@cryer/star-cli 0.3.8 → 0.3.10

package/dist/main.js

@@ -11,32 +11,81 @@ import {
   formatTokens,
   imageMimeType,
   listSessionEntries,
-  loadEnvFile,
   loadSessionSnapshots,
   readImageInput,
   resolveMentions,
-  resolveSessionId
-} from "./chunk-IYWYSFSF.js";
+  resolveSessionId,
+  summarizeArgs
+} from "./chunk-PDFC7QVW.js";
 import {
-  AgentLoop,
   ConfigSchema,
+  HookConfigSchema,
+  ModelConfigSchema,
+  PermissionsConfigSchema,
+  ProviderConfigSchema,
   contextWindowTokens,
-  createDefaultRegistry,
-  createModel,
+  reconcileStarMessages,
+  toCoreMessages
+} from "./chunk-IJGUW4PM.js";
+import {
+  resolveModelConfig,
+  resolveStartupModel
+} from "./chunk-4IRY44TG.js";
+import {
   defaultAgentTasks,
   defaultTaskManager,
   globalConfigPath,
   hydrateSnapshots,
+  loadEnvFile,
   loadTodos,
   projectConfigPath,
-  reasoningEffortMetadata,
-  reconcileToolCalls,
-  resolveModelConfig
-} from "./chunk-OHLA2DP7.js";
+  registerSensitivePatterns,
+  setTodoSession,
+  setWebFetchAllowPrivateHosts
+} from "./chunk-A5PXPWHB.js";
 
 // src/main.tsx
 import { Command } from "commander";
 
+// src/cli/print-human.ts
+function printEventLine(event) {
+  switch (event.type) {
+    case "text-delta":
+      return { stream: "stdout", text: event.text };
+    case "tool-call":
+      return { stream: "stderr", text: `
+[tool] ${event.name} ${summarizeArgs(event.args)}
+` };
+    case "tool-result": {
+      const preview = event.content.length > 500 ? `${event.content.slice(0, 500)}... (truncated)` : event.content;
+      return {
+        stream: "stderr",
+        text: `[result] ${event.isError ? "ERROR: " : ""}${preview}
+`
+      };
+    }
+    case "retry": {
+      const wait = event.delayMs !== void 0 && event.delayMs >= 1e3 ? ` in ${Math.round(event.delayMs / 1e3)}s` : "";
+      return {
+        stream: "stderr",
+        text: `
+[retry ${event.attempt}/${event.maxAttempts}${wait}] ${event.reason}
+`
+      };
+    }
+    case "notice":
+      return { stream: "stderr", text: `
+[notice] ${event.message}
+` };
+    case "error":
+      return { stream: "stderr", text: `
+[error] ${formatStreamError(event.error)}
+` };
+    default:
+      return null;
+  }
+}
+
 // src/cli/print-json.ts
 function eventToJsonLine(event) {
   switch (event.type) {
@@ -80,11 +129,35 @@ var UsageTracker = class {
   }
 };
 
+// src/cli/startup.ts
+function imageRequiresPrintError(print, images) {
+  if (print !== void 0) return null;
+  return images.length > 0 ? "--image requires -p/--print" : null;
+}
+function interactiveRequiresTtyError(streams) {
+  return streams.stdinTTY && streams.stdoutTTY ? null : "interactive mode requires a TTY; use -p/--print";
+}
+function installStdoutEpipeGuard(stdout = process.stdout) {
+  stdout.on("error", (error) => {
+    if (error?.code === "EPIPE") process.exit(0);
+    else throw error;
+  });
+}
+async function reportResumeSessions(cwd) {
+  const entries = await listSessionEntries(cwd);
+  if (entries.length === 0) {
+    console.error("No sessions found for this directory.");
+    return 1;
+  }
+  console.log(formatSessionEntries(entries));
+  return 0;
+}
+
 // src/config/loader.ts
 import fs from "fs";
 import { parse } from "smol-toml";
 var PartialConfigSchema = ConfigSchema.partial();
-function parseTomlFile(content, filePath) {
+function parseTomlFile(content, filePath, scope) {
   let raw;
   try {
     raw = parse(content);
@@ -94,8 +167,14 @@ function parseTomlFile(content, filePath) {
   }
   const result = PartialConfigSchema.safeParse(raw);
   if (!result.success) {
-    throw new Error(`Invalid config in ${filePath}: ${result.error.message}`);
+    const details = result.error.issues.map((issue) => {
+      const where = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+      return `  ${where}: ${issue.message}`;
+    }).join("\n");
+    throw new Error(`Invalid config in ${filePath}:
+${details}`);
   }
+  warnUnknownKeys(raw, filePath, scope);
   return result.data;
 }
 var PROJECT_ALLOWED_KEYS = /* @__PURE__ */ new Set([
@@ -121,6 +200,73 @@ var PROJECT_STREAM_RANGES = {
   streamMaxRetries: { min: 0, max: 10 }
 };
 var PROJECT_PROTECTIVE_MIN_KEYS = /* @__PURE__ */ new Set(["maxSteps", "doomLoopThreshold"]);
+var TOP_LEVEL_KEYS = new Set(Object.keys(ConfigSchema.shape));
+var SECTION_KEYS = {
+  permissions: { keys: new Set(Object.keys(PermissionsConfigSchema.shape)), array: false },
+  providers: { keys: new Set(Object.keys(ProviderConfigSchema.shape)), array: true },
+  models: { keys: new Set(Object.keys(ModelConfigSchema.shape)), array: true },
+  hooks: { keys: new Set(Object.keys(HookConfigSchema.shape)), array: true }
+};
+function editDistance(a, b) {
+  let previous = Array.from({ length: b.length + 1 }, (_, i) => i);
+  for (let i = 1; i <= a.length; i++) {
+    const current = [i];
+    for (let j = 1; j <= b.length; j++) {
+      current[j] = Math.min(
+        (previous[j] ?? 0) + 1,
+        (current[j - 1] ?? 0) + 1,
+        (previous[j - 1] ?? 0) + (a[i - 1] === b[j - 1] ? 0 : 1)
+      );
+    }
+    previous = current;
+  }
+  return previous[b.length] ?? 0;
+}
+function suggestKey(key, known) {
+  const needle = key.toLowerCase();
+  let best;
+  let bestDistance = Number.POSITIVE_INFINITY;
+  for (const candidate of known) {
+    const distance = editDistance(needle, candidate.toLowerCase());
+    if (distance <= Math.max(1, Math.floor(candidate.length / 4)) && distance < bestDistance) {
+      best = candidate;
+      bestDistance = distance;
+    }
+  }
+  return best;
+}
+function warnUnknownKey(keyPath, filePath, known) {
+  const leaf = keyPath.slice(keyPath.lastIndexOf(".") + 1);
+  const suggestion = suggestKey(leaf, known);
+  const hint = suggestion ? `possible typo of "${suggestion}"? the key is ignored` : "possible typo? the key is ignored";
+  process.stderr.write(`[star] unknown config key "${keyPath}" in ${filePath}: ${hint}
+`);
+}
+function warnUnknownKeys(raw, filePath, scope) {
+  if (typeof raw !== "object" || raw === null) return;
+  const table = raw;
+  for (const key of Object.keys(table)) {
+    if (!TOP_LEVEL_KEYS.has(key)) warnUnknownKey(key, filePath, TOP_LEVEL_KEYS);
+  }
+  for (const [section, { keys, array }] of Object.entries(SECTION_KEYS)) {
+    if (scope === "project" && !PROJECT_ALLOWED_KEYS.has(section)) continue;
+    const value = table[section];
+    if (array) {
+      if (!Array.isArray(value)) continue;
+      value.forEach((entry, index) => {
+        if (typeof entry !== "object" || entry === null) return;
+        for (const key of Object.keys(entry)) {
+          if (!keys.has(key)) warnUnknownKey(`${section}[${index}].${key}`, filePath, keys);
+        }
+      });
+      continue;
+    }
+    if (typeof value !== "object" || value === null) continue;
+    for (const key of Object.keys(value)) {
+      if (!keys.has(key)) warnUnknownKey(`${section}.${key}`, filePath, keys);
+    }
+  }
+}
 function warnProject(filePath, message) {
   process.stderr.write(`[star] ${message} in ${filePath}
 `);
@@ -181,19 +327,56 @@ function sanitizeProjectConfig(project, filePath) {
   }
   return sanitized;
 }
-function mergeProjectConfig(global, project) {
+function mergeModelsByName(globalModels, projectModels) {
+  const projectByName = new Map(projectModels.map((model) => [model.name, model]));
+  const merged = globalModels.map((model) => projectByName.get(model.name) ?? model);
+  const globalNames = new Set(globalModels.map((model) => model.name));
+  for (const model of projectModels) {
+    if (!globalNames.has(model.name)) merged.push(model);
+  }
+  return merged;
+}
+function protectiveMin(a, b) {
+  const result = Math.min(
+    a === 0 ? Number.POSITIVE_INFINITY : a,
+    b === 0 ? Number.POSITIVE_INFINITY : b
+  );
+  return result === Number.POSITIVE_INFINITY ? 0 : result;
+}
+function mergeProjectConfig(global, project, projectPath) {
   const merged = { ...global, ...project };
+  if (project.models !== void 0) {
+    merged.models = mergeModelsByName(global.models ?? [], project.models);
+    warnProject(projectPath, `project config overrides ${project.models.length} model(s)`);
+  }
   if (project.sessionBudgetUsd !== void 0 && global.sessionBudgetUsd !== void 0) {
     merged.sessionBudgetUsd = Math.min(global.sessionBudgetUsd, project.sessionBudgetUsd);
   }
   if (project.maxSteps !== void 0) {
-    merged.maxSteps = Math.min(global.maxSteps ?? 100, project.maxSteps);
+    merged.maxSteps = protectiveMin(global.maxSteps ?? 100, project.maxSteps);
   }
   if (project.doomLoopThreshold !== void 0) {
-    merged.doomLoopThreshold = Math.min(global.doomLoopThreshold ?? 3, project.doomLoopThreshold);
+    merged.doomLoopThreshold = protectiveMin(
+      global.doomLoopThreshold ?? 3,
+      project.doomLoopThreshold
+    );
   }
   return merged;
 }
+function warnPlaintextApiKey(config) {
+  const offenders = [];
+  for (const provider of config.providers ?? []) {
+    if (provider.apiKey !== void 0) offenders.push(`provider "${provider.name}"`);
+  }
+  for (const model of config.models ?? []) {
+    if ("apiKey" in model && model.apiKey !== void 0) offenders.push(`model "${model.name}"`);
+  }
+  if (offenders.length === 0) return;
+  process.stderr.write(
+    `[star] plaintext apiKey in config (${offenders.join(", ")}) is deprecated: store keys in ~/.star-cli/.env and reference them with apiKeyEnv instead
+`
+  );
+}
 function applyOverrides(config, overrides) {
   if (!overrides) return config;
   const merged = { ...config };
@@ -201,22 +384,29 @@ function applyOverrides(config, overrides) {
   if (overrides.permissionMode !== void 0) merged.permissionMode = overrides.permissionMode;
   return merged;
 }
-function readTomlFileSync(filePath) {
+function readTomlFileSync(filePath, scope) {
   if (!fs.existsSync(filePath)) return {};
   const content = fs.readFileSync(filePath, "utf8");
-  return parseTomlFile(content, filePath);
+  return parseTomlFile(content, filePath, scope);
 }
 function loadConfigSync(cwd, overrides) {
   loadEnvFile();
-  const global = readTomlFileSync(globalConfigPath());
+  const global = readTomlFileSync(globalConfigPath(), "global");
   const projectPath = projectConfigPath(cwd);
-  const project = sanitizeProjectConfig(readTomlFileSync(projectPath), projectPath);
-  const merged = applyOverrides(mergeProjectConfig(global, project), overrides);
-  return ConfigSchema.parse(merged);
+  const project = sanitizeProjectConfig(readTomlFileSync(projectPath, "project"), projectPath);
+  const merged = applyOverrides(mergeProjectConfig(global, project, projectPath), overrides);
+  warnPlaintextApiKey(merged);
+  return wireRuntimeSettings(ConfigSchema.parse(merged));
+}
+function wireRuntimeSettings(config) {
+  registerSensitivePatterns(config.permissions.sensitive);
+  setWebFetchAllowPrivateHosts(config.webFetchAllowPrivateHosts);
+  return config;
 }
 
 // src/main.tsx
 async function createLoop(config, modelName, cwd, sessionStore) {
+  const [{ AgentLoop }, { createModel, reasoningEffortMetadata }, { createDefaultRegistry }] = await Promise.all([import("./loop-TW2FHL7J.js"), import("./provider-EWMUPBLH.js"), import("./tools-7EBGCYYE.js")]);
   const model = createModel(config, modelName);
   const registry = createDefaultRegistry();
   const modelConfig = resolveModelConfig(config, modelName);
@@ -227,11 +417,13 @@ async function createLoop(config, modelName, cwd, sessionStore) {
     cwd,
     system: SYSTEM_PROMPT,
     sessionStore,
+    modelName,
     contextMaxTokens: contextWindowTokens(config, modelName),
     providerMetadata: reasoningEffortMetadata(config, modelName),
     temperature: modelConfig.temperature,
     streamIdleTimeoutSec: modelConfig.streamIdleTimeoutSec,
-    streamFirstChunkTimeoutSec: modelConfig.streamFirstChunkTimeoutSec
+    streamFirstChunkTimeoutSec: modelConfig.streamFirstChunkTimeoutSec,
+    vision: modelConfig.vision
   });
 }
 async function printMode(loop, prompt, cwd, json, imagePaths, sessionStore) {
@@ -281,26 +473,13 @@ async function printMode(loop, prompt, cwd, json, imagePaths, sessionStore) {
         const line = eventToJsonLine(event);
         if (line) process.stdout.write(`${line}
 `);
+      } else {
+        const line = printEventLine(event);
+        if (line) {
+          (line.stream === "stdout" ? process.stdout : process.stderr).write(line.text);
+        }
       }
       switch (event.type) {
-        case "text-delta":
-          if (!json) process.stdout.write(event.text);
-          break;
-        case "reasoning":
-          break;
-        case "tool-call":
-          if (!json) process.stderr.write(`
-[tool] ${event.name} ${JSON.stringify(event.args)}
-`);
-          break;
-        case "tool-result": {
-          if (!json) {
-            const preview = event.content.length > 500 ? `${event.content.slice(0, 500)}... (truncated)` : event.content;
-            process.stderr.write(`[result] ${event.isError ? "ERROR: " : ""}${preview}
-`);
-          }
-          break;
-        }
         case "finish":
           usage.add(event.usage);
           if (event.usage) {
@@ -308,26 +487,7 @@ async function printMode(loop, prompt, cwd, json, imagePaths, sessionStore) {
             });
           }
           break;
-        case "retry": {
-          if (!json) {
-            const wait = event.delayMs !== void 0 && event.delayMs >= 1e3 ? ` in ${Math.round(event.delayMs / 1e3)}s` : "";
-            process.stderr.write(
-              `
-[retry ${event.attempt}/${event.maxAttempts}${wait}] ${event.reason}
-`
-            );
-          }
-          break;
-        }
-        case "notice":
-          if (!json) process.stderr.write(`
-[notice] ${event.message}
-`);
-          break;
         case "error":
-          if (!json) process.stderr.write(`
-[error] ${formatStreamError(event.error)}
-`);
           exitCode = 1;
           break;
       }
@@ -377,6 +537,7 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
   "--clear-sessions [scope]",
   "delete stored sessions for the current directory ('all' deletes every session) and exit"
 ).action(async (opts) => {
+  installStdoutEpipeGuard();
   const cwd = process.cwd();
   if (opts.json && opts.print === void 0) {
     console.error(
@@ -384,18 +545,17 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
     );
     process.exit(1);
   }
+  const imageError = imageRequiresPrintError(opts.print, opts.image ?? []);
+  if (imageError) {
+    console.error(imageError);
+    process.exit(1);
+  }
   if (opts.resume !== void 0 && opts.continue) {
     console.error("Options --resume and --continue are mutually exclusive: pick one.");
     process.exit(1);
   }
   if (opts.resume === true) {
-    const entries = await listSessionEntries(cwd);
-    if (entries.length === 0) {
-      console.error("No sessions found for this directory.");
-    } else {
-      console.log(formatSessionEntries(entries));
-    }
-    process.exit(0);
+    process.exit(await reportResumeSessions(cwd));
   }
   if (opts.clearSessions !== void 0) {
     const scope = opts.clearSessions;
@@ -417,13 +577,6 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
     console.error(error instanceof Error ? error.message : String(error));
     process.exit(1);
   }
-  const modelName = opts.model ?? config.defaultModel;
-  if (!modelName) {
-    console.error(
-      "No model configured. Add one to ~/.star-cli/config.toml or pass --model.\nSee README.md for configuration examples."
-    );
-    process.exit(1);
-  }
   let sessionStore = null;
   let resumed = null;
   let resumeId = null;
@@ -447,14 +600,31 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
       console.error(`Session not found: ${resumeId}`);
       process.exit(1);
     }
-    const [meta, loaded] = await Promise.all([sessionStore.meta(), sessionStore.messages()]);
-    const messages = reconcileToolCalls(loaded);
+    const [meta, loaded] = await Promise.all([sessionStore.meta(), sessionStore.starMessages()]);
+    const messages = reconcileStarMessages(loaded);
     if (messages.length !== loaded.length) {
       await sessionStore.replaceMessages(messages);
     }
     resumed = { meta, messages };
-  } else if (!opts.print) {
+    setTodoSession(resumeId);
+  }
+  const { name: modelName, notice: modelNotice } = resolveStartupModel(
+    config,
+    opts.model ? void 0 : resumed?.meta.model
+  );
+  if (modelNotice) {
+    process.stderr.write(`${modelNotice}
+`);
+  }
+  if (!modelName) {
+    console.error(
+      "No model configured. Add one to ~/.star-cli/config.toml or pass --model.\nSee README.md for configuration examples."
+    );
+    process.exit(1);
+  }
+  if (!resumeId && !opts.print) {
     sessionStore = await SessionStore.create(cwd, modelName);
+    setTodoSession(sessionStore.id);
   }
   let loop;
   try {
@@ -465,7 +635,7 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
   }
   if (resumed) {
     await loop.loadMessages(resumed.messages);
-    await loadTodos(cwd);
+    await loadTodos(cwd, resumeId ?? void 0);
     if (sessionStore) {
       hydrateSnapshots(await loadSessionSnapshots(sessionStore.dir));
     }
@@ -481,14 +651,22 @@ program.name("star").description("Star CLI \u2014 an AI agent command-line inter
     );
     return;
   }
-  const { renderRepl } = await import("./repl-YA23CK5R.js");
+  const ttyError = interactiveRequiresTtyError({
+    stdinTTY: Boolean(process.stdin.isTTY),
+    stdoutTTY: Boolean(process.stdout.isTTY)
+  });
+  if (ttyError) {
+    console.error(ttyError);
+    process.exit(1);
+  }
+  const { renderRepl } = await import("./repl-GBVIW5QR.js");
   renderRepl(loop, {
     model: modelName,
     permissionMode: config.permissionMode,
     config,
     cwd,
     sessionStore,
-    initialMessages: resumed?.messages,
+    initialMessages: resumed ? toCoreMessages(resumed.messages) : void 0,
     initialUsage: resumed?.meta.usage
   });
 });