jinzd-ai-cli 0.4.216 → 0.4.217

package/README.md

@@ -33,7 +33,8 @@
 - **Semantic Code Search** *(v0.4.77+)* — `search_code` tool finds code by meaning, not name. Local sentence embeddings (multilingual MiniLM, 117 MB one-time download) score symbols by cosine similarity against natural-language queries in English or Chinese ("where are users authenticated", "哪里做了速率限制"). No API key, runs on CPU. Manage with `/index semantic-rebuild|semantic-clear`
 - **MCP Server Mode** *(v0.4.84+)* — `aicli mcp-serve` reverses ai-cli into an MCP server (JSON-RPC 2.0 over stdio), exposing its 28 built-in tools (incl. `find_symbol` / `search_code` / `run_tests`) to Claude Desktop / Cursor / any MCP client. Opt-in destructive-tool allow, `--tools` whitelist, `--cwd` override
 - **Session Sensitive-Data Redaction** *(v0.4.88+)* — unified redactor scrubs `password=` / `api_key` / bearer tokens / OpenAI-style keys from every message **before it hits disk**. Query text is redacted too, so secrets never reach embeddings or logs. `/security status` + `/security scan` to audit
-- **Human-like Long-Term Memory** *(v0.4.89+, B4)* — semantic index over every past chat session + `recall_memory` AI tool + `/memory rebuild|refresh|status|recall` commands. AI is prompted to auto-recall when it sees "last time" / "之前" / ambiguous references. Reuses the same MiniLM embedder as semantic code search
+- **Human-like Long-Term Memory** *(v0.4.89+, B4)* — semantic index over every past chat session + `recall_memory` AI tool + `/memory rebuild|refresh|status|recall` commands. AI is prompted to auto-recall when it sees "last time" / "之前" / ambiguous references. Reuses the same MiniLM embedder as semantic code search
+- **Governed Persistent Memory** *(v0.4.217+)* — `save_memory` and `/memory add` write auditable `memory.jsonl` entries with id/scope/source/sensitivity/approval/expiry; low-risk entries auto-approve, sensitive entries stay pending until `/memory approve <id>`, and project-scoped memories only inject inside the same project
 - **Web UI Memory Panel** *(v0.4.90+, B4)* — new 🧠 Memory sidebar tab with semantic search across past chats; each hit has **➕ Inject** (quotes the snippet into the chat input as a markdown blockquote so you can review/edit before sending — no silent context injection) and **↗ Load** (jumps to source session). Bulk "Inject top 3" for recall bundles
 - **Streaming Tool Use** — Real-time streaming of AI reasoning and tool calls as they happen
 - **Sub-Agents** — Delegate complex subtasks to isolated child agents with independent tool loops
@@ -170,7 +171,7 @@ AI autonomously invokes these 27 tools during conversations:
 | `run_tests` | safe | Auto-detect and run project tests (JUnit XML parsing) |
 | `spawn_agent` | safe | Delegate subtasks to named isolated agents (`agent`: explorer/worker/reviewer/security/tester) |
 | `ask_user` | safe | Pause and ask the user a question |
-| `save_memory` | safe | Persist important info across sessions |
+| `save_memory` | safe | Persist governed memory across sessions; sensitive entries require `/memory approve <id>` |
 | `write_todos` | safe | Task breakdown with live progress rendering |
 | `save_last_response` | write | Save AI response to file |
 | `task_create` | write | Start a command running in the background |

package/dist/{batch-C6HCXZIG.js → batch-YCOVKTXD.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-WAI3WPV2.js";
+} from "./chunk-WKOQ5CYC.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-7YWS3JLU.js";
+import "./chunk-XJGEQIYS.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chat-index-R2E27VXN.js → chat-index-PS274XM7.js}

@@ -5,7 +5,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-OQGVGPEK.js";
+} from "./chunk-VHY6NVMQ.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-6BUTA5VW.js";
 export {

package/dist/{chunk-6HLKCSB3.js → chunk-524WZOKS.js}

@@ -2,7 +2,7 @@
 import {
   CONFIG_DIR_NAME,
   VERSION
-} from "./chunk-7YWS3JLU.js";
+} from "./chunk-XJGEQIYS.js";
 
 // src/diagnostics/crash-log.ts
 import {

package/dist/{chunk-GY3C3C2Y.js → chunk-KOPUCJXM.js}

@@ -2,7 +2,7 @@
 import {
   evaluateCiGate,
   normalizeCiThresholds
-} from "./chunk-TJ6GGN4B.js";
+} from "./chunk-WZ3VKLF3.js";
 import {
   buildReviewPrompt,
   buildSecurityReviewPrompt,
@@ -13,10 +13,10 @@ import {
 } from "./chunk-QMXC327F.js";
 import {
   ConfigManager
-} from "./chunk-WAI3WPV2.js";
+} from "./chunk-WKOQ5CYC.js";
 import {
   VERSION
-} from "./chunk-7YWS3JLU.js";
+} from "./chunk-XJGEQIYS.js";
 
 // src/cli/ci.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-TCOC4AUI.js → chunk-MGBMNCHG.js}

@@ -5,10 +5,10 @@ import {
 } from "./chunk-T2NL5ZIA.js";
 import {
   runTestsTool
-} from "./chunk-VW7Y27WW.js";
+} from "./chunk-VTH7BLXK.js";
 import {
   runTool
-} from "./chunk-77HDCGTN.js";
+} from "./chunk-SNJAOXFT.js";
 import {
   getDangerLevel,
   isFileWriteTool,
@@ -23,10 +23,15 @@ import {
   CONFIG_DIR_NAME,
   DEFAULT_MAX_TOOL_OUTPUT_CHARS_CAP,
   MEMORY_FILE_NAME,
+  MEMORY_MAX_CHARS,
+  MEMORY_STORE_FILE_NAME,
   SUBAGENT_ALLOWED_TOOLS,
   SUBAGENT_DEFAULT_MAX_ROUNDS,
   SUBAGENT_MAX_ROUNDS_LIMIT
-} from "./chunk-7YWS3JLU.js";
+} from "./chunk-XJGEQIYS.js";
+import {
+  getGitRoot
+} from "./chunk-HOSJZMQS.js";
 import {
   fileCheckpoints
 } from "./chunk-4BKXL7SM.js";
@@ -34,6 +39,10 @@ import {
   loadChatIndex,
   searchChatMemory
 } from "./chunk-TB4W4Y4T.js";
+import {
+  DEFAULT_PATTERNS,
+  redactString
+} from "./chunk-SLSWPBK3.js";
 import {
   indexProject
 } from "./chunk-K3CF65QH.js";
@@ -2412,7 +2421,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(prompt);
     this.confirming = true;
-    return new Promise((resolve7) => {
+    return new Promise((resolve8) => {
       let completed = false;
       const cleanup = (result) => {
         if (completed) return;
@@ -2422,7 +2431,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve7(result);
+        resolve8(result);
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -2596,7 +2605,7 @@ var ToolExecutor = class {
     rl.resume();
     process.stdout.write(color("Proceed? [y/N] (type y + Enter to confirm) "));
     this.confirming = true;
-    return new Promise((resolve7) => {
+    return new Promise((resolve8) => {
       let completed = false;
       const cleanup = (answer) => {
         if (completed) return;
@@ -2606,7 +2615,7 @@ var ToolExecutor = class {
         rl.pause();
         rlAny.output = savedOutput;
         this.confirming = false;
-        resolve7(answer === "y");
+        resolve8(answer === "y");
       };
       const onLine = (line) => {
         const trimmed = line.trim();
@@ -3855,7 +3864,7 @@ var runInteractiveTool = {
       PYTHONDONTWRITEBYTECODE: "1"
     };
     const prefixWarnings = [argsTypeWarning, stdinTypeWarning].filter(Boolean).join("");
-    return new Promise((resolve7) => {
+    return new Promise((resolve8) => {
       const child = spawn2(executable, cmdArgs.map(String), {
         cwd: process.cwd(),
         env,
@@ -3888,22 +3897,22 @@ var runInteractiveTool = {
       setTimeout(writeNextLine, 400);
       const timer = setTimeout(() => {
         child.kill();
-        resolve7(`${prefixWarnings}[Timeout after ${timeout}ms]
+        resolve8(`${prefixWarnings}[Timeout after ${timeout}ms]
 ${buildOutput(stdout, stderr)}`);
       }, timeout);
       child.on("close", (code) => {
         clearTimeout(timer);
         const output = buildOutput(stdout, stderr);
         if (code !== 0 && code !== null) {
-          resolve7(`${prefixWarnings}Exit code ${code}:
+          resolve8(`${prefixWarnings}Exit code ${code}:
 ${output}`);
         } else {
-          resolve7(`${prefixWarnings}${output || "(no output)"}`);
+          resolve8(`${prefixWarnings}${output || "(no output)"}`);
         }
       });
       child.on("error", (err) => {
         clearTimeout(timer);
-        resolve7(
+        resolve8(
           `${prefixWarnings}Failed to start process "${executable}": ${err.message}
 Hint: On Windows, use the full path to the executable, e.g.:
   C:\\Users\\Jinzd\\anaconda3\\envs\\python312\\python.exe`
@@ -4571,26 +4580,236 @@ Any of these triggers means use save_last_response, NOT write_file:
 };
 
 // src/tools/builtin/save-memory.ts
-import { existsSync as existsSync11, readFileSync as readFileSync8, statSync as statSync6, mkdirSync as mkdirSync4 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import { homedir as homedir3 } from "os";
-function getMemoryFilePath() {
-  return join6(homedir3(), CONFIG_DIR_NAME, MEMORY_FILE_NAME);
+
+// src/memory/persistent-memory.ts
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync8 } from "fs";
+import { randomUUID, createHash as createHash2 } from "crypto";
+import { dirname as dirname4, join as join6, resolve as resolve6 } from "path";
+function memoryStorePath(configDir) {
+  return join6(configDir, MEMORY_STORE_FILE_NAME);
+}
+function memoryMarkdownPath(configDir) {
+  return join6(configDir, MEMORY_FILE_NAME);
+}
+function getProjectKey(cwd = process.cwd()) {
+  return resolve6(getGitRoot(cwd) ?? cwd);
+}
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function isValidScope(value) {
+  return value === "personal" || value === "project" || value === "session" || value === "team";
+}
+function isValidSensitivity(value) {
+  return value === "low" || value === "medium" || value === "high";
 }
-function formatTimestamp() {
-  const now = /* @__PURE__ */ new Date();
-  const pad = (n) => String(n).padStart(2, "0");
-  return `${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())} ${pad(now.getHours())}:${pad(now.getMinutes())}:${pad(now.getSeconds())}`;
+function normalizeEntry(value) {
+  if (!value || typeof value !== "object") return null;
+  const raw = value;
+  const content = typeof raw.content === "string" ? raw.content.trim() : "";
+  if (!content) return null;
+  const createdAt = typeof raw.createdAt === "string" ? raw.createdAt : nowIso();
+  return {
+    id: typeof raw.id === "string" && raw.id ? raw.id : randomUUID(),
+    content,
+    scope: isValidScope(raw.scope) ? raw.scope : "personal",
+    sourceSession: typeof raw.sourceSession === "string" && raw.sourceSession ? raw.sourceSession : void 0,
+    sourceProject: typeof raw.sourceProject === "string" && raw.sourceProject ? raw.sourceProject : void 0,
+    createdAt,
+    updatedAt: typeof raw.updatedAt === "string" ? raw.updatedAt : createdAt,
+    expiresAt: typeof raw.expiresAt === "string" && raw.expiresAt ? raw.expiresAt : void 0,
+    sensitivity: isValidSensitivity(raw.sensitivity) ? raw.sensitivity : "low",
+    approved: raw.approved === true,
+    redactedKinds: Array.isArray(raw.redactedKinds) ? raw.redactedKinds.filter((x) => typeof x === "string") : void 0
+  };
+}
+function legacyEntriesFromMarkdown(configDir) {
+  const file = memoryMarkdownPath(configDir);
+  if (!existsSync11(file)) return [];
+  const content = readFileSync8(file, "utf-8").trim();
+  if (!content) return [];
+  const parts = content.split(/\n(?=##\s+\d{4}-\d{2}-\d{2})/g);
+  const chunks = parts.length > 1 ? parts : [content];
+  return chunks.map((chunk, index) => {
+    const match = chunk.match(/^##\s+([^\n]+)\n([\s\S]*)$/);
+    const body = (match ? match[2] : chunk).trim();
+    const parsed = match ? Date.parse(match[1].replace(" ", "T")) : NaN;
+    const createdAt = Number.isFinite(parsed) ? new Date(parsed).toISOString() : nowIso();
+    const id = "legacy-" + createHash2("sha1").update(`${index}
+${chunk}`).digest("hex").slice(0, 12);
+    return normalizeEntry({ id, content: body, scope: "personal", createdAt, updatedAt: createdAt, sensitivity: "low", approved: true });
+  }).filter((entry) => Boolean(entry));
+}
+function loadMemoryEntries(configDir) {
+  const file = memoryStorePath(configDir);
+  if (!existsSync11(file)) return legacyEntriesFromMarkdown(configDir);
+  const text = readFileSync8(file, "utf-8").trim();
+  if (!text) return [];
+  const entries = [];
+  for (const line of text.split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    try {
+      const entry = normalizeEntry(JSON.parse(trimmed));
+      if (entry) entries.push(entry);
+    } catch {
+    }
+  }
+  return entries;
+}
+function saveMemoryEntries(configDir, entries) {
+  mkdirSync4(configDir, { recursive: true });
+  const jsonl = entries.map((entry) => JSON.stringify(entry)).join("\n");
+  atomicWriteFileSync(memoryStorePath(configDir), jsonl ? jsonl + "\n" : "");
+  syncLegacyMarkdown(configDir, entries);
+}
+function isMemoryExpired(entry, at = /* @__PURE__ */ new Date()) {
+  return Boolean(entry.expiresAt && Date.parse(entry.expiresAt) <= at.getTime());
+}
+function isMemoryVisibleInProject(entry, cwd = process.cwd()) {
+  if (entry.scope !== "project") return true;
+  return entry.sourceProject === getProjectKey(cwd);
+}
+function listMemoryEntries(configDir, options = {}) {
+  const cwd = options.cwd ?? process.cwd();
+  return loadMemoryEntries(configDir).filter((entry) => options.includeRejected || entry.approved).filter((entry) => options.includeExpired || !isMemoryExpired(entry)).filter((entry) => isMemoryVisibleInProject(entry, cwd));
+}
+function addMemoryEntry(configDir, content, options = {}) {
+  const original = content.trim();
+  if (!original) throw new Error("memory content is required");
+  const redact = options.redact ?? true;
+  const redacted = redact ? redactString(original, { enabled: true, patterns: options.patterns ?? DEFAULT_PATTERNS, customRegexes: options.customPatterns }) : { redacted: original, hits: [] };
+  const sensitivity = options.sensitivity ?? (redacted.hits.length > 0 ? "high" : "low");
+  const approved = options.approved ?? (sensitivity === "low" && redacted.hits.length === 0);
+  const scope = options.scope ?? "personal";
+  const timestamp = nowIso();
+  const entry = {
+    id: randomUUID(),
+    content: redacted.redacted.trim(),
+    scope,
+    sourceSession: options.sourceSession,
+    sourceProject: scope === "project" ? getProjectKey(options.cwd) : void 0,
+    createdAt: timestamp,
+    updatedAt: timestamp,
+    expiresAt: options.expiresAt,
+    sensitivity,
+    approved,
+    redactedKinds: [...new Set(redacted.hits.map((hit) => hit.kind))]
+  };
+  const entries = loadMemoryEntries(configDir);
+  entries.push(entry);
+  saveMemoryEntries(configDir, entries);
+  return entry;
+}
+function updateMemoryApproval(configDir, idPrefix, approved) {
+  const entries = loadMemoryEntries(configDir);
+  const entry = findUnique(entries, idPrefix);
+  entry.approved = approved;
+  entry.updatedAt = nowIso();
+  saveMemoryEntries(configDir, entries);
+  return entry;
+}
+function deleteMemoryEntry(configDir, idPrefix) {
+  const entries = loadMemoryEntries(configDir);
+  const entry = findUnique(entries, idPrefix);
+  saveMemoryEntries(configDir, entries.filter((candidate) => candidate.id !== entry.id));
+  return entry;
+}
+function expireMemoryEntry(configDir, idPrefix, expiresAt = nowIso()) {
+  const entries = loadMemoryEntries(configDir);
+  const entry = findUnique(entries, idPrefix);
+  entry.expiresAt = expiresAt;
+  entry.updatedAt = nowIso();
+  saveMemoryEntries(configDir, entries);
+  return entry;
+}
+function exportMemoryEntries(configDir, cwd = process.cwd()) {
+  return JSON.stringify(listMemoryEntries(configDir, { cwd, includeExpired: true, includeRejected: true }), null, 2);
+}
+function findUnique(entries, idPrefix) {
+  const matches = entries.filter((entry) => entry.id.startsWith(idPrefix));
+  if (matches.length === 0) throw new Error(`memory id not found: ${idPrefix}`);
+  if (matches.length > 1) throw new Error(`memory id is ambiguous: ${idPrefix}`);
+  return matches[0];
+}
+function syncLegacyMarkdown(configDir, entries = loadMemoryEntries(configDir)) {
+  mkdirSync4(dirname4(memoryMarkdownPath(configDir)), { recursive: true });
+  const active = entries.filter((entry) => entry.approved && !isMemoryExpired(entry));
+  const markdown = active.map((entry) => {
+    const date = entry.createdAt.replace("T", " ").slice(0, 19);
+    const source = [
+      `id:${entry.id.slice(0, 8)}`,
+      `scope:${entry.scope}`,
+      entry.sourceSession ? `session:${entry.sourceSession.slice(0, 8)}` : "",
+      entry.sourceProject ? `project:${entry.sourceProject}` : "",
+      `sensitivity:${entry.sensitivity}`
+    ].filter(Boolean).join(" \xB7 ");
+    return `## ${date}
+<!-- ${source} -->
+${entry.content}
+`;
+  }).join("\n");
+  atomicWriteFileSync(memoryMarkdownPath(configDir), markdown);
+}
+function formatMemoryForPrompt(configDir, cwd = process.cwd()) {
+  const entries = listMemoryEntries(configDir, { cwd }).filter((entry) => entry.approved && !isMemoryExpired(entry));
+  if (entries.length === 0) return null;
+  let content = entries.map((entry) => {
+    const source = [
+      `id ${entry.id.slice(0, 8)}`,
+      `scope ${entry.scope}`,
+      entry.sourceSession ? `source session ${entry.sourceSession.slice(0, 8)}` : "source manual/tool",
+      entry.sourceProject ? `project ${entry.sourceProject}` : "",
+      `sensitivity ${entry.sensitivity}`
+    ].filter(Boolean).join(" \xB7 ");
+    return `## ${entry.createdAt.replace("T", " ").slice(0, 19)}
+Source: ${source}
+${entry.content}`;
+  }).join("\n\n");
+  if (content.length > MEMORY_MAX_CHARS) {
+    content = content.slice(-MEMORY_MAX_CHARS);
+    const firstEntry = content.indexOf("\n## ");
+    if (firstEntry !== -1) content = content.slice(firstEntry + 1);
+  }
+  return { content, entryCount: entries.length };
+}
+
+// src/tools/builtin/save-memory.ts
+function getConfigDir() {
+  return join7(homedir3(), CONFIG_DIR_NAME);
+}
+function parseScope(value) {
+  return value === "personal" || value === "project" || value === "session" || value === "team" ? value : void 0;
+}
+function parseSensitivity(value) {
+  return value === "low" || value === "medium" || value === "high" ? value : void 0;
 }
 var saveMemoryTool = {
   definition: {
     name: "save_memory",
-    description: "Save important information to persistent memory that survives across sessions. Use this to remember: user preferences, coding style, project architecture decisions, recurring patterns, key findings, or any knowledge worth preserving. Keep each memory entry concise (1-3 sentences). The content will be automatically timestamped.",
+    description: "Save important information to governed persistent memory. Low-risk memories are approved automatically; sensitive entries are stored as pending and require /memory approve <id>. Use concise entries for user preferences, project decisions, recurring patterns, and key findings.",
     parameters: {
       content: {
         type: "string",
         description: "The information to save to persistent memory. Keep it concise and actionable.",
         required: true
+      },
+      scope: {
+        type: "string",
+        description: "Memory scope: personal, project, session, or team. Defaults to personal. Project memories are only injected in the same project.",
+        required: false
+      },
+      sensitivity: {
+        type: "string",
+        description: "Sensitivity: low, medium, or high. Low-risk entries may be auto-approved; medium/high remain pending unless explicitly approved.",
+        required: false
+      },
+      expiresAt: {
+        type: "string",
+        description: "Optional ISO timestamp after which this memory should no longer be injected.",
+        required: false
       }
     },
     dangerous: false
@@ -4598,20 +4817,16 @@ var saveMemoryTool = {
   async execute(args) {
     const content = String(args["content"] ?? "").trim();
     if (!content) throw new ToolError("save_memory", "content is required");
-    const memoryPath = getMemoryFilePath();
-    const configDir = join6(homedir3(), CONFIG_DIR_NAME);
-    if (!existsSync11(configDir)) {
-      mkdirSync4(configDir, { recursive: true });
-    }
-    const timestamp = formatTimestamp();
-    const entry = `
-## ${timestamp}
-${content}
-`;
-    const previous = existsSync11(memoryPath) ? readFileSync8(memoryPath, "utf-8") : "";
-    atomicWriteFileSync(memoryPath, previous + entry);
-    const byteSize = statSync6(memoryPath).size;
-    return `Memory saved successfully. File size: ${byteSize} bytes in ${MEMORY_FILE_NAME}`;
+    const entry = addMemoryEntry(getConfigDir(), content, {
+      scope: parseScope(args["scope"]) ?? "personal",
+      sensitivity: parseSensitivity(args["sensitivity"]),
+      expiresAt: typeof args["expiresAt"] === "string" ? args["expiresAt"] : void 0,
+      cwd: process.cwd(),
+      redact: true
+    });
+    const status = entry.approved ? "approved and active" : "pending approval";
+    const redacted = entry.redactedKinds?.length ? ` Redacted: ${entry.redactedKinds.join(", ")}.` : "";
+    return `Memory saved (${status}). id=${entry.id.slice(0, 8)} scope=${entry.scope} sensitivity=${entry.sensitivity}.${redacted}`;
   }
 };
 
@@ -4655,7 +4870,7 @@ function promptUser(rl, question) {
   console.log();
   console.log(chalk4.cyan("\u2753 ") + chalk4.bold(question));
   process.stdout.write(chalk4.cyan("> "));
-  return new Promise((resolve7) => {
+  return new Promise((resolve8) => {
     let completed = false;
     const cleanup = (answer) => {
       if (completed) return;
@@ -4665,7 +4880,7 @@ function promptUser(rl, question) {
       rl.pause();
       rlAny.output = savedOutput;
       askUserContext.prompting = false;
-      resolve7(answer);
+      resolve8(answer);
     };
     const onLine = (line) => {
       cleanup(line);
@@ -4898,7 +5113,7 @@ function formatResults2(query, data, _requested) {
 
 // src/agents/agent-config.ts
 import { existsSync as existsSync12, readdirSync as readdirSync6, readFileSync as readFileSync9 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import { homedir as homedir4 } from "os";
 var READ_ONLY_TOOLS2 = /* @__PURE__ */ new Set([
   "read_file",
@@ -4997,7 +5212,7 @@ function loadAgentDir(dir, source) {
   const out = [];
   for (const file of readdirSync6(dir)) {
     if (!file.endsWith(".json")) continue;
-    const path3 = join7(dir, file);
+    const path3 = join8(dir, file);
     try {
       const parsed = JSON.parse(readFileSync9(path3, "utf-8"));
       const cfg = parseAgentConfig(parsed, source, path3);
@@ -5009,8 +5224,8 @@ function loadAgentDir(dir, source) {
 }
 function getAgentDirs(configDir, cwd = process.cwd()) {
   return {
-    user: join7(configDir ?? join7(homedir4(), CONFIG_DIR_NAME), "agents"),
-    project: join7(cwd, CONFIG_DIR_NAME, "agents")
+    user: join8(configDir ?? join8(homedir4(), CONFIG_DIR_NAME), "agents"),
+    project: join8(cwd, CONFIG_DIR_NAME, "agents")
   };
 }
 function listAgentConfigs(configDir, cwd = process.cwd()) {
@@ -5052,7 +5267,7 @@ var nextId = 1;
 var preferredAgentName = "worker";
 var runs = [];
 var MAX_RUNS = 50;
-function nowIso() {
+function nowIso2() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 function startAgentRun(input) {
@@ -5061,7 +5276,7 @@ function startAgentRun(input) {
     agentName: input.agentName,
     task: input.task,
     status: "running",
-    startedAt: nowIso(),
+    startedAt: nowIso2(),
     toolNames: [],
     agentIndex: input.agentIndex,
     stopRequested: false
@@ -5079,7 +5294,7 @@ function finishAgentRun(runId, status, summary, error) {
   const run = runs.find((r) => r.id === runId);
   if (!run) return;
   run.status = status;
-  run.finishedAt = nowIso();
+  run.finishedAt = nowIso2();
   if (summary) run.summary = summary;
   if (error) run.error = error;
 }
@@ -5505,7 +5720,7 @@ var spawnAgentTool = {
 
 // src/tools/builtin/task-manager.ts
 import { spawn as spawn3 } from "child_process";
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 import { platform as platform4 } from "os";
 var MAX_OUTPUT_CHARS = 1e4;
 var MAX_OUTPUT_BYTES = 64 * 1024;
@@ -5538,7 +5753,7 @@ function createTask(command, description) {
       }
     }
   }
-  const id = randomUUID().slice(0, 8);
+  const id = randomUUID2().slice(0, 8);
   const { shell, args } = shellInvocation(command);
   const proc = spawn3(shell, args, {
     stdio: ["ignore", "pipe", "pipe"],
@@ -5721,13 +5936,13 @@ var taskStopTool = {
 // src/tools/builtin/git-tools.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync13 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 function assertGitRepo(cwd) {
   let dir = cwd;
   const root = dir.split(/[\\/]/)[0] + (dir.includes("\\") ? "\\" : "/");
   while (dir && dir !== root) {
-    if (existsSync13(join8(dir, ".git"))) return;
-    const parent = join8(dir, "..");
+    if (existsSync13(join9(dir, ".git"))) return;
+    const parent = join9(dir, "..");
     if (parent === dir) break;
     dir = parent;
   }
@@ -5994,7 +6209,7 @@ ${commitOutput.trim()}`;
 // src/tools/builtin/notebook-edit.ts
 import { readFileSync as readFileSync10, existsSync as existsSync14 } from "fs";
 import { writeFile } from "fs/promises";
-import { resolve as resolve6, extname as extname2 } from "path";
+import { resolve as resolve7, extname as extname2 } from "path";
 var notebookEditTool = {
   definition: {
     name: "notebook_edit",
@@ -6043,7 +6258,7 @@ var notebookEditTool = {
     if (!Number.isInteger(cellIndexRaw) || cellIndexRaw < 1) {
       throw new ToolError("notebook_edit", "cell_index must be a positive integer (1-based)");
     }
-    const absPath = resolve6(filePath);
+    const absPath = resolve7(filePath);
     if (extname2(absPath).toLowerCase() !== ".ipynb") {
       throw new ToolError("notebook_edit", "path must point to a .ipynb file");
     }
@@ -6468,7 +6683,7 @@ function estimateToolDefinitionTokens(def) {
 // src/tools/registry.ts
 import { pathToFileURL } from "url";
 import { existsSync as existsSync15, mkdirSync as mkdirSync5, readdirSync as readdirSync7 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 var ToolRegistry = class {
   tools = /* @__PURE__ */ new Map();
   pluginToolNames = /* @__PURE__ */ new Set();
@@ -6655,12 +6870,12 @@ var ToolRegistry = class {
     process.stderr.write(
       `
 [plugins] \u26A0 Loading ${files.length} plugin(s) with FULL system privileges:
-` + files.map((f) => `  + ${join9(pluginsDir, f)}`).join("\n") + "\n\n"
+` + files.map((f) => `  + ${join10(pluginsDir, f)}`).join("\n") + "\n\n"
     );
     let loaded = 0;
     for (const file of files) {
       try {
-        const fileUrl = pathToFileURL(join9(pluginsDir, file)).href;
+        const fileUrl = pathToFileURL(join10(pluginsDir, file)).href;
         const mod = await import(fileUrl);
         const tool = mod.tool ?? mod.default?.tool ?? mod.default;
         if (!tool || typeof tool.execute !== "function" || !tool.definition?.name) {
@@ -6702,6 +6917,16 @@ export {
   getRecentlyDeniedAutoActions,
   clearRecentlyDeniedAutoActions,
   defaultActionClassifier,
+  memoryStorePath,
+  memoryMarkdownPath,
+  isMemoryExpired,
+  listMemoryEntries,
+  addMemoryEntry,
+  updateMemoryApproval,
+  deleteMemoryEntry,
+  expireMemoryEntry,
+  exportMemoryEntries,
+  formatMemoryForPrompt,
   isInterrupted,
   requestInterrupt,
   resetInterrupt,

package/dist/{chunk-PNTLA3MN.js → chunk-OUAZOE5U.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   truncateForPersist
-} from "./chunk-TCOC4AUI.js";
+} from "./chunk-MGBMNCHG.js";
 import {
   APP_NAME,
   CONFIG_DIR_NAME,
@@ -13,7 +13,7 @@ import {
   MCP_PROTOCOL_VERSION,
   MCP_TOOL_PREFIX,
   VERSION
-} from "./chunk-7YWS3JLU.js";
+} from "./chunk-XJGEQIYS.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chunk-OLN7VUZA.js → chunk-QAYOI57M.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.216";
+var VERSION = "0.4.217";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";
@@ -17,6 +17,7 @@ var CUSTOM_COMMANDS_DIR_NAME = "commands";
 var CONTEXT_FILE_CANDIDATES = ["AICLI.override.md", "AGENTS.override.md", "AICLI.md", "CLAUDE.md", "AGENTS.md"];
 var CONTEXT_FILE_MAX_BYTES = 32 * 1024;
 var MEMORY_FILE_NAME = "memory.md";
+var MEMORY_STORE_FILE_NAME = "memory.jsonl";
 var MEMORY_MAX_CHARS = 1e4;
 var DEV_STATE_FILE_NAME = "dev-state.md";
 var DEFAULT_MAX_TOKENS = 8192;
@@ -552,6 +553,7 @@ export {
   CONTEXT_FILE_CANDIDATES,
   CONTEXT_FILE_MAX_BYTES,
   MEMORY_FILE_NAME,
+  MEMORY_STORE_FILE_NAME,
   MEMORY_MAX_CHARS,
   DEV_STATE_FILE_NAME,
   DEFAULT_MAX_TOKENS,