@miphamai/cli 0.72.0 → 0.73.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.72.0",
+  "version": "0.73.1",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",

package/src/commands/project.ts

@@ -553,9 +553,7 @@ async function setupStep3(ctx: CommandContext): Promise<CommandResult> {
     lines.push(`  ${p.id}${p.id === ctx.providerId ? ' ← current' : ''}`)
     for (const m of p.models.filter((m) => m.status === 'active')) {
       const marker = m.id === ctx.modelId ? ' ★' : '  '
-      lines.push(
-        `${marker}  ${m.id.padEnd(30)} ${m.contextWindow.toLocaleString()} ctx  ${m.vision ? '🖼' : '📝'}`,
-      )
+      lines.push(`${marker}  ${m.id.padEnd(30)}  ${m.vision ? '🖼' : '📝'}`)
     }
     lines.push('')
   }

package/src/core/permission-rules.ts

@@ -251,8 +251,37 @@ export function wildcardMatch(pattern: string, input: string): boolean {
   return new RegExp(regexStr).test(input)
 }
 
+/**
+ * Validate a rule pattern string's structure, mirroring exactly what
+ * `matchBashRule` / `ruleMatches` will actually match. A pattern that is
+ * syntactically valid but never matches (e.g. `Bash(ls) x`, `Read(foo`,
+ * `Bash()`) is silently dead today — this returns a human-readable reason so
+ * the caller can report it as an invalid setting instead of ignoring it.
+ *
+ * Returns null when the pattern is valid, or a reason string when malformed.
+ */
+export function validateRulePattern(pattern: string): string | null {
+  if (!pattern.trim()) return 'rule pattern is empty'
+
+  if (pattern.includes('(')) {
+    if (!pattern.includes(')')) return 'unclosed parenthesis'
+    // Empty parameter: `Bash()` or `Bash( )`
+    if (/\(\s*\)$/.test(pattern)) return 'empty parameter'
+    // Must be exactly `ToolName(param)` with nothing before or after.
+    if (!/^(\w+)\((.+)\)$/.test(pattern)) {
+      return 'unexpected text after the closing parenthesis'
+    }
+    return null
+  }
+
+  // No parenthesis → must be a plain tool name (matched via `pattern === tool.name`).
+  if (!/^\w+$/.test(pattern)) return 'not a single tool name'
+  return null
+}
+
 /** Compile a rule pattern string into a PermissionRuleEntry. */
 export function compileRule(pattern: string, level: 'allow' | 'deny' | 'ask'): PermissionRuleEntry {
+  const invalid = validateRulePattern(pattern)
   const regexStr =
     '^' +
     pattern
@@ -261,5 +290,5 @@ export function compileRule(pattern: string, level: 'allow' | 'deny' | 'ask'): P
       .replace(/\\\*/g, '.*')
       .replace(/\\\?/g, '.') +
     '$'
-  return { pattern, level, compiled: new RegExp(regexStr) }
+  return { pattern, level, compiled: new RegExp(regexStr), ...(invalid ? { invalid } : {}) }
 }

package/src/core/permission.ts

@@ -489,6 +489,24 @@ export class PermissionSystem {
     this.invalidateCache()
   }
 
+  /**
+   * Report any rule whose pattern is structurally invalid and can therefore
+   * never match (e.g. `Bash(ls) x`, `Read(foo`, `Bash()`). These are silently
+   * dead today — callers should surface them as invalid settings rather than
+   * let a deny rule fail closed without the user noticing.
+   */
+  getInvalidRules(): string[] {
+    const invalid: string[] = []
+    for (const entry of [...this.allowRules, ...this.denyRules, ...this.askRules]) {
+      if (entry.invalid) {
+        invalid.push(
+          `permission rule "${entry.pattern}" is invalid (${entry.invalid}) and will never match`,
+        )
+      }
+    }
+    return invalid
+  }
+
   removeRule(toolName: string): void {
     this.legacyRules.delete(toolName)
     this.removeRuleFromArrays(toolName)

package/src/daemon/server.ts

@@ -95,6 +95,9 @@ export function buildDaemonPermission(
     for (const rule of rules.allow ?? []) permission.allow(rule)
     for (const rule of rules.deny ?? []) permission.deny(rule)
   }
+  for (const msg of permission.getInvalidRules()) {
+    process.stderr.write(`⚠ Mipham Code: ${msg}\n`)
+  }
   return permission
 }
 

package/src/i18n-core/locales/en-US.json

@@ -780,7 +780,7 @@
   "ui": {
     "banner": {
       "title": "Mipham Code",
-      "subtitle": "AI-Powered Programming Assistant",
+      "subtitle": "AI-Powered Super Agent",
       "tagline": "Multi-model / Multi-provider / Skills & Tools / Open-core",
       "start_message": "Type a message to start. /help for commands",
       "controls_hint": "Ctrl+P pick model · Esc to exit",

package/src/i18n-core/locales/zh-CN.json

@@ -780,7 +780,7 @@
   "ui": {
     "banner": {
       "title": "Mipham Code",
-      "subtitle": "AI 驱动的编程助手",
+      "subtitle": "AI 驱动的超级智能体",
       "tagline": "多模型 / 多提供商 / 技能与工具 / 开源核心",
       "start_message": "输入消息开始。 /help 查看命令",
       "controls_hint": "Ctrl+P 选择模型 · Esc 退出",

package/src/index.tsx

@@ -559,6 +559,12 @@ export async function runApp(options: RunOptions): Promise<void> {
   for (const rule of settingsJson.permissions.allow) engine.getPermission().allow(rule)
   for (const rule of settingsJson.permissions.deny) engine.getPermission().deny(rule)
 
+  // Surface malformed permission rules as warnings instead of silently letting
+  // them never match (e.g. a deny rule typed `Bash(ls) x` would fail closed).
+  for (const msg of engine.getPermission().getInvalidRules()) {
+    process.stderr.write(`⚠ Mipham Code: ${msg}\n`)
+  }
+
   // Initialize agent registry and load plugin agents/skills/MCP/hooks
   const agentRegistry = new AgentRegistry()
   agentRegistry.loadUserAgents()
@@ -624,6 +630,28 @@ export async function runApp(options: RunOptions): Promise<void> {
 
   // Auto-save session on exit
   let saved = false
+
+  // Persist the current session under its real name. Shared by saveAndExit and
+  // the process 'exit' safety net — the two paths must stay identical, or the
+  // session gets saved under a different (timestamped) name and /resume breaks.
+  const persistSession = () => {
+    if (context.getMessageCount() === 0) return
+    const log = context.getLog()
+    if (log) {
+      SessionStore.saveLog(sessionName, log, {
+        provider: defaultProvider,
+        model: defaultModel,
+        cwd: process.cwd(),
+      })
+    } else {
+      SessionStore.save(sessionName, context.getMessages(), {
+        provider: defaultProvider,
+        model: defaultModel,
+        cwd: process.cwd(),
+      })
+    }
+  }
+
   const saveAndExit = () => {
     saved = true
     clearInterval(heartbeatInterval)
@@ -631,22 +659,7 @@ export async function runApp(options: RunOptions): Promise<void> {
     // P2-1: Trigger SessionEnd hooks before cleanup (best-effort)
     hookEngine.executeSessionEnd(sessionName).catch(() => {})
     artifactServer.stop()
-    if (context.getMessageCount() > 0) {
-      const log = context.getLog()
-      if (log) {
-        SessionStore.saveLog(sessionName, log, {
-          provider: defaultProvider,
-          model: defaultModel,
-          cwd: process.cwd(),
-        })
-      } else {
-        SessionStore.save(sessionName, context.getMessages(), {
-          provider: defaultProvider,
-          model: defaultModel,
-          cwd: process.cwd(),
-        })
-      }
-    }
+    persistSession()
     // Finalize the session — write session summary + flush CRSI effectiveness
     // (evaluate rules and apply auto-degrade/disable). Best-effort: the
     // self-improvement closeout must never block session exit.
@@ -661,27 +674,25 @@ export async function runApp(options: RunOptions): Promise<void> {
 
   process.on('SIGINT', saveAndExit)
   process.on('SIGTERM', saveAndExit)
+  // Terminal close / SSH disconnect sends SIGHUP (not SIGINT/SIGTERM); without
+  // a handler the session log is silently dropped on those paths.
+  process.on('SIGHUP', saveAndExit)
 
-  // Safety net: auto-save on exit for paths that bypass saveAndExit
+  // Safety net: persist on exit for paths that bypass saveAndExit (e.g. /exit
+  // and /quit call process.exit(0) directly). saveAndExit already persists;
+  // guard on !saved to avoid double-writing.
   process.on('exit', () => {
     clearInterval(heartbeatInterval)
     unregisterSession(sessionName)
     // Finalize the session on non-interactive exit paths
-    // (daemon worker / crash / kill) that bypass saveAndExit. saveAndExit
-    // already finalizes; guard on !saved to avoid double-evaluating.
+    // (daemon worker / crash / kill) that bypass saveAndExit.
     if (!saved) {
       try {
         engine.getAutoMemory().finalizeSession()
       } catch {
         // ignore — CRSI closeout is non-critical
       }
-    }
-    if (!saved && context.getMessageCount() > 0) {
-      SessionStore.autoSave(context.getMessages(), {
-        provider: defaultProvider,
-        model: defaultModel,
-        cwd: process.cwd(),
-      })
+      persistSession()
       // Distill learnings from the last 5 user messages into memory
       const allMessages = context.getMessages()
       const userMessages = allMessages

package/src/shared/format.ts

@@ -0,0 +1,15 @@
+/**
+ * Format a model's context window (token count) into a friendly unit string.
+ * Decimal K/M: 16384 → "16K", 131072 → "131K", 200000 → "200K", 1000000 → "1M".
+ * Used only on the developer-facing `/models` command — the first-run model
+ * picker deliberately omits context window (raw token counts make Mipham's own
+ * models look small next to 1M-context competitors).
+ */
+export function formatContextWindow(tokens: number): string {
+  if (tokens >= 1_000_000) {
+    const m = tokens / 1_000_000
+    return `${Number.isInteger(m) ? m : m.toFixed(1)}M`
+  }
+  if (tokens >= 1_000) return `${Math.round(tokens / 1_000)}K`
+  return `${tokens}`
+}

package/src/shared/mipham-models.json

@@ -11,34 +11,34 @@
   "models": [
     {
       "id": "om-v5-flash",
-      "name": "OM V5 Flash",
+      "name": "om-V5-Flash",
       "providerId": "mipham",
       "contextWindow": 16384,
       "maxOutput": 4096,
       "vision": false,
       "status": "active"
     },
-    {
-      "id": "om-v5-pro",
-      "name": "OM V5 Pro",
-      "providerId": "mipham",
-      "contextWindow": 131072,
-      "maxOutput": 16384,
-      "vision": false,
-      "status": "active"
-    },
     {
       "id": "om-v5-visual",
-      "name": "OM V5 Visual",
+      "name": "om-V5-Visual",
       "providerId": "mipham",
       "contextWindow": 65536,
       "maxOutput": 4096,
       "vision": true,
       "status": "active"
     },
+    {
+      "id": "om-v5-pro",
+      "name": "om-V5-Pro",
+      "providerId": "mipham",
+      "contextWindow": 131072,
+      "maxOutput": 16384,
+      "vision": false,
+      "status": "active"
+    },
     {
       "id": "om-v5-apex",
-      "name": "OM V5 Apex",
+      "name": "om-V5-Apex",
       "providerId": "mipham",
       "contextWindow": 200000,
       "maxOutput": 32768,
@@ -46,5 +46,5 @@
       "status": "active"
     }
   ],
-  "synced_at": "2026-08-04T00:00:00Z"
+  "synced_at": "2026-09-04T02:32:33.479Z"
 }

package/src/shared/package-info.ts

@@ -9,7 +9,7 @@
 export const PACKAGE_NAME = '@miphamai/cli' as const
 
 /** 当前发布版本 */
-export const PACKAGE_VERSION = '0.72.0' as const
+export const PACKAGE_VERSION = '0.73.1' as const
 
 /** npm install 全局安装命令 */
 export const NPM_INSTALL_COMMAND = `npm install -g ${PACKAGE_NAME}` as const

package/src/shared/types.ts

@@ -315,6 +315,8 @@ export interface PermissionRuleEntry {
   pattern: string // e.g., "Bash(git:*)"
   level: 'allow' | 'deny' | 'ask'
   compiled: RegExp
+  /** Set when the pattern is structurally invalid and can never match. */
+  invalid?: string
 }
 
 export interface PermissionRule {

package/src/tools/file/grep.ts

@@ -1,3 +1,5 @@
+import { homedir } from 'node:os'
+import { parse } from 'node:path'
 import type { ToolDefinition, CredentialMaskingConfig } from '../../shared/index.ts'
 import { resolveSafe } from '../../security/path'
 import type { Service } from '../../vajra'
@@ -37,6 +39,15 @@ export function truncateGrepOutput(stdout: string): string {
   return `${out.slice(0, GREP_MAX_OUTPUT_CHARS)}\n\n... (truncated)`
 }
 
+/**
+ * 判断搜索根是否是「顶层目录」（家目录或文件系统根）。这类范围扫描的是海量
+ * 文件树（macOS ~/Library 有数百万受保护文件），会让 rg exit 2、find 回退卡
+ * 满 120s。顶层范围应 fail-fast，让模型指定项目目录，而不是静默全盘扫。
+ */
+export function isTopLevelScope(searchPath: string, home = homedir()): boolean {
+  return searchPath === home || searchPath === parse(searchPath).root
+}
+
 export function createGrepTool(credentialConfig?: CredentialMaskingConfig): ToolDefinition {
   return {
     name: 'Grep',
@@ -65,6 +76,20 @@ export function createGrepTool(credentialConfig?: CredentialMaskingConfig): Tool
       const searchPath = resolveSafe(ctx.cwd, (params.path as string) || '.')
       const include = params.include as string | undefined
 
+      // Scope guard: a top-level search root (home or filesystem root) scans an
+      // enormous tree and stalls the find fallback for minutes. Fail fast and
+      // ask for a project-scoped path instead of silently scanning everything.
+      if (!params.path && isTopLevelScope(searchPath)) {
+        return {
+          success: false,
+          content: '',
+          error:
+            `Search scope is the home directory / filesystem root (${searchPath}) — too large ` +
+            'and contains protected directories. Specify a project directory with "path", ' +
+            'or cd into the project first.',
+        }
+      }
+
       // 1. ripgrep (fast path)
       const rgArgs = ['rg', '-n', '--heading', '--color=never', '-M', '500', pattern]
       if (include) rgArgs.push('--glob', include)
@@ -85,9 +110,30 @@ export function createGrepTool(credentialConfig?: CredentialMaskingConfig): Tool
             content: maskSearchOutput(stdout || '(no matches)', credentialConfig, 'heading'),
           }
         }
-        // rg exit 2 (error) or null (killed) → fall through to grep
+        // rg exit 2 (error, e.g. permission denied on protected dirs) — do NOT
+        // fall back to the slow `find -type f` scan (it hits the same unreadable
+        // paths and stalls on huge trees). Return partial matches if any, else
+        // a clear narrow-scope error.
+        if (stdout && stdout.trim()) {
+          return {
+            success: true,
+            content: maskSearchOutput(
+              stdout +
+                '\n\n(rg exited 2 — some paths unreadable; narrow scope for complete results)',
+              credentialConfig,
+              'heading',
+            ),
+          }
+        }
+        return {
+          success: false,
+          content: '',
+          error:
+            'rg error (exit 2) — likely permission denied on a large/protected tree. ' +
+            'Narrow scope with "path" (project directory) and "include".',
+        }
       } catch {
-        // rg not installed → fall through to grep
+        // rg not installed → fall through to grep (find + grep fallback)
       }
 
       // 2. fallback: `find -type f -exec grep -Hn {} +`

package/src/ui/commands.ts

@@ -6,6 +6,7 @@
  */
 import type { QueryEngine } from '../core/engine'
 import type { MiphamConfig } from '../shared/index.ts'
+import { formatContextWindow } from '../shared/format'
 import type { SkillsLoader } from '../skills/loader'
 import type { PluginManager } from '../plugin/plugin-manager'
 import type { Message } from '../shared/types.js'
@@ -438,7 +439,7 @@ const modelsCmd: CommandHandler = (ctx) => {
         .filter((m) => m.status === 'active')
         .map(
           (m) =>
-            `  ${p.id.padEnd(12)} ${m.id.padEnd(30)} ${m.contextWindow.toLocaleString()} ctx  ${m.vision ? '🖼' : '📝'}`,
+            `  ${p.id.padEnd(12)} ${m.id.padEnd(30)} ${formatContextWindow(m.contextWindow)} ctx  ${m.vision ? '🖼' : '📝'}`,
         ),
     )
 

package/src/ui/picker.tsx

@@ -198,7 +198,7 @@ export function ModelPicker({
                 </Text>
                 <Text dimColor>
                   {'   '}
-                  {m.id} · {m.contextWindow.toLocaleString()} ctx
+                  {m.id}
                   {m.vision ? ' · 🖼 vision' : ''}
                 </Text>
               </Box>