@miphamai/cli 0.54.0 → 0.55.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.54.0",
+  "version": "0.55.0",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",

package/src/agent/agent-registry.ts

@@ -10,9 +10,12 @@ interface FrontmatterResult {
 }
 
 function parseFrontmatter(raw: string): FrontmatterResult {
-  const match = raw.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/)
+  // Strip a leading UTF-8 BOM — otherwise `^---` never matches and a
+  // BOM-prefixed file is silently treated as body text (effectively ignored).
+  const src = raw.replace(/^\uFEFF/, '')
+  const match = src.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/)
   if (!match) {
-    return { data: {}, content: raw }
+    return { data: {}, content: src }
   }
   return {
     data: parseYaml(match[1] || '') as Record<string, unknown>,

package/src/agent/cross-session/discovery.ts

@@ -9,7 +9,7 @@ import {
 } from 'node:fs'
 import { join, basename } from 'node:path'
 import { homedir, hostname } from 'node:os'
-import type { SessionInfo } from '../../shared/types'
+import type { SessionInfo, CrossSessionInbound } from '../../shared/types'
 
 const MIPHAM_HOME = join(homedir(), '.mipham')
 const ACTIVE_SESSIONS_DIR = join(MIPHAM_HOME, '.active-sessions')
@@ -97,6 +97,7 @@ export function createSessionInfo(
   cwd?: string,
   provider?: string,
   model?: string,
+  crossSessionInbound?: CrossSessionInbound,
 ): SessionInfo {
   return {
     id: sessionId,
@@ -107,6 +108,7 @@ export function createSessionInfo(
     cwd,
     provider,
     model,
+    crossSessionInbound,
   }
 }
 

package/src/agent/message-router.ts

@@ -90,6 +90,16 @@ export class MessageRouter {
     }
     const targetSession = resolution.session!
 
+    // Recipient refuses inbound messages — report "refused" instead of a silent
+    // success so the sender knows the message was not delivered.
+    if (targetSession.crossSessionInbound === 'deny') {
+      return {
+        success: false,
+        routedTo: 'inbox',
+        error: `Session "${targetSession.name}" refuses inbound messages.`,
+      }
+    }
+
     // Get sender info — resolve the human-readable name when the sender is a
     // registered session, else fall back to the raw id (e.g. non-session senders).
     const senderName = discoverSessions().find((s) => s.id === from)?.name ?? from

package/src/commands/project.ts

@@ -7,6 +7,7 @@
  */
 import type { CommandHandler, CommandContext, CommandResult } from '../ui/commands.js'
 import { getWorkspaceTrust } from '../core/workspace-trust'
+import { atomicWriteFileSync } from '../shared/atomic-write'
 
 export {
   initCmd,
@@ -20,7 +21,7 @@ export {
 }
 
 const initCmd: CommandHandler = async (ctx) => {
-  const { existsSync, mkdirSync, writeFileSync } = await import('node:fs')
+  const { existsSync, mkdirSync } = await import('node:fs')
   const { join } = await import('node:path')
   const { homedir } = await import('node:os')
 
@@ -78,7 +79,7 @@ providers:
 ${providerYaml}
 `
 
-    writeFileSync(userConfigPath, configContent, 'utf-8')
+    atomicWriteFileSync(userConfigPath, configContent)
     return {
       content: `✅ Mipham Code initialized!
 
@@ -434,7 +435,7 @@ permission: ask
 providers:
 ${providerYaml}
 `
-    writeFileSync(configPath, defaultConfig, 'utf-8')
+    atomicWriteFileSync(configPath, defaultConfig)
     created.push('.mipham/config.yml')
   } else {
     skipped.push('.mipham/config.yml (already exists)')

package/src/config/loader.ts

@@ -6,11 +6,11 @@ import {
   readdirSync,
   unlinkSync,
   chmodSync,
-  writeFileSync,
 } from 'node:fs'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
 import { parse as parseYaml, stringify as stringifyYaml } from 'yaml'
+import { atomicWriteFileSync } from '../shared/atomic-write'
 import type {
   MiphamConfig,
   ProviderConfig,
@@ -533,7 +533,7 @@ export function saveProviderApiKey(providerId: string, apiKey: string): boolean
     doc.providers = providers
 
     // Write back
-    writeFileSync(configPath, stringifyYaml(doc), { encoding: 'utf-8', mode: 0o600 })
+    atomicWriteFileSync(configPath, stringifyYaml(doc), { mode: 0o600 })
     return true
   } catch (err: unknown) {
     const msg = err instanceof Error ? err.message : String(err)

package/src/core/instructions.ts

@@ -10,9 +10,12 @@ interface FrontmatterResult {
 }
 
 function parseFrontmatter(raw: string): FrontmatterResult {
-  const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/)
+  // Strip a leading UTF-8 BOM — otherwise `^---` never matches and a
+  // BOM-prefixed file is silently treated as body text (effectively ignored).
+  const src = raw.replace(/^\uFEFF/, '')
+  const match = src.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/)
   if (!match) {
-    return { data: {}, content: raw }
+    return { data: {}, content: src }
   }
   return {
     data: parseYaml(match[1] || '') as Record<string, unknown>,
@@ -101,6 +104,16 @@ export class InstructionsLoader {
       parts.push(this.buildPermissionContext(permissionMode))
     }
 
+    // 开场克制：寒暄只回一句短问候，不上能力清单（避免把「你好」当「你是谁」处理）
+    parts.push(`## Greeting Restraint
+
+When the user's message is only a greeting or small talk ("hello", "hi",
+"你好", "您好", "在吗", "早上好"), reply with ONE brief, warm line —
+e.g. "你好，我是 Mipham，有什么可以帮你的？" Do NOT introduce yourself,
+list your capabilities/tools/MCP servers, or enumerate what you can do.
+Only describe your capabilities when the user explicitly asks ("你是谁",
+"你能做什么", "what can you do", "introduce yourself").`)
+
     // Inject critical thinking self-check layer (for analysis/comparison tasks)
     parts.push(`## Critical Thinking Self-Check
 

package/src/index.tsx

@@ -28,7 +28,7 @@ import { QueryEngine } from './core/engine'
 import { ExperienceRuleEngine } from './core/rule-engine.js'
 import { SessionLog } from './core/session-log'
 import { SessionStore } from './core/session-store'
-import type { PermissionLevel, MiphamConfig } from './shared/types'
+import type { PermissionLevel, MiphamConfig, McpServerConfig } from './shared/types'
 import { SkillsLoader } from './skills/loader'
 import { PluginManager } from './plugin/plugin-manager'
 import { loadPlugins } from './plugin/plugin-loader'
@@ -194,6 +194,38 @@ function SetupGate(props: SetupGateProps) {
   })
 }
 
+/**
+ * Connect all MCP servers in parallel and register their tools into the shared
+ * registry. Runs lazily in the background so a slow or dead server (e.g. a 15s
+ * connect timeout) never blocks first paint. Failures are non-fatal.
+ */
+async function connectMcpServers(
+  mcpServers: McpServerConfig[],
+  tools: ReturnType<typeof createToolRegistry>,
+): Promise<void> {
+  if (mcpServers.length === 0) return
+  const mcp = McpClient.getInstance()
+  // Wire runtime tool-list changes before connect so mid-connect updates land.
+  syncMcpToolsOnChange(mcp, tools)
+  const results = await Promise.allSettled(
+    mcpServers.map(async (server) => {
+      await mcp.connect(server)
+      const count = registerMcpServerTools(server.name, tools)
+      if (count > 0) {
+        process.stderr.write(`[mcp] "${server.name}": registered ${count} tools\n`)
+      }
+    }),
+  )
+  for (let i = 0; i < results.length; i++) {
+    const result = results[i]!
+    if (result.status === 'rejected') {
+      process.stderr.write(
+        `[mcp] Failed to connect "${mcpServers[i]!.name}": ${String(result.reason)}\n`,
+      )
+    }
+  }
+}
+
 export async function runApp(options: RunOptions): Promise<void> {
   // Metrics: count CLI invocation + active session
   getMetrics().cliInvocations.inc()
@@ -455,33 +487,10 @@ export async function runApp(options: RunOptions): Promise<void> {
   mountSkills(vajraContext, skillsLoader)
   mountLlm(vajraContext, registry)
 
-  // Connect MCP servers and register their tools into the tool registry.
-  // Uses Promise.allSettled for parallel connection — failures are non-fatal.
-  const mcpServers = config.skills?.mcpServers ?? []
-  if (mcpServers.length > 0) {
-    const mcp = McpClient.getInstance()
-    const results = await Promise.allSettled(
-      mcpServers.map(async (server) => {
-        await mcp.connect(server)
-        const count = registerMcpServerTools(server.name, tools)
-        if (count > 0) {
-          process.stderr.write(`[mcp] "${server.name}": registered ${count} tools\n`)
-        }
-      }),
-    )
-    // Log failures (non-fatal — app starts without that server's tools)
-    for (let i = 0; i < results.length; i++) {
-      const result = results[i]!
-      if (result.status === 'rejected') {
-        process.stderr.write(
-          `[mcp] Failed to connect "${mcpServers[i]!.name}": ${String(result.reason)}\n`,
-        )
-      }
-    }
-  }
-
-  // Wire runtime MCP tool changes (tools/list_changed) into the central registry.
-  syncMcpToolsOnChange(McpClient.getInstance(), tools)
+  // Connect MCP servers lazily in the background: the UI renders immediately,
+  // and each server's tools register into the shared registry as it connects.
+  // A dead server (e.g. a 15s connect timeout) no longer blocks startup.
+  void connectMcpServers(config.skills?.mcpServers ?? [], tools)
 
   // Initialize hook engine — register skill-defined hooks
   const hookEngine = new HookEngine()
@@ -549,12 +558,20 @@ export async function runApp(options: RunOptions): Promise<void> {
   // so `@mipham-code` can address this session; uniqueness is enforced against
   // other live sessions (suffix -2, -3, …). The id stays a stable `session-<ts>`.
   const defaultName = basename(process.cwd()) || 'session'
+
+  // Load cross-session config first so the registered SessionInfo carries this
+  // session's inbound policy — senders discover it and report "refused" instead
+  // of a silent drop when policy is 'deny'.
+  const crossSessionConfig = loadCrossSessionConfig(process.cwd())
+  engine.setCrossSessionConfig(crossSessionConfig)
+
   const sessionInfo = createSessionInfo(
     sessionName,
     ensureUniqueSessionName(defaultName, discoverSessions()),
     process.cwd(),
     defaultProvider,
     defaultModel,
+    crossSessionConfig.crossSessionInbound,
   )
   registerActiveSession(sessionInfo)
 
@@ -568,10 +585,6 @@ export async function runApp(options: RunOptions): Promise<void> {
     heartbeatInterval.unref()
   }
 
-  // Load cross-session config and wire into the engine's inbound policy
-  const crossSessionConfig = loadCrossSessionConfig(process.cwd())
-  engine.setCrossSessionConfig(crossSessionConfig)
-
   // P2-1: Trigger SessionStart hooks after full initialization
   hookEngine.executeSessionStart(sessionName).catch(() => {
     // Hook failures never block session startup

package/src/shared/atomic-write.ts

@@ -0,0 +1,17 @@
+import { writeFileSync, renameSync } from 'node:fs'
+
+/**
+ * Write a file atomically: write to a same-directory `.tmp` file, then rename
+ * over the target. Same-filesystem rename is atomic, so a crash or kill
+ * mid-write can never leave a truncated/corrupt file — readers see either the
+ * old or the new content, never a partial write.
+ */
+export function atomicWriteFileSync(
+  path: string,
+  content: string,
+  options: { mode?: number } = {},
+): void {
+  const tmp = path + '.tmp'
+  writeFileSync(tmp, content, { encoding: 'utf-8', mode: options.mode ?? 0o600 })
+  renameSync(tmp, path)
+}

package/src/shared/package-info.ts

@@ -9,7 +9,7 @@
 export const PACKAGE_NAME = '@miphamai/cli' as const
 
 /** 当前发布版本 */
-export const PACKAGE_VERSION = '0.54.0' as const
+export const PACKAGE_VERSION = '0.55.0' as const
 
 /** npm install 全局安装命令 */
 export const NPM_INSTALL_COMMAND = `npm install -g ${PACKAGE_NAME}` as const

package/src/shared/types.ts

@@ -430,6 +430,7 @@ export interface SessionInfo {
   cwd?: string
   provider?: string
   model?: string
+  crossSessionInbound?: CrossSessionInbound
 }
 
 // ── Background Agent Types ──

package/src/skills/loader.ts

@@ -13,9 +13,12 @@ interface FrontmatterResult {
 }
 
 function parseFrontmatter(raw: string): FrontmatterResult {
-  const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/)
+  // Strip a leading UTF-8 BOM — otherwise `^---` never matches and a
+  // BOM-prefixed file is silently treated as body text (effectively ignored).
+  const src = raw.replace(/^\uFEFF/, '')
+  const match = src.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/)
   if (!match) {
-    return { data: {}, content: raw }
+    return { data: {}, content: src }
   }
   return {
     data: parseYaml(match[1] || '') as Record<string, unknown>,

package/src/ui/config-wizard.tsx

@@ -14,7 +14,8 @@ import { useI18n } from '../i18n-context'
 import TextInput from 'ink-text-input'
 import { DEFAULT_PROVIDERS, OLLAMA_PRESET_MODELS } from '../shared/constants'
 import type { ModelInfo } from '../shared/types'
-import { mkdirSync, writeFileSync } from 'node:fs'
+import { mkdirSync } from 'node:fs'
+import { atomicWriteFileSync } from '../shared/atomic-write'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
 import { execSync } from 'node:child_process'
@@ -115,7 +116,7 @@ function writeConfigFile(providerId: string, modelId: string, apiKey: string): v
     ...models.map((m) => `      - id: ${m.id}`),
   ]
 
-  writeFileSync(join(configDir, 'config.yml'), lines.join('\n'), 'utf-8')
+  atomicWriteFileSync(join(configDir, 'config.yml'), lines.join('\n'))
 }
 
 function checkOllama(): { installed: boolean; running: boolean; models: string[] } {

package/src/core/output-styles.ts

@@ -1,95 +0,0 @@
-/**
- * OutputStylesLoader — loads custom response persona styles from .mipham/output-styles/.
- *
- * Each .md file in the directory is a named style. The active style's content
- * is injected into the system prompt to shape the AI's tone and communication style.
- *
- * Usage:
- *   const loader = new OutputStylesLoader(cwd)
- *   loader.list()               // ['concise', 'academic', ...]
- *   loader.get('concise')       // style content or undefined
- *   loader.setActive('concise') // switch active style
- *   loader.getActiveContent()   // active style content (for system prompt)
- */
-
-import { readdirSync, readFileSync, existsSync } from 'node:fs'
-import { join, basename, extname } from 'node:path'
-
-export class OutputStylesLoader {
-  private stylesDir: string
-  private activeStyle: string | null = null
-
-  constructor(cwd: string) {
-    this.stylesDir = join(cwd, '.mipham', 'output-styles')
-  }
-
-  /**
-   * List all available style names (filename without .md extension).
-   */
-  list(): string[] {
-    if (!existsSync(this.stylesDir)) return []
-    try {
-      return readdirSync(this.stylesDir)
-        .filter((f) => f.endsWith('.md'))
-        .map((f) => basename(f, extname(f)))
-    } catch {
-      return []
-    }
-  }
-
-  /**
-   * Get the content of a named style. Returns undefined if not found.
-   */
-  get(name: string): string | undefined {
-    if (!existsSync(this.stylesDir)) return undefined
-    const filepath = join(this.stylesDir, `${name}.md`)
-    if (!existsSync(filepath)) return undefined
-    try {
-      return readFileSync(filepath, 'utf-8').trim()
-    } catch {
-      return undefined
-    }
-  }
-
-  /**
-   * Set the active output style.
-   */
-  setActive(name: string): boolean {
-    const content = this.get(name)
-    if (!content) return false
-    this.activeStyle = name
-    return true
-  }
-
-  /**
-   * Clear the active output style (revert to default personality).
-   */
-  clearActive(): void {
-    this.activeStyle = null
-  }
-
-  /**
-   * Get the active style name (null if none selected).
-   */
-  getActiveName(): string | null {
-    return this.activeStyle
-  }
-
-  /**
-   * Get the active style content for system prompt injection.
-   * Returns empty string if no style is active.
-   */
-  getActiveContent(): string {
-    if (!this.activeStyle) return ''
-    const content = this.get(this.activeStyle)
-    if (!content) return ''
-    return [
-      `[Output Style: ${this.activeStyle}]`,
-      'Adopt the following communication style in all your responses:',
-      '',
-      content,
-      '',
-      '---',
-    ].join('\n')
-  }
-}