@miphamai/cli 0.39.0 → 0.39.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.39.0",
+  "version": "0.39.1",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",

package/src/shared/constants.ts

@@ -1,4 +1,472 @@
-// ── 常量唯一真源：@mipham/shared/constants ──
-// DEFAULT_PROVIDERS / PROTOCOL_LABELS / TOOL_CATEGORIES / OLLAMA_PRESET_MODELS
-// 及路径（.mipham/memory）/Artifact 常量均在此包，CLI 直接 re-export。
-export * from '@mipham/shared/constants'
+import type { ProviderConfig, ModelInfo } from './types'
+import miphamModelsSnapshot from './mipham-models.json' with { type: 'json' }
+
+// Build MiphamAI provider from synced model definitions.
+// Source of truth: Engine GET /v1/mipham-models → packages/shared/src/mipham-models.json
+// Run `bun run scripts/sync-mipham-models.ts` to update from Engine.
+const MIPHAM_MODELS: ModelInfo[] = miphamModelsSnapshot.models.map((m) => ({
+  id: m.id,
+  name: m.name,
+  providerId: m.providerId,
+  contextWindow: m.contextWindow,
+  maxOutput: m.maxOutput,
+  vision: m.vision,
+  status: m.status as 'active' | 'upcoming' | 'deprecated',
+}))
+
+const MIPHAM_PROVIDER: ProviderConfig = {
+  id: miphamModelsSnapshot.provider.id,
+  name: miphamModelsSnapshot.provider.name,
+  protocol: miphamModelsSnapshot.provider.protocol as 'openai-compatible',
+  baseUrl: miphamModelsSnapshot.provider.baseUrl,
+  apiKey: miphamModelsSnapshot.provider.apiKey,
+  models: MIPHAM_MODELS,
+  status: miphamModelsSnapshot.provider.status as 'active' | 'upcoming',
+}
+
+// Providers: alphabetical by id. Models: Lite/Flash → Text → Vision → Code → Pro/Think
+export const DEFAULT_PROVIDERS: ProviderConfig[] = [
+  {
+    id: 'anthropic',
+    name: 'Anthropic Claude',
+    protocol: 'anthropic',
+    apiKey: '${ANTHROPIC_API_KEY}',
+    models: [
+      {
+        id: 'claude-haiku-4-5-20251001',
+        name: 'Claude Haiku 4.5',
+        providerId: 'anthropic',
+        contextWindow: 200_000,
+        maxOutput: 32_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'claude-sonnet-4-6',
+        name: 'Claude Sonnet 4.6',
+        providerId: 'anthropic',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'claude-opus-4-8',
+        name: 'Claude Opus 4.8',
+        providerId: 'anthropic',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'claude-fable-5',
+        name: 'Claude Fable 5',
+        providerId: 'anthropic',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'claude-sonnet-5',
+        name: 'Claude Sonnet 5',
+        providerId: 'anthropic',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'claude-opus-5',
+        name: 'Claude Opus 5',
+        providerId: 'anthropic',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'deepseek',
+    name: 'DeepSeek',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://api.deepseek.com/v1',
+    apiKey: '${DEEPSEEK_API_KEY}',
+    models: [
+      {
+        id: 'deepseek-v4-flash',
+        name: 'DeepSeek V4 Flash',
+        providerId: 'deepseek',
+        contextWindow: 1_000_000,
+        maxOutput: 384_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'deepseek-v4-pro',
+        name: 'DeepSeek V4 Pro',
+        providerId: 'deepseek',
+        contextWindow: 1_000_000,
+        maxOutput: 384_000,
+        vision: false,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'google',
+    name: 'Google Gemini',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://generativelanguage.googleapis.com/v1beta/openai',
+    apiKey: '${GEMINI_API_KEY}',
+    models: [
+      {
+        id: 'gemini-3.0-flash',
+        name: 'Gemini 3.0 Flash',
+        providerId: 'google',
+        contextWindow: 1_000_000,
+        maxOutput: 64_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'gemini-3.0-pro',
+        name: 'Gemini 3.0 Pro',
+        providerId: 'google',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'gemini-2.5-pro',
+        name: 'Gemini 2.5 Pro',
+        providerId: 'google',
+        contextWindow: 1_000_000,
+        maxOutput: 64_000,
+        vision: true,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'doubao',
+    name: '豆包 (字节跳动)',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://ark.cn-beijing.volces.com/api/v3',
+    apiKey: '${DOUBAO_API_KEY}',
+    models: [
+      {
+        id: 'doubao-seed-1.6-flash',
+        name: '豆包 Seed 1.6 Flash',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'doubao-seed-2.0-mini',
+        name: '豆包 Seed 2.0 Mini',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'doubao-seed-2.0-lite',
+        name: '豆包 Seed 2.0 Lite',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'doubao-seed-1.6',
+        name: '豆包 Seed 1.6',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'doubao-seed-2.0-pro',
+        name: '豆包 Seed 2.0 Pro',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'doubao-seed-2.0-code',
+        name: '豆包 Seed 2.0 Code',
+        providerId: 'doubao',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'hunyuan',
+    name: '腾讯混元',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://api.hunyuan.cloud.tencent.com/v1',
+    apiKey: '${HUNYUAN_API_KEY}',
+    models: [
+      {
+        id: 'hunyuan-lite',
+        name: '混元 Lite (免费)',
+        providerId: 'hunyuan',
+        contextWindow: 256_000,
+        maxOutput: 6_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-turbos-latest',
+        name: '混元 TurboS',
+        providerId: 'hunyuan',
+        contextWindow: 32_000,
+        maxOutput: 16_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-2.0-instruct-20251111',
+        name: '混元 2.0 Instruct',
+        providerId: 'hunyuan',
+        contextWindow: 144_000,
+        maxOutput: 16_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-t1-vision-20250916',
+        name: '混元 T1 Vision',
+        providerId: 'hunyuan',
+        contextWindow: 32_000,
+        maxOutput: 64_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-a13b',
+        name: '混元 A13B',
+        providerId: 'hunyuan',
+        contextWindow: 224_000,
+        maxOutput: 32_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-2.0-thinking-20251109',
+        name: '混元 2.0 Think',
+        providerId: 'hunyuan',
+        contextWindow: 192_000,
+        maxOutput: 64_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hunyuan-t1-latest',
+        name: '混元 T1 (推理)',
+        providerId: 'hunyuan',
+        contextWindow: 32_000,
+        maxOutput: 64_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'hy3-preview',
+        name: '混元 Hy3 Preview',
+        providerId: 'hunyuan',
+        contextWindow: 256_000,
+        maxOutput: 128_000,
+        vision: false,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'kimi',
+    name: 'Kimi (月之暗面)',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://api.moonshot.cn/v1',
+    apiKey: '${KIMI_API_KEY}',
+    models: [
+      {
+        id: 'kimi-latest',
+        name: 'Kimi Latest',
+        providerId: 'kimi',
+        contextWindow: 128_000,
+        maxOutput: 16_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'kimi-k3',
+        name: 'Kimi K3',
+        providerId: 'kimi',
+        contextWindow: 1_000_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'moonshot-v1-8k',
+        name: 'Moonshot v1 8K',
+        providerId: 'kimi',
+        contextWindow: 8_000,
+        maxOutput: 4_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'moonshot-v1-32k',
+        name: 'Moonshot v1 32K',
+        providerId: 'kimi',
+        contextWindow: 32_000,
+        maxOutput: 4_000,
+        vision: false,
+        status: 'active',
+      },
+      {
+        id: 'moonshot-v1-128k',
+        name: 'Moonshot v1 128K',
+        providerId: 'kimi',
+        contextWindow: 128_000,
+        maxOutput: 4_000,
+        vision: false,
+        status: 'active',
+      },
+    ],
+  },
+  MIPHAM_PROVIDER,
+  {
+    id: 'ollama',
+    name: 'Ollama (本地)',
+    protocol: 'openai-compatible',
+    baseUrl: 'http://localhost:11434/v1',
+    apiKey: 'ollama-local',
+    models: [], // 动态发现，初值为空
+  },
+  {
+    id: 'openai',
+    name: 'OpenAI',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://api.openai.com/v1',
+    apiKey: '${OPENAI_API_KEY}',
+    models: [
+      {
+        id: 'gpt-5.4-mini',
+        name: 'GPT-5.4 Mini',
+        providerId: 'openai',
+        contextWindow: 400_000,
+        maxOutput: 32_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'gpt-5.4',
+        name: 'GPT-5.4',
+        providerId: 'openai',
+        contextWindow: 1_050_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'gpt-5.5',
+        name: 'GPT-5.5',
+        providerId: 'openai',
+        contextWindow: 1_050_000,
+        maxOutput: 128_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'gpt-5.3-codex',
+        name: 'GPT-5.3 Codex',
+        providerId: 'openai',
+        contextWindow: 400_000,
+        maxOutput: 64_000,
+        vision: false,
+        status: 'active',
+      },
+    ],
+  },
+  {
+    id: 'qwen',
+    name: '通义千问',
+    protocol: 'openai-compatible',
+    baseUrl: 'https://dashscope.aliyuncs.com/compatible-mode/v1',
+    apiKey: '${QWEN_API_KEY}',
+    models: [
+      {
+        id: 'qwen-plus',
+        name: 'Qwen Plus',
+        providerId: 'qwen',
+        contextWindow: 128_000,
+        maxOutput: 32_000,
+        vision: true,
+        status: 'active',
+      },
+      {
+        id: 'qwen-max',
+        name: 'Qwen Max',
+        providerId: 'qwen',
+        contextWindow: 128_000,
+        maxOutput: 32_000,
+        vision: true,
+        status: 'active',
+      },
+    ],
+  },
+]
+
+export const PROTOCOL_LABELS: Record<string, string> = {
+  'openai-compatible': 'OpenAI Compatible',
+  anthropic: 'Anthropic',
+  custom: 'Custom Protocol',
+}
+
+export const TOOL_CATEGORIES = [
+  'file',
+  'exec',
+  'agent',
+  'network',
+  'system',
+  'artifact',
+  'scheduling',
+] as const
+export const CONFIG_FILE_NAME = 'config.yml'
+export const MIPHAM_DIR = '.mipham'
+export const USER_CONFIG_DIR = '.mipham'
+export const MEMORY_DIR = 'memory'
+
+/** 预置 Ollama 模型 — 与 ollama list 结果合并去重后展示 */
+export const OLLAMA_PRESET_MODELS = [
+  { id: 'om-v5-flash', source: 'MiphamAI' },
+  { id: 'om-v5-pro', source: 'MiphamAI' },
+  { id: 'om-v5-visual', source: 'MiphamAI' },
+  { id: 'om-v5-apex', source: 'MiphamAI' },
+  { id: 'deepseek-r1:70b', source: '热门' },
+  { id: 'deepseek-v3', source: '热门' },
+  { id: 'qwen2.5:72b', source: '热门' },
+  { id: 'qwen3', source: '热门' },
+] as const
+
+// ── Artifact Constants ──
+export const ARTIFACTS_DIR = 'artifacts'
+export const ARTIFACT_PORT = 9876
+export const ARTIFACT_MAX_PORT_TRIES = 10
+export const ARTIFACT_MAX_SIZE = 5 * 1024 * 1024 // 5MB
+export const ARTIFACT_ALLOWED_EXTENSIONS = ['.html', '.svg']

package/src/shared/mipham-models.json

@@ -0,0 +1,50 @@
+{
+  "_comment": "Mipham model definitions — synced from Engine GET /v1/mipham-models. Run 'bun run scripts/sync-mipham-models.ts' to update.",
+  "provider": {
+    "id": "mipham",
+    "name": "MiphamAI",
+    "protocol": "openai-compatible",
+    "baseUrl": "https://api.onemipham.com/v1",
+    "apiKey": "${MIPHAM_API_KEY}",
+    "status": "active"
+  },
+  "models": [
+    {
+      "id": "om-v5-flash",
+      "name": "OM V5 Flash",
+      "providerId": "mipham",
+      "contextWindow": 16384,
+      "maxOutput": 4096,
+      "vision": false,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-pro",
+      "name": "OM V5 Pro",
+      "providerId": "mipham",
+      "contextWindow": 131072,
+      "maxOutput": 16384,
+      "vision": false,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-visual",
+      "name": "OM V5 Visual",
+      "providerId": "mipham",
+      "contextWindow": 65536,
+      "maxOutput": 4096,
+      "vision": true,
+      "status": "active"
+    },
+    {
+      "id": "om-v5-apex",
+      "name": "OM V5 Apex",
+      "providerId": "mipham",
+      "contextWindow": 200000,
+      "maxOutput": 32768,
+      "vision": false,
+      "status": "active"
+    }
+  ],
+  "synced_at": "2026-08-04T00:00:00Z"
+}

package/src/shared/types.ts

@@ -1,8 +1,443 @@
-// ── CLI 内部类型（引用活服务，不可共享）──
-// 纯数据类型（Message/StreamChunk/ToolResult/配置/常量等）见 @mipham/shared —— 唯一真源。
-export * from '@mipham/shared/types'
-import type { HookDefinition, ToolCategory, ToolPermission, ToolResult } from '@mipham/shared'
+// ── 类型唯一真源（vendored from packages/shared/src/types.ts）──
+// 为让 npm 包自包含（运行时无需 @mipham/shared workspace 依赖），
+// 此处从 packages/shared/src/types.ts 同步。改动共享类型时两边同步。
+// ── Provider Types ──
+export type ProtocolType = 'openai-compatible' | 'anthropic' | 'custom'
+
+export interface ModelInfo {
+  id: string
+  name: string
+  providerId: string
+  contextWindow: number
+  maxOutput: number
+  vision: boolean
+  status: 'active' | 'upcoming' | 'deprecated'
+}
+
+export interface ProviderConfig {
+  id: string
+  name: string
+  protocol: ProtocolType
+  baseUrl?: string
+  apiKey: string
+  models: ModelInfo[]
+  status?: 'active' | 'upcoming'
+}
+
+// ── Message Types ──
+export interface TextContent {
+  type: 'text'
+  text: string
+}
+export interface ImageContent {
+  type: 'image_url'
+  image_url: { url: string }
+}
+export interface ToolUseContent {
+  type: 'tool_use'
+  id: string
+  name: string
+  input: Record<string, unknown>
+}
+export interface ToolResultContent {
+  type: 'tool_result'
+  tool_use_id: string
+  content: string
+}
+export interface ThinkingContent {
+  type: 'thinking'
+  thinking: string
+}
+export type ContentBlock =
+  TextContent | ImageContent | ToolUseContent | ToolResultContent | ThinkingContent
+
+export interface Message {
+  role: 'system' | 'user' | 'assistant'
+  content: string | ContentBlock[]
+  /** DeepSeek reasoning tokens — must be passed back to the API in multi-turn conversations. */
+  reasoning_content?: string
+}
+
+// ── Tool Types ──
+export type ToolPermission = 'auto' | 'ask' | 'bypass'
+export type ToolCategory =
+  'file' | 'exec' | 'agent' | 'network' | 'system' | 'artifact' | 'scheduling'
+
+// ── Artifact Types ──
+export interface ArtifactEntry {
+  name: string
+  path: string
+  url: string
+  size: number
+  type: 'html' | 'svg'
+  createdAt: string
+  sessionId: string
+  versions?: string[] // version tags e.g. ['v1', 'v2']
+  versionCount?: number
+}
+
+export interface ArtifactManifest {
+  version: 1
+  artifacts: ArtifactEntry[]
+  port?: number
+}
+
+export interface ToolResult {
+  success: boolean
+  content: string
+  error?: string
+}
+
+// ── Task Notification Types ──
+export interface TaskNotification {
+  taskId: string
+  status: 'started' | 'completed' | 'failed'
+  description: string
+  content?: string
+  error?: string
+}
+
+// ── Stream Types ──
+export interface StreamChunk {
+  type:
+    | 'text'
+    | 'tool_use'
+    | 'tool_result'
+    | 'thinking'
+    | 'stop'
+    | 'error'
+    | 'warning'
+    | 'task_notification'
+    | 'usage'
+  content?: string
+  toolUse?: ToolUseContent
+  tool_use_id?: string
+  error?: string
+  /** DeepSeek reasoning tokens accumulated during this stream. */
+  reasoning_content?: string
+  /** Anthropic thinking block content (DeepSeek Anthropic endpoint). */
+  thinking?: string
+  /** Background task notification payload (type: 'task_notification'). */
+  taskNotification?: TaskNotification
+  /** API-reported input token count (type: 'usage'). */
+  inputTokens?: number
+  /** API-reported output token count (type: 'usage'). */
+  outputTokens?: number
+}
+
+// ── Config Types ──
+export interface MiphamConfig {
+  version: string
+  defaultProvider: string
+  defaultModel: string
+  permission: ToolPermission
+  /** Org-level permission restrictions (forbiddenModes, maxAllowedMode). */
+  permissionRestrictions?: PermissionRestrictions
+  providers: ProviderConfig[]
+  skills?: { paths: string[]; mcpServers: McpServerConfig[] }
+  marketplace?: {
+    /** If set, only allow installs from matching repos (e.g. ["One-Mipham/*"]) */
+    strictKnownMarketplaces?: string[]
+    /** Block installs from matching repos (e.g. ["malicious-org/*"]) */
+    blockedMarketplaces?: string[]
+  }
+  /** Phase 9 feature flags. All default to true. */
+  features?: Partial<FeatureFlags>
+  /** Phase 10 CRSI feature flags. All default to true. */
+  crsi?: Partial<CrsiConfig>
+}
+
+export interface FeatureFlags {
+  mcp: { oauthEnabled: boolean }
+  context: { useRealTokenizer: boolean; adaptiveThresholds: boolean }
+}
+
+export interface CrsiConfig {
+  /** Extract and inject experience rules into agent system prompts. */
+  ruleInjection: boolean
+  /** Intercept tool calls and auto-fix known failure patterns before execution. */
+  preToolHook: boolean
+  /** Analyze agent outcomes for recurring failure patterns. */
+  autoPatternAnalysis: boolean
+  /** Auto-degrade/disable low-effectiveness rules based on success-rate tracking. */
+  autoRuleManagement: boolean
+}
+
+export interface McpServerConfig {
+  name: string
+  /** stdio: executable to spawn (mutually exclusive with `url`). */
+  command?: string
+  /** stdio: args passed to `command`. */
+  args?: string[]
+  /** HTTP: Streamable HTTP endpoint (mutually exclusive with `command`). */
+  url?: string
+  /** HTTP: extra request headers (e.g. Authorization). */
+  headers?: Record<string, string>
+  env?: Record<string, string>
+  auth?: {
+    type: 'oauth'
+    authorizationUrl: string
+    tokenUrl: string
+    clientId: string
+    scopes?: string[]
+    redirectPort?: number
+  }
+}
+
+// ── Hook Types ──
+export type HookEvent =
+  | 'PreToolUse'
+  | 'PostToolUse'
+  | 'PostToolUseFailure'
+  | 'SessionStart'
+  | 'SessionEnd'
+  | 'Notification'
+  | 'Stop'
+  | 'UserPromptSubmit'
+  | 'PreCompact'
+  | 'PostCompact'
+  | 'ConfigChange'
+  | 'SubagentStart'
+  | 'SubagentStop'
+  | 'PreInference'
+
+export type HookType = 'command' | 'http' | 'code' | 'mcp_tool'
+
+export interface HookConfig {
+  type: HookType
+  command?: string
+  args?: string[]
+  url?: string
+  method?: 'GET' | 'POST'
+  headers?: Record<string, string>
+  mcpServer?: string
+  mcpTool?: string
+  continueOnBlock?: boolean
+}
+
+export interface HookDefinition {
+  event: HookEvent
+  toolName?: string
+  handler: (context: HookContext) => Promise<HookResult>
+}
+
+export interface HookContext {
+  event: HookEvent
+  toolName?: string
+  toolInput?: Record<string, unknown>
+  toolResult?: ToolResult
+  sessionId: string
+  userPrompt?: string
+  configKey?: string
+  configValue?: unknown
+  /** PreInference: full conversation messages for DLP inspection. */
+  messages?: Array<{ role: string; content: string }>
+  /** PreInference: recent tool calls and their results. */
+  toolCalls?: Array<{
+    name: string
+    input: Record<string, unknown>
+    resultPreview: string
+  }>
+  /** PreInference: current provider ID. */
+  provider?: string
+  /** PreInference: current model ID. */
+  model?: string
+}
+
+export interface HookResult {
+  allowed: boolean
+  reason?: string
+  modifiedInput?: Record<string, unknown>
+  decision?: 'allow' | 'block'
+  permissionDecision?: 'allow' | 'deny' | 'ask' | 'defer'
+  additionalContext?: string
+  updatedOutput?: string
+}
+
+// ── Instruction Types ──
+export interface InstructionFile {
+  path: string
+  level: 'group' | 'company' | 'project' | 'directory' | 'user'
+  privacy: 'public' | 'project' | 'private'
+  language: string
+  content: string
+  frontmatter: Record<string, unknown>
+}
+
+// ── Permission Types ──
+/** Six explicit permission modes matching Claude Code's permission architecture */
+export type PermissionMode =
+  'default' | 'acceptEdits' | 'plan' | 'auto' | 'dontAsk' | 'bypassPermissions'
 
+/** Backward-compatible alias: PermissionMode plus legacy 'ask' and 'bypass' */
+export type PermissionLevel = PermissionMode | 'ask' | 'bypass'
+
+/** Org-level restrictions that cap or forbid specific permission modes. */
+export interface PermissionRestrictions {
+  /** Modes that may not be entered (cycle skips them). */
+  forbiddenModes?: PermissionMode[]
+  /** Ceiling — modes ranked higher (more permissive) than this are treated as forbidden. */
+  maxAllowedMode?: PermissionMode
+}
+
+export interface PermissionConfig {
+  mode: PermissionMode
+  allow: string[]
+  deny: string[]
+  /** Optional org-level restrictions enforced on every mode transition. */
+  restrictions?: PermissionRestrictions
+}
+
+export interface PermissionRuleEntry {
+  pattern: string // e.g., "Bash(git:*)"
+  level: 'allow' | 'deny' | 'ask'
+  compiled: RegExp
+}
+
+export interface PermissionRule {
+  toolName: string
+  level: PermissionLevel
+  pattern?: string
+}
+
+// ── Inference Hook (DLP) Types ──
+
+/** Configuration for the PreInference DLP hook, loaded from config.yml. */
+export interface InferenceHookConfig {
+  /** DLP server endpoint (HTTPS). Empty = feature disabled. */
+  endpoint: string
+  /** HMAC signing secret (format: mis_<random>). */
+  signing_secret: string
+  /** Request timeout in milliseconds. Default 5000. */
+  timeout: number
+  /** Failure posture: 'fail-closed' blocks on error, 'fail-open' allows. */
+  on_failure: 'fail-closed' | 'fail-open'
+  /** Organization identifier (optional, sent in payload). */
+  organization_id: string
+  /** Additional custom headers to send with each request. */
+  headers: Record<string, string>
+}
+
+/** Outgoing request to the DLP server. */
+export interface InferenceCheckRequest {
+  type: 'inference_check'
+  id: string
+  created_at: string
+  data: {
+    type: 'pre_inference'
+    session_id: string
+    organization_id?: string
+    provider: string
+    model: string
+    messages: Array<{ role: string; content: string }>
+    tool_calls: Array<{
+      name: string
+      input: Record<string, unknown>
+      result_preview: string
+    }>
+  }
+}
+
+/** Response from the DLP server. */
+export interface InferenceCheckResponse {
+  verdict: 'allow' | 'deny'
+  reason?: string
+}
+
+// ── Credential Masking Types ──
+
+/** Full-file masking rule: entire file content replaced with sentinel. */
+export interface CredentialFullMaskRule {
+  path: string
+  mode: 'full'
+}
+
+/** Per-extract-pattern configuration with optional field-based extraction. */
+export interface CredentialExtractPattern {
+  /** Regex pattern to match. When `field` is set, applied to field value only. */
+  pattern: string
+  /** Optional replacement string. Defaults to CREDENTIAL_SENTINEL. */
+  replacement?: string
+  /** 🆕 JSON key to extract before applying pattern. If unset, pattern runs against full content. */
+  field?: string
+}
+
+/** Extract-based masking rule: only regex-matched tokens are replaced. */
+export interface CredentialExtractRule {
+  path: string
+  mode: 'extract'
+  extract: CredentialExtractPattern[]
+  /** 🆕 Behavior when no extract pattern matches: 'mask' (replace all) or 'passthrough' (keep). Default: 'mask'. */
+  onExtractNoMatch?: 'mask' | 'passthrough'
+}
+
+/** 🆕 JWT-aware masking rule: decode payload and mask specified claims. */
+export interface JwtMaskingRule {
+  path: string
+  type: 'jwt'
+  decode: 'jwt'
+  /** Claim names to mask in the JWT payload (e.g. ["sub", "email"]). */
+  maskClaims: string[]
+}
+
+/** 🆕 AWS credential pair masking rule: detect key pairs and optionally re-sign. */
+export interface AwsMaskingRule {
+  path: string
+  type: 'aws'
+  awsPairs: boolean
+  sigv4: boolean
+}
+
+export type CredentialFileRule =
+  CredentialFullMaskRule | CredentialExtractRule | JwtMaskingRule | AwsMaskingRule
+
+/** Configuration for credential masking, loaded from config.yml. */
+export interface CredentialMaskingConfig {
+  enabled: boolean
+  files: CredentialFileRule[]
+  output_scrubbing: {
+    enabled: boolean
+    patterns: string[]
+  }
+  env_filter: {
+    enabled: boolean
+    patterns: string[]
+  }
+}
+
+// ── Cross-Session Messaging Types ──
+
+/** Controls how inbound cross-session messages are handled. */
+export type CrossSessionInbound = 'allow' | 'ask' | 'deny'
+
+/** 🆕 Configuration for cross-session messaging. */
+export interface CrossSessionConfig {
+  crossSessionInbound: CrossSessionInbound
+  dialogExpiry: number // seconds
+}
+
+/** Session information exposed via ListAgents. */
+export interface SessionInfo {
+  id: string
+  name: string
+  machine: string
+  pid: number
+  startedAt: string
+  cwd?: string
+  provider?: string
+  model?: string
+}
+
+// ── Background Agent Types ──
+
+export interface BackgroundAgentConfig {
+  auto_commit: boolean
+  auto_push: boolean
+  auto_worktree: boolean
+  commit_coauthors: boolean
+}
+
+// ── CLI 内部类型（引用活服务，不可共享）──
 export interface ToolContext {
   cwd: string
   sessionId: string

package/src/ui/input.tsx

@@ -231,7 +231,14 @@ export function InputBar({
           if (submittedHistory.length === 0) return
           // Save current draft the first time we enter history browsing
           if (historyIndexRef.current === -1) {
-            savedDraftRef.current = value
+            // Flush any pending throttle so its deferred setValue doesn't overwrite
+            // history navigation (paste → immediate ↑ race). Save the latest value
+            // from the ref — state `value` is stale inside the throttle window.
+            if (onChangeTimerRef.current) {
+              clearTimeout(onChangeTimerRef.current)
+              onChangeTimerRef.current = null
+            }
+            savedDraftRef.current = valueRef.current
           }
           const newIndex = Math.min(historyIndexRef.current + 1, submittedHistory.length - 1)
           historyIndexRef.current = newIndex