@miphamai/cli 0.38.0 → 0.39.1

package/src/security/url.ts

@@ -1,10 +1,4 @@
 import dns from 'node:dns'
-const { lookupSync } = dns as unknown as {
-  lookupSync: (
-    hostname: string,
-    options?: { all?: boolean },
-  ) => Array<{ address: string; family: number }>
-}
 
 // ── Protocol allow-list ──
 const ALLOWED_PROTOCOLS = ['http:', 'https:']
@@ -20,7 +14,7 @@ const IPV4_BLOCKED = [
 ]
 
 /** Validate a URL for SSRF safety. Returns null if safe, or an error string. */
-export function validateUrl(urlStr: string): string | null {
+export async function validateUrl(urlStr: string): Promise<string | null> {
   let parsed: URL
   try {
     parsed = new URL(urlStr)
@@ -41,18 +35,17 @@ export function validateUrl(urlStr: string): string | null {
     return `URL hostname "${hostname}" resolves to a blocked IP range (private / loopback / link-local).`
   }
 
-  // 3. Check for raw IPv6 loopback / private
-  // Strip brackets from IPv6 hostnames (Bun's URL parser keeps them)
+  // 3. Check for raw IPv6 loopback / private / IPv4-mapped
   const ipv6Host = hostname.startsWith('[') ? hostname.slice(1, -1) : hostname
   if (isBlockedIPv6(ipv6Host)) {
     return `URL hostname "${hostname}" resolves to a blocked IPv6 address.`
   }
 
-  // 4. DNS rebinding protection: resolve hostname and check resolved IPs
-  // Use the bracket-less version for DNS lookups
-  const dnsHostname = hostname.startsWith('[') ? hostname.slice(1, -1) : hostname
+  // 4. DNS rebinding protection: resolve hostname and check resolved IPs.
+  //    Uses async dns.promises.lookup — the old sync `dns.lookupSync` never existed,
+  //    so this check was previously dead code (always threw → swallowed → "safe").
   try {
-    const addresses = lookupSync(dnsHostname, { all: true })
+    const addresses = await dns.promises.lookup(ipv6Host, { all: true })
     for (const addr of addresses) {
       if (isBlockedIPv4(addr.address)) {
         return `URL hostname "${hostname}" resolved to ${addr.address} (blocked IP range).`
@@ -62,7 +55,7 @@ export function validateUrl(urlStr: string): string | null {
       }
     }
   } catch {
-    // DNS resolution failed — that's OK for validation; the fetch will also fail
+    // DNS resolution failed — the subsequent fetch will fail too; treat as safe.
   }
 
   return null // safe
@@ -92,5 +85,35 @@ function isBlockedIPv6(ip: string): boolean {
   if (ip.startsWith('fc') || ip.startsWith('fd')) return true
   // IPv6 unspecified
   if (ip === '::' || ip === '0:0:0:0:0:0:0:0') return true
+
+  // IPv4-mapped (::ffff:a.b.c.d / ::ffff:xxxx:xxxx) and IPv4-compatible (::a.b.c.d / ::xxxx:xxxx)
+  // — these can smuggle a private IPv4 past the literal-IPv6 checks above.
+  const embedded = extractEmbeddedIPv4(ip)
+  if (embedded && isBlockedIPv4(embedded)) return true
+
   return false
 }
+
+/** Extract the IPv4 address embedded in an IPv4-mapped / IPv4-compatible IPv6 address. */
+function extractEmbeddedIPv4(ip: string): string | null {
+  let rest: string | null = null
+  const mapped = ip.match(/^::ffff:(.+)$/i)
+  const compat = ip.match(/^::([0-9a-fA-F]{1,4}):([0-9a-fA-F]{1,4})$/)
+  if (mapped) {
+    rest = mapped[1]!
+  } else if (compat) {
+    rest = `${compat[1]}:${compat[2]}`
+  } else {
+    return null
+  }
+
+  // Dotted-quad form (::ffff:127.0.0.1)
+  if (/^\d+\.\d+\.\d+\.\d+$/.test(rest)) return rest
+
+  // Hex form (::ffff:7f00:1)
+  const hex = rest.match(/^([0-9a-fA-F]{1,4}):([0-9a-fA-F]{1,4})$/)
+  if (!hex) return null
+  const hi = parseInt(hex[1]!, 16)
+  const lo = parseInt(hex[2]!, 16)
+  return `${hi >> 8}.${hi & 0xff}.${lo >> 8}.${lo & 0xff}`
+}

package/src/shared/constants.ts

@@ -1,4 +1,28 @@
-import type { ProviderConfig } from './types'
+import type { ProviderConfig, ModelInfo } from './types'
+import miphamModelsSnapshot from './mipham-models.json' with { type: 'json' }
+
+// Build MiphamAI provider from synced model definitions.
+// Source of truth: Engine GET /v1/mipham-models → packages/shared/src/mipham-models.json
+// Run `bun run scripts/sync-mipham-models.ts` to update from Engine.
+const MIPHAM_MODELS: ModelInfo[] = miphamModelsSnapshot.models.map((m) => ({
+  id: m.id,
+  name: m.name,
+  providerId: m.providerId,
+  contextWindow: m.contextWindow,
+  maxOutput: m.maxOutput,
+  vision: m.vision,
+  status: m.status as 'active' | 'upcoming' | 'deprecated',
+}))
+
+const MIPHAM_PROVIDER: ProviderConfig = {
+  id: miphamModelsSnapshot.provider.id,
+  name: miphamModelsSnapshot.provider.name,
+  protocol: miphamModelsSnapshot.provider.protocol as 'openai-compatible',
+  baseUrl: miphamModelsSnapshot.provider.baseUrl,
+  apiKey: miphamModelsSnapshot.provider.apiKey,
+  models: MIPHAM_MODELS,
+  status: miphamModelsSnapshot.provider.status as 'active' | 'upcoming',
+}
 
 // Providers: alphabetical by id. Models: Lite/Flash → Text → Vision → Code → Pro/Think
 export const DEFAULT_PROVIDERS: ProviderConfig[] = [
@@ -325,56 +349,11 @@ export const DEFAULT_PROVIDERS: ProviderConfig[] = [
       },
     ],
   },
-  {
-    id: 'mipham',
-    name: 'MiphamAI',
-    protocol: 'openai-compatible',
-    baseUrl: 'http://127.0.0.1:8080/v1', // Engine 本地端点（om-V5 生产部署待定）
-    apiKey: '${MIPHAM_API_KEY}',
-    models: [
-      {
-        id: 'om-v5-flash',
-        name: 'OM V5 Flash',
-        providerId: 'mipham',
-        contextWindow: 1_000_000,
-        maxOutput: 128_000,
-        vision: false,
-        status: 'active',
-      },
-      {
-        id: 'om-v5-pro',
-        name: 'OM V5 Pro',
-        providerId: 'mipham',
-        contextWindow: 1_000_000,
-        maxOutput: 128_000,
-        vision: false,
-        status: 'active',
-      },
-      {
-        id: 'om-v5-visual',
-        name: 'OM V5 Visual',
-        providerId: 'mipham',
-        contextWindow: 200_000,
-        maxOutput: 32_000,
-        vision: true,
-        status: 'active',
-      },
-      {
-        id: 'om-v5-apex',
-        name: 'OM V5 Apex',
-        providerId: 'mipham',
-        contextWindow: 1_000_000,
-        maxOutput: 128_000,
-        vision: false,
-        status: 'active',
-      },
-    ],
-    status: 'active',
-  },
+  MIPHAM_PROVIDER,
   {
     id: 'ollama',
     name: 'Ollama (本地)',
-    protocol: 'openai-compatible' as const,
+    protocol: 'openai-compatible',
     baseUrl: 'http://localhost:11434/v1',
     apiKey: 'ollama-local',
     models: [], // 动态发现，初值为空
@@ -459,7 +438,19 @@ export const PROTOCOL_LABELS: Record<string, string> = {
   custom: 'Custom Protocol',
 }
 
-export const TOOL_CATEGORIES = ['file', 'exec', 'agent', 'network', 'system', 'artifact'] as const
+export const TOOL_CATEGORIES = [
+  'file',
+  'exec',
+  'agent',
+  'network',
+  'system',
+  'artifact',
+  'scheduling',
+] as const
+export const CONFIG_FILE_NAME = 'config.yml'
+export const MIPHAM_DIR = '.mipham'
+export const USER_CONFIG_DIR = '.mipham'
+export const MEMORY_DIR = 'memory'
 
 /** 预置 Ollama 模型 — 与 ollama list 结果合并去重后展示 */
 export const OLLAMA_PRESET_MODELS = [
@@ -473,11 +464,6 @@ export const OLLAMA_PRESET_MODELS = [
   { id: 'qwen3', source: '热门' },
 ] as const
 
-export const CONFIG_FILE_NAME = 'config.yml'
-export const MIPHAM_DIR = '.mipham'
-export const USER_CONFIG_DIR = '.mipham'
-export const MEMORY_DIR = 'memory'
-
 // ── Artifact Constants ──
 export const ARTIFACTS_DIR = 'artifacts'
 export const ARTIFACT_PORT = 9876

package/src/shared/mipham-models.json

@@ -0,0 +1,50 @@
+{
+  "_comment": "Mipham model definitions — synced from Engine GET /v1/mipham-models. Run 'bun run scripts/sync-mipham-models.ts' to update.",
+  "provider": {
+    "id": "mipham",
+    "name": "MiphamAI",
+    "protocol": "openai-compatible",
+    "baseUrl": "https://api.onemipham.com/v1",
+    "apiKey": "${MIPHAM_API_KEY}",
+    "status": "active"
+  },
+  "models": [
+    {
+      "id": "om-v5-flash",
+      "name": "OM V5 Flash",
+      "providerId": "mipham",
+      "contextWindow": 16384,
+      "maxOutput": 4096,
+      "vision": false,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-pro",
+      "name": "OM V5 Pro",
+      "providerId": "mipham",
+      "contextWindow": 131072,
+      "maxOutput": 16384,
+      "vision": false,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-visual",
+      "name": "OM V5 Visual",
+      "providerId": "mipham",
+      "contextWindow": 65536,
+      "maxOutput": 4096,
+      "vision": true,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-apex",
+      "name": "OM V5 Apex",
+      "providerId": "mipham",
+      "contextWindow": 200000,
+      "maxOutput": 32768,
+      "vision": false,
+      "status": "active"
+    }
+  ],
+  "synced_at": "2026-08-04T00:00:00Z"
+}

package/src/shared/types.ts

@@ -1,3 +1,6 @@
+// ── 类型唯一真源（vendored from packages/shared/src/types.ts）──
+// 为让 npm 包自包含（运行时无需 @mipham/shared workspace 依赖），
+// 此处从 packages/shared/src/types.ts 同步。改动共享类型时两边同步。
 // ── Provider Types ──
 export type ProtocolType = 'openai-compatible' | 'anthropic' | 'custom'
 
@@ -60,23 +63,6 @@ export type ToolPermission = 'auto' | 'ask' | 'bypass'
 export type ToolCategory =
   'file' | 'exec' | 'agent' | 'network' | 'system' | 'artifact' | 'scheduling'
 
-export interface ToolContext {
-  cwd: string
-  sessionId: string
-  provider: string
-  model: string
-  skillsLoader?: import('../skills/loader').SkillsLoader
-  registry?: import('../providers/registry').ProviderRegistry
-  toolRegistry?: Map<string, ToolDefinition>
-  artifactServer?: import('../artifacts/server').ArtifactServer
-  agentRegistry?: import('../agent/agent-registry').AgentRegistry
-  backgroundAgentRegistry?: import('../agent/background-registry').BackgroundAgentRegistry
-  permissionSystem?: import('../core/permission').PermissionSystem
-  ruleEngine?: import('../core/rule-engine').ExperienceRuleEngine
-  /** Files read this session — used by Write tool to check read-before-write */
-  readFiles?: Set<string>
-}
-
 // ── Artifact Types ──
 export interface ArtifactEntry {
   name: string
@@ -102,15 +88,6 @@ export interface ToolResult {
   error?: string
 }
 
-export interface ToolDefinition {
-  name: string
-  description: string
-  category: ToolCategory
-  permission: ToolPermission
-  parameters: Record<string, unknown>
-  execute: (params: Record<string, unknown>, ctx: ToolContext) => Promise<ToolResult>
-}
-
 // ── Task Notification Types ──
 export interface TaskNotification {
   taskId: string
@@ -207,29 +184,6 @@ export interface McpServerConfig {
   }
 }
 
-// ── Skill Types ──
-export interface SkillDefinition {
-  name: string
-  description: string
-  version: string
-  type: 'standard' | 'mipham'
-  tools?: ToolDefinition[]
-  hooks?: HookDefinition[]
-  prompts?: Record<string, string>
-  /** Frontmatter: 'fork' means execute in isolated subagent, undefined means inline */
-  context?: string
-  /** Model override for fork execution */
-  model?: string
-  /** Tool whitelist for fork mode */
-  allowedTools?: string[]
-  /** When true, the skill is NOT shown in system-reminder for AI auto-triggering */
-  disableModelInvocation?: boolean
-  /** When true, users can invoke this skill directly via /<name> */
-  userInvocable?: boolean
-  /** The markdown body content of the skill file (instructions for the AI to follow). */
-  body?: string
-}
-
 // ── Hook Types ──
 export type HookEvent =
   | 'PreToolUse'
@@ -482,3 +436,53 @@ export interface BackgroundAgentConfig {
   auto_worktree: boolean
   commit_coauthors: boolean
 }
+
+// ── CLI 内部类型（引用活服务，不可共享）──
+export interface ToolContext {
+  cwd: string
+  sessionId: string
+  provider: string
+  model: string
+  skillsLoader?: import('../skills/seam').Skills
+  registry?: import('../providers/registry').ProviderRegistry
+  toolRegistry?: Map<string, ToolDefinition>
+  artifactServer?: import('../artifacts/server').ArtifactServer
+  agentRegistry?: import('../agent/agent-registry').AgentRegistry
+  backgroundAgentRegistry?: import('../agent/background-registry').BackgroundAgentRegistry
+  permissionSystem?: import('../core/permission').PermissionSystem
+  ruleEngine?: import('../core/rule-engine').ExperienceRuleEngine
+  llm?: import('../providers/llm').Llm
+  /** Files read this session — used by Write tool to check read-before-write */
+  readFiles?: Set<string>
+}
+
+export interface ToolDefinition {
+  name: string
+  description: string
+  category: ToolCategory
+  permission: ToolPermission
+  parameters: Record<string, unknown>
+  execute: (params: Record<string, unknown>, ctx: ToolContext) => Promise<ToolResult>
+}
+
+export interface SkillDefinition {
+  name: string
+  description: string
+  version: string
+  type: 'standard' | 'mipham'
+  tools?: ToolDefinition[]
+  hooks?: HookDefinition[]
+  prompts?: Record<string, string>
+  /** Frontmatter: 'fork' means execute in isolated subagent, undefined means inline */
+  context?: string
+  /** Model override for fork execution */
+  model?: string
+  /** Tool whitelist for fork mode */
+  allowedTools?: string[]
+  /** When true, the skill is NOT shown in system-reminder for AI auto-triggering */
+  disableModelInvocation?: boolean
+  /** When true, users can invoke this skill directly via /<name> */
+  userInvocable?: boolean
+  /** The markdown body content of the skill file (instructions for the AI to follow). */
+  body?: string
+}

package/src/skills/fork-executor.ts

@@ -1,5 +1,6 @@
 import { SubAgent } from '../agent/sub-agent'
 import type { ProviderRegistry } from '../providers/registry'
+import type { Llm } from '../providers/llm'
 import type { ToolDefinition, SkillDefinition } from '../shared/index.ts'
 import type { AgentDefinition } from '../agent/types'
 import type { PermissionSystem } from '../core/permission'
@@ -20,6 +21,7 @@ export async function executeForkedSkill(
   registry: ProviderRegistry,
   toolRegistry: Map<string, ToolDefinition>,
   permissionSystem?: PermissionSystem,
+  llm?: Llm,
 ): Promise<string> {
   const agentDef: AgentDefinition = {
     name: `skill:${skill.name}`,
@@ -32,7 +34,7 @@ export async function executeForkedSkill(
     source: 'builtin',
   }
 
-  const sub = new SubAgent(registry, toolRegistry, permissionSystem)
+  const sub = new SubAgent(registry, toolRegistry, permissionSystem, undefined, undefined, llm)
   const prompt = args
     ? `Execute the "${skill.name}" skill with arguments: ${args}`
     : `Execute the "${skill.name}" skill.`

package/src/skills/loader.ts

@@ -3,6 +3,7 @@ import { join } from 'node:path'
 import { homedir } from 'node:os'
 import { parse as parseYaml } from 'yaml'
 import type { SkillDefinition } from '../shared/index.ts'
+import type { Skills } from './seam'
 import { sanitizeSkillDescription, sanitizeSkillBody, checkSkillShadow } from './sanitizer.js'
 
 interface FrontmatterResult {
@@ -21,7 +22,7 @@ function parseFrontmatter(raw: string): FrontmatterResult {
   }
 }
 
-export class SkillsLoader {
+export class SkillsLoader implements Skills {
   private skills = new Map<string, SkillDefinition>()
 
   loadBuiltin(basePath: string): void {

package/src/skills/seam.ts

@@ -0,0 +1,18 @@
+import type { Context, Disposer } from '../vajra'
+import type { SkillDefinition } from '../shared'
+
+/** 技能加载缝的 capability —— 读能力。换 provider = 换技能来源，engine 零 fork 跟随。 */
+export interface Skills {
+  get(name: string): SkillDefinition | undefined
+  list(): SkillDefinition[]
+  has(name: string): boolean
+  buildSystemReminder(maxTokens?: number): string
+}
+
+/** 缝键：ctx.skills。 */
+export const SKILLS_KEY = 'skills'
+
+/** 把一个 Skills（如 SkillsLoader 或测试替身）挂载为 ctx.skills。 */
+export function mountSkills(ctx: Context, skills: Skills): Disposer {
+  return ctx.provide(SKILLS_KEY, skills)
+}

package/src/tools/agent/agent.ts

@@ -82,6 +82,7 @@ export const agentTool: ToolDefinition = {
         ctx.permissionSystem,
         undefined,
         ctx.ruleEngine,
+        ctx.llm,
       )
       const result = await sub.execute(prompt, description, {
         type: agentType,

package/src/tools/agent/skill.ts

@@ -54,6 +54,7 @@ export const skillTool: ToolDefinition = {
             registry,
             ctx.toolRegistry || new Map(),
             ctx.permissionSystem,
+            ctx.llm,
           )
           // Return to AI as internal context
           return { success: true, content: `[Forked skill "${skillName}" result]:\n${result}` }