jinzd-ai-cli 0.4.216 → 0.4.218

package/README.md

@@ -33,7 +33,9 @@
 - **Semantic Code Search** *(v0.4.77+)* — `search_code` tool finds code by meaning, not name. Local sentence embeddings (multilingual MiniLM, 117 MB one-time download) score symbols by cosine similarity against natural-language queries in English or Chinese ("where are users authenticated", "哪里做了速率限制"). No API key, runs on CPU. Manage with `/index semantic-rebuild|semantic-clear`
 - **MCP Server Mode** *(v0.4.84+)* — `aicli mcp-serve` reverses ai-cli into an MCP server (JSON-RPC 2.0 over stdio), exposing its 28 built-in tools (incl. `find_symbol` / `search_code` / `run_tests`) to Claude Desktop / Cursor / any MCP client. Opt-in destructive-tool allow, `--tools` whitelist, `--cwd` override
 - **Session Sensitive-Data Redaction** *(v0.4.88+)* — unified redactor scrubs `password=` / `api_key` / bearer tokens / OpenAI-style keys from every message **before it hits disk**. Query text is redacted too, so secrets never reach embeddings or logs. `/security status` + `/security scan` to audit
-- **Human-like Long-Term Memory** *(v0.4.89+, B4)* — semantic index over every past chat session + `recall_memory` AI tool + `/memory rebuild|refresh|status|recall` commands. AI is prompted to auto-recall when it sees "last time" / "之前" / ambiguous references. Reuses the same MiniLM embedder as semantic code search
+- **Human-like Long-Term Memory** *(v0.4.89+, B4)* — semantic index over every past chat session + `recall_memory` AI tool + `/memory rebuild|refresh|status|recall` commands. AI is prompted to auto-recall when it sees "last time" / "之前" / ambiguous references. Reuses the same MiniLM embedder as semantic code search
+- **Governed Persistent Memory** *(v0.4.217+)* — `save_memory` and `/memory add` write auditable `memory.jsonl` entries with id/scope/source/sensitivity/approval/expiry; low-risk entries auto-approve, sensitive entries stay pending until `/memory approve <id>`, and project-scoped memories only inject inside the same project
+- **Package Plugin Ecosystem** *(v0.4.218+)* — install shareable .aicli-plugin/plugin.json packages with skills, hooks, commands, MCP servers, agents, and permission hints; only trusted+enabled plugins load, hooks still require hook trust, and MCP/tools remain under permission profiles/network policy
 - **Web UI Memory Panel** *(v0.4.90+, B4)* — new 🧠 Memory sidebar tab with semantic search across past chats; each hit has **➕ Inject** (quotes the snippet into the chat input as a markdown blockquote so you can review/edit before sending — no silent context injection) and **↗ Load** (jumps to source session). Bulk "Inject top 3" for recall bundles
 - **Streaming Tool Use** — Real-time streaming of AI reasoning and tool calls as they happen
 - **Sub-Agents** — Delegate complex subtasks to isolated child agents with independent tool loops
@@ -170,7 +172,7 @@ AI autonomously invokes these 27 tools during conversations:
 | `run_tests` | safe | Auto-detect and run project tests (JUnit XML parsing) |
 | `spawn_agent` | safe | Delegate subtasks to named isolated agents (`agent`: explorer/worker/reviewer/security/tester) |
 | `ask_user` | safe | Pause and ask the user a question |
-| `save_memory` | safe | Persist important info across sessions |
+| `save_memory` | safe | Persist governed memory across sessions; sensitive entries require `/memory approve <id>` |
 | `write_todos` | safe | Task breakdown with live progress rendering |
 | `save_last_response` | write | Save AI response to file |
 | `task_create` | write | Start a command running in the background |
@@ -217,7 +219,8 @@ AI autonomously invokes these 27 tools during conversations:
 | `/export` | Export session as Markdown or JSON |
 | `/profile` | View/edit your identity (AI knows who you are across all providers) |
 | `/config` | Open configuration wizard |
-| `/help` | Show all available commands |
+| /help | Show all available commands |
+| /plugin | Install, trust, enable, disable, and inspect package plugins |
 
 **Multi-line input**: Use `\` at end of line for continuation, or paste multi-line content directly (auto-detected and merged).
 

package/dist/{batch-C6HCXZIG.js → batch-7V7OTMUP.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   ConfigManager
-} from "./chunk-WAI3WPV2.js";
+} from "./chunk-P4VBLXKS.js";
 import "./chunk-TZQHYZKT.js";
-import "./chunk-7YWS3JLU.js";
+import "./chunk-NTCB7CMT.js";
 import {
   atomicWriteFileSync
 } from "./chunk-IW3Q7AE5.js";

package/dist/{chat-index-R2E27VXN.js → chat-index-PS274XM7.js}

@@ -5,7 +5,7 @@ import {
   getChatIndexStatus,
   loadChatIndex,
   searchChatMemory
-} from "./chunk-OQGVGPEK.js";
+} from "./chunk-VHY6NVMQ.js";
 import "./chunk-JV5N65KN.js";
 import "./chunk-6BUTA5VW.js";
 export {

package/dist/{chunk-TJ6GGN4B.js → chunk-5CA2TJ5F.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-7YWS3JLU.js";
+} from "./chunk-NTCB7CMT.js";
 
 // src/cli/ci-format.ts
 var DEFAULT_CI_THRESHOLDS = {

package/dist/{chunk-OLN7VUZA.js → chunk-C2Z42DI5.js}

@@ -6,7 +6,7 @@ import { platform } from "os";
 import chalk from "chalk";
 
 // src/core/constants.ts
-var VERSION = "0.4.216";
+var VERSION = "0.4.218";
 var APP_NAME = "ai-cli";
 var CONFIG_DIR_NAME = ".aicli";
 var CONFIG_FILE_NAME = "config.json";
@@ -17,6 +17,7 @@ var CUSTOM_COMMANDS_DIR_NAME = "commands";
 var CONTEXT_FILE_CANDIDATES = ["AICLI.override.md", "AGENTS.override.md", "AICLI.md", "CLAUDE.md", "AGENTS.md"];
 var CONTEXT_FILE_MAX_BYTES = 32 * 1024;
 var MEMORY_FILE_NAME = "memory.md";
+var MEMORY_STORE_FILE_NAME = "memory.jsonl";
 var MEMORY_MAX_CHARS = 1e4;
 var DEV_STATE_FILE_NAME = "dev-state.md";
 var DEFAULT_MAX_TOKENS = 8192;
@@ -552,6 +553,7 @@ export {
   CONTEXT_FILE_CANDIDATES,
   CONTEXT_FILE_MAX_BYTES,
   MEMORY_FILE_NAME,
+  MEMORY_STORE_FILE_NAME,
   MEMORY_MAX_CHARS,
   DEV_STATE_FILE_NAME,
   DEFAULT_MAX_TOKENS,