlob(pattern, relPath) {
   }
   return globToRegExp(normalized).test(relPath);
 }
+var IGNORE_FILE = ".starignore";
+var ignoreCache = /* @__PURE__ */ new Map();
+function parseIgnorePatterns(body) {
+  const out = [];
+  for (const raw of body.split("\n")) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#")) {
+      continue;
+    }
+    if (line.endsWith("/")) {
+      const pattern = line.slice(0, -1);
+      if (pattern) {
+        out.push({ pattern, dirOnly: true });
+      }
+    } else {
+      out.push({ pattern: line, dirOnly: false });
+    }
+  }
+  return out;
+}
+function loadIgnorePatterns(dir) {
+  const file = path8.join(dir, IGNORE_FILE);
+  let mtimeMs;
+  try {
+    mtimeMs = statSync3(file).mtimeMs;
+  } catch {
+    return [];
+  }
+  const hit = ignoreCache.get(file);
+  if (hit && hit.mtimeMs === mtimeMs) {
+    return hit.patterns;
+  }
+  let patterns = [];
+  try {
+    patterns = parseIgnorePatterns(readFileSync3(file, "utf8"));
+  } catch {
+    patterns = [];
+  }
+  ignoreCache.set(file, { mtimeMs, patterns });
+  return patterns;
+}
+function createIgnorePredicate(cwd) {
+  const patterns = loadIgnorePatterns(cwd);
+  if (patterns.length === 0) {
+    return void 0;
+  }
+  const root = path8.resolve(cwd);
+  return (absPath, isDir) => {
+    const rel = path8.relative(root, absPath).split(path8.sep).join("/");
+    if (!rel || rel.startsWith("..")) {
+      return false;
+    }
+    for (const { pattern, dirOnly } of patterns) {
+      if (dirOnly && !isDir) {
+        continue;
+      }
+      if (matchesGlob(pattern, rel)) {
+        return true;
+      }
+    }
+    return false;
+  };
+}
 function isSensitivePath2(filePath) {
   const base = path8.basename(filePath);
   if (base === ".env.example" || base === ".env.sample" || base === ".env.template") {
@@ -1292,7 +1372,7 @@ var globTool = {
   parameters: schema3,
   async execute(args, ctx) {
     const root = path9.resolve(ctx.cwd, args.path ?? ".");
-    const files = await walkFiles(root);
+    const files = await walkFiles(root, void 0, { ignore: createIgnorePredicate(ctx.cwd) });
     const matched = files.filter((f) => matchesGlob(args.pattern, f.rel)).sort((a, b) => b.mtimeMs - a.mtimeMs).slice(0, MAX_RESULTS);
     if (matched.length === 0) {
       return { content: `No files matched pattern: ${args.pattern}` };
@@ -1331,7 +1411,7 @@ var grepTool = {
       if (st.isFile()) {
         files = [{ abs: root, rel: path10.basename(root), mtimeMs: st.mtimeMs }];
       } else {
-        files = await walkFiles(root);
+        files = await walkFiles(root, void 0, { ignore: createIgnorePredicate(ctx.cwd) });
       }
     } catch {
       return { content: `Path not found: ${args.path ?? "."}`, isError: true };
@@ -1959,7 +2039,7 @@ function createSubagentTool(deps) {
       description: z12.string().optional().describe("Short label for the subtask, shown in the result header.")
     }),
     async execute(args, ctx) {
-      const { AgentLoop: AgentLoop2 } = await import("./loop-R3RQCNFT.js");
+      const { AgentLoop: AgentLoop2 } = await import("./loop-ADVWZA62.js");
       const child = new AgentLoop2({
         model: deps.model,
         registry: createDefaultRegistry(),
@@ -2016,6 +2096,64 @@ ${report || "(subagent produced no text output)"}` };
   };
 }
 
+// src/agent/user-memory.ts
+import { appendFileSync, mkdirSync, readFileSync as readFileSync4, statSync as statSync4 } from "fs";
+import path14 from "path";
+import { z as z13 } from "zod";
+var USER_MEMORY_MAX_CHARS = 32 * 1024;
+var REMEMBER_TEXT_MAX_CHARS = 500;
+var cache3 = /* @__PURE__ */ new Map();
+function readUserMemory(home = starHome()) {
+  const file = path14.join(home, "MEMORY.md");
+  let mtimeMs;
+  try {
+    mtimeMs = statSync4(file).mtimeMs;
+  } catch {
+    return null;
+  }
+  const hit = cache3.get(file);
+  if (hit && hit.mtimeMs === mtimeMs) return hit.block;
+  let block = null;
+  try {
+    let body = readFileSync4(file, "utf8").trim();
+    if (body) {
+      if (body.length > USER_MEMORY_MAX_CHARS) {
+        body = `${body.slice(0, USER_MEMORY_MAX_CHARS)}
+
+[MEMORY.md truncated to ${USER_MEMORY_MAX_CHARS} characters]`;
+      }
+      block = [
+        "# User memory (MEMORY.md)",
+        "The following notes were saved by the user across sessions. Respect them unless they conflict with the current request.",
+        body
+      ].join("\n");
+    }
+  } catch {
+    block = null;
+  }
+  cache3.set(file, { mtimeMs, block });
+  return block;
+}
+function appendUserMemory(text, home = starHome()) {
+  mkdirSync(home, { recursive: true });
+  appendFileSync(path14.join(home, "MEMORY.md"), `- ${text}
+`, "utf8");
+}
+function createRememberTool(deps = {}) {
+  return {
+    name: "remember",
+    description: `Save a note to the user's long-term memory (${userMemoryPath()}), injected into every future session. ONLY use when the user explicitly asks to remember or save something. Never use autonomously.`,
+    permission: "write",
+    parameters: z13.object({
+      text: z13.string().max(REMEMBER_TEXT_MAX_CHARS).describe("The note to save, as a single concise sentence.")
+    }),
+    async execute(args) {
+      appendUserMemory(args.text, deps.home);
+      return { content: `Saved to user memory: ${args.text}` };
+    }
+  };
+}
+
 // src/agent/loop.ts
 var PLAN_MODE_PROMPT = "\n\nYou are currently in PLAN MODE. Research the task using only the read-only tools available to you, then present a concrete, step-by-step implementation plan as your final answer. You must not modify files, run shell commands, or otherwise change the system \u2014 write/exec tools are unavailable in this mode. Do not ask the user to run commands for you; note manual steps in the plan instead. The user will review your plan and approve it before any execution begins.";
 var AgentLoop = class {
@@ -2041,6 +2179,7 @@ var AgentLoop = class {
       this.bindSnapshotHooks(opts.sessionStore);
     }
     opts.registry?.register(createSkillTool({ cwd: opts.cwd }));
+    opts.registry?.register(createRememberTool());
     const depth = opts.subagentDepth ?? 0;
     if (opts.registry && depth < MAX_SUBAGENT_DEPTH) {
       opts.registry.register(
@@ -2285,8 +2424,9 @@ var AgentLoop = class {
   // /model switch) replaced the history with one that has none. Git context
   // (branch, dirty count, recent commits) is refreshed here too, so the model
   // always sees the current repo state; any git failure is silently skipped.
-  // Project memory (AGENTS.md in the cwd) is appended as a delimited block;
-  // readProjectMemory caches by mtime, so this stays cheap per turn. The
+  // Project memory (AGENTS.md in the cwd) and user memory (~/.star-cli/
+  // MEMORY.md) are appended as delimited blocks; both cache by mtime, so this
+  // stays cheap per turn. The
   // skills listing is refreshed here as well, so skills added mid-session
   // show up in the next turn's system prompt.
   syncSystemMessage() {
@@ -2297,6 +2437,8 @@ var AgentLoop = class {
     if (plan) parts.push(PLAN_MODE_PROMPT.trim());
     const memory = readProjectMemory(this.opts.cwd);
     if (memory) parts.push(memory);
+    const userMemory = readUserMemory();
+    if (userMemory) parts.push(userMemory);
     const skills = discoverSkills(this.opts.cwd);
     if (skills.length > 0) parts.push(formatSkillsBlock(skills));
     const git = getGitSummary(this.opts.cwd);
@@ -2378,7 +2520,8 @@ ${summary}`
       config.permissionMode,
       { toolName: call.name, args: call.args, level: tool.permission },
       { cwd },
-      config.permissions.allow
+      config.permissions.allow,
+      config.permissions.deny
     );
     if (decision === "deny") {
       return { content: `Permission denied for tool "${call.name}".`, isError: true };
@@ -2450,12 +2593,14 @@ export {
   starHome,
   globalConfigPath,
   sessionsDir,
+  userMemoryPath,
   projectConfigPath,
   discoverSkills,
   defaultTaskManager,
   resolveShell,
   bashTool,
   SKIP_DIRS,
+  createIgnorePredicate,
   isSensitivePath2 as isSensitivePath,
   formatTaskList,
   formatTaskStarted,
@@ -2463,7 +2608,8 @@ export {
   TodoStore,
   formatTodos,
   createDefaultRegistry,
+  appendUserMemory,
   PLAN_MODE_PROMPT,
   AgentLoop
 };
-//# sourceMappingURL=chunk-MJ2O7NWI.js.map
+//# sourceMappingURL=chunk-GN236FD4.js.map