@miphamai/cli 0.80.1 → 0.81.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miphamai/cli",
-  "version": "0.80.1",
+  "version": "0.81.1",
   "description": "Mipham Code — Multi-model open-core intelligent coding terminal by MiphamAI",
   "keywords": [
     "ai",
@@ -51,10 +51,10 @@
   },
   "devDependencies": {
     "@mipham/shared": "workspace:*",
-    "@types/bun": "^1.3.14",
+    "@types/bun": "^1.4.2",
     "@types/node": "^22.19.19",
     "@types/react": "^19.3.0",
     "ink-testing-library": "^4.0.0",
-    "vitest": "^4.1.7"
+    "vitest": "^5.0.0"
   }
 }

package/src/agent/agent-experience.ts

@@ -1,5 +1,6 @@
 import { mkdirSync, readFileSync, writeFileSync, existsSync, unlinkSync } from 'node:fs'
 import { join } from 'node:path'
+import { homedir } from 'node:os'
 import { ExperienceRuleExtractor, type ExperienceRule } from './experience-rules.js'
 
 const MAX_EXPERIENCES = 20
@@ -10,7 +11,7 @@ export class AgentExperience {
 
   constructor(
     private readonly agentName: string,
-    baseDir: string = join(process.env.HOME || '~', '.mipham', 'agent-memory'),
+    baseDir: string = join(homedir(), '.mipham', 'agent-memory'),
   ) {
     this.expDir = join(baseDir, agentName)
     this.expFile = join(this.expDir, 'experience.md')

package/src/agent/effectiveness-tracker.ts

@@ -1,5 +1,6 @@
 import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs'
 import { join, dirname } from 'node:path'
+import { homedir } from 'node:os'
 import type { CrsiProvenanceBridge, CrsiVerdict } from './crsi-provenance-bridge.js'
 import { isRecoverableToolFailure } from './recoverable-failure.js'
 
@@ -31,7 +32,7 @@ export class EffectivenessTracker {
   private storePath: string
   private provenanceBridge?: CrsiProvenanceBridge
 
-  constructor(storeDir: string = join(process.env.HOME || '~', '.mipham', 'rule-engine')) {
+  constructor(storeDir: string = join(homedir(), '.mipham', 'rule-engine')) {
     this.storePath = join(storeDir, STORE_FILE)
     this.data = new Map()
   }

package/src/commands/loop-scaffold.ts

@@ -11,6 +11,7 @@
 
 import { mkdirSync, writeFileSync, existsSync, chmodSync } from 'node:fs'
 import { join, resolve } from 'node:path'
+import { homedir } from 'node:os'
 
 export interface ScaffoldResult {
   created: string[]
@@ -87,7 +88,7 @@ export function scaffoldLoopKit(basePath: string): ScaffoldResult {
   const created: string[] = []
   const skipped: string[] = []
 
-  const resolved = resolve(basePath.replace(/^~/, process.env.HOME || '~'))
+  const resolved = resolve(basePath.replace(/^~/, homedir()))
   const miphamDir = join(resolved, '.mipham')
 
   // ── .mipham/ root ──

package/src/commands/project.ts

@@ -8,6 +8,7 @@
 import type { CommandHandler, CommandContext, CommandResult } from '../ui/commands.js'
 import { getWorkspaceTrust } from '../core/workspace-trust'
 import { atomicWriteFileSync } from '../shared/atomic-write'
+import { homedir } from 'node:os'
 
 export {
   initCmd,
@@ -311,7 +312,7 @@ const setupCmd: CommandHandler = async (ctx, args) => {
   const { existsSync } = await import('node:fs')
   const { join } = await import('node:path')
   const cwd = process.cwd()
-  const home = process.env.HOME || '~'
+  const home = homedir()
 
   const hasProjectMipham = existsSync(join(cwd, 'MIPHAM.md'))
   const hasProjectConfig = existsSync(join(cwd, '.mipham', 'config.yml'))
@@ -688,7 +689,7 @@ permission boundaries. Adding directories here extends read/write access.`,
 
   const { existsSync } = await import('node:fs')
   const { resolve } = await import('node:path')
-  const resolved = resolve(dir.replace(/^~/, process.env.HOME || '~'))
+  const resolved = resolve(dir.replace(/^~/, homedir()))
 
   if (!existsSync(resolved)) {
     return { content: `✗ Directory not found: ${resolved}\n\nCheck the path and try again.` }

package/src/core/instructions.ts

@@ -1,5 +1,6 @@
 import { readFileSync, existsSync } from 'node:fs'
 import { join, resolve, relative, sep, isAbsolute } from 'node:path'
+import { homedir } from 'node:os'
 import { execSync } from 'node:child_process'
 import { parse as parseYaml } from 'yaml'
 import type { InstructionFile } from '../shared/index.ts'
@@ -126,7 +127,7 @@ export class InstructionsLoader {
     })
 
     // Tier 3: 用户层 ~/.mipham/USER.md
-    const home = process.env.HOME || '~'
+    const home = homedir()
     this.tryLoad(join(home, '.mipham', 'USER.md'), 'user')
 
     // CRSI 教训召回：读 crsi-lessons.md 提取精华，注入系统提示（只写不读 → 写后召回）

package/src/core/permission-rules.ts

@@ -63,6 +63,56 @@ const WRITER_COMMANDS = new Set([
   'truncate',
 ])
 
+/**
+ * Commands that wrap another command as their payload. A Read/Edit deny rule
+ * must still apply when the reader/writer is wrapped (`sudo cat X`, `env -C / X`,
+ * `timeout 5 X`) — otherwise the wrapper silently bypasses the rule.
+ */
+const PREFIX_COMMANDS = new Set([
+  'sudo',
+  'doas',
+  'nohup',
+  'command',
+  'exec',
+  'nice',
+  'timeout',
+  'env',
+  'xargs',
+  'eval',
+  'stdbuf',
+])
+
+/** Value-taking options of wrapper commands (consume the following token). */
+const PREFIX_VALUE_OPTIONS = new Set([
+  '-u',
+  '--user',
+  '-g',
+  '--group',
+  '-h',
+  '--host',
+  '-p',
+  '--prompt', // sudo/doas
+  '-n',
+  '--adjustment', // nice (and xargs --max-args)
+  '-k',
+  '--kill-after',
+  '-s',
+  '--signal', // timeout
+  '-C',
+  '--chdir',
+  '--unset',
+  '-S',
+  '--split-string', // env
+  '-a',
+  '--arg-file',
+  '-E',
+  '--eof',
+  '-I',
+  '--replace',
+  '-P',
+  '--max-procs', // xargs
+])
+
 /**
  * Split a (possibly compound) shell command into simple-command segments, so a
  * Bash(pattern) rule matches any segment rather than only the whole string
@@ -156,6 +206,8 @@ function flattenCommand(command: string): string[] {
   const out: string[] = []
   for (const seg of splitShellSegments(command)) {
     out.push(seg)
+    const stripped = stripPrefixCommand(seg)
+    if (stripped !== seg) out.push(stripped)
     for (const inner of extractSubstitutions(seg)) {
       out.push(...flattenCommand(inner))
     }
@@ -163,6 +215,46 @@ function flattenCommand(command: string): string[] {
   return out
 }
 
+/**
+ * Resolve the effective command and its arguments after any wrapper prefix
+ * commands (`sudo`, `env`, `timeout`, …). Skips the wrapper and its own options
+ * (flags, the values of value-taking flags, `env`'s `VAR=value` assignments, and
+ * `timeout`'s positional duration) to reach the real command. Conservative, not a
+ * full parser: only recognized wrappers are stripped, so an unrecognized token is
+ * always treated as the command (never skipped) — which over-matches, the safe
+ * direction for a deny rule.
+ */
+function effectiveCommand(tokens: string[]): { base: string; args: string[] } {
+  let i = 0
+  while (i < tokens.length) {
+    const name = (tokens[i] || '').split('/').pop() || ''
+    if (!PREFIX_COMMANDS.has(name)) break
+    i++ // skip the wrapper
+    while (i < tokens.length && tokens[i]!.startsWith('-')) {
+      const opt = tokens[i]!
+      i++
+      if (PREFIX_VALUE_OPTIONS.has(opt) && i < tokens.length) i++ // skip the flag's value
+    }
+    if (name === 'env') {
+      while (i < tokens.length && tokens[i]!.includes('=')) i++ // `VAR=value` assignments
+    }
+    if (name === 'timeout') i++ // positional duration
+  }
+  if (i >= tokens.length) return { base: '', args: [] }
+  return { base: (tokens[i] || '').split('/').pop() || '', args: tokens.slice(i + 1) }
+}
+
+/** A command with any wrapper prefix commands stripped, so `sudo rm -rf /`
+ *  matches a `Bash(rm *)` rule. Returns the input unchanged when there is no
+ *  wrapper (or nothing but wrappers). */
+function stripPrefixCommand(command: string): string {
+  const tokens = command.split(/\s+/).filter(Boolean)
+  if (tokens.length === 0) return command
+  const { base, args } = effectiveCommand(tokens)
+  if (!base) return command
+  return [base, ...args].join(' ')
+}
+
 /**
  * Detect reader/writer commands at the front of each shell segment and recurse
  * into command substitutions, so `echo $(cat .git-credentials)` is caught.
@@ -171,8 +263,7 @@ function scanReaderWriterCommands(command: string, read: string[], write: string
   for (const seg of splitShellSegments(command)) {
     const tokens = seg.split(/\s+/).filter(Boolean)
     if (tokens.length > 0) {
-      const base = (tokens[0] || '').split('/').pop() || ''
-      const args = tokens.slice(1)
+      const { base, args } = effectiveCommand(tokens)
       if (READER_COMMANDS.has(base)) {
         // `sed -i` / `perl -i` read AND write their file args.
         const inPlace = args.some((a) => a === '-i' || a.startsWith('--in-place'))

package/src/core/rule-engine.ts

@@ -1,6 +1,7 @@
 import type { ExperienceRule } from '../agent/experience-rules.js'
 import { mkdirSync, writeFileSync, readFileSync, existsSync } from 'node:fs'
 import { join, dirname } from 'node:path'
+import { homedir } from 'node:os'
 import { MANAGED_RULES } from './crsi-managed-rules'
 
 export interface ToolRule {
@@ -61,7 +62,7 @@ export class ExperienceRuleEngine {
   private rules: ToolRule[]
   private storePath: string
 
-  constructor(storeDir: string = join(process.env.HOME || '~', '.mipham', 'rule-engine')) {
+  constructor(storeDir: string = join(homedir(), '.mipham', 'rule-engine')) {
     this.rules = [...BUILTIN_RULES, ...MANAGED_RULES].map((r) => ({ ...r }))
     this.storePath = join(storeDir, 'rules.json')
     this.load()

package/src/core/session-log.ts

@@ -1,4 +1,5 @@
 import { appendFileSync, readFileSync, mkdirSync, existsSync } from 'node:fs'
+import { homedir } from 'node:os'
 import { join } from 'node:path'
 import { createHash } from 'node:crypto'
 import type { Message, ToolUseContent, ToolResultContent, ToolResult } from '../shared/types'
@@ -101,7 +102,7 @@ export function deriveMessages(events: SessionEvent[]): Message[] {
   return out
 }
 
-const HOME = process.env.HOME || '~'
+const HOME = homedir()
 const LOG_DIR = join(HOME, '.mipham', 'sessions')
 
 /** 将会话名消毒为安全文件名（与 SessionStore 共用；防路径穿越）。 */

package/src/core/session-store.ts

@@ -8,6 +8,7 @@ import {
   existsSync,
   statSync,
 } from 'node:fs'
+import { homedir } from 'node:os'
 import { join } from 'node:path'
 import { createHash } from 'node:crypto'
 import type { Message } from '../shared/types'
@@ -28,7 +29,7 @@ export interface StoredSession {
   messages: Message[]
 }
 
-const HOME = process.env.HOME || '~'
+const HOME = homedir()
 const SESSIONS_DIR = join(HOME, '.mipham', 'sessions')
 const INDEX_FILE = join(SESSIONS_DIR, '.index.json')
 const SUMMARIES_DIR = join(SESSIONS_DIR, '.summaries')

package/src/daemon/database.ts

@@ -1,6 +1,7 @@
 // apps/cli/src/daemon/database.ts
 import { Database } from 'bun:sqlite'
 import { readdirSync, readFileSync, existsSync } from 'node:fs'
+import { homedir } from 'node:os'
 import { join } from 'node:path'
 import type {
   DaemonSession,
@@ -339,7 +340,7 @@ export class DaemonDatabase {
   // ── Migration ──────────────────────────────────────────────
 
   migrateFromJsonl(): number {
-    const sessionsDir = join(process.env.HOME || '/tmp', '.mipham', 'sessions')
+    const sessionsDir = join(homedir(), '.mipham', 'sessions')
 
     if (!existsSync(sessionsDir)) return 0
 

package/src/shared/package-info.ts

@@ -9,7 +9,7 @@
 export const PACKAGE_NAME = '@miphamai/cli' as const
 
 /** 当前发布版本 */
-export const PACKAGE_VERSION = '0.80.1' as const
+export const PACKAGE_VERSION = '0.81.1' as const
 
 /** npm install 全局安装命令 */
 export const NPM_INSTALL_COMMAND = `npm install -g ${PACKAGE_NAME}` as const

package/src/tools/system/config.ts

@@ -1,9 +1,10 @@
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs'
 import { join } from 'node:path'
+import { homedir } from 'node:os'
 import { parse as parseYaml, stringify } from 'yaml'
 import type { ToolDefinition } from '../../shared/index.ts'
 
-const MIPHAM_DIR = join(process.env.HOME || '~', '.mipham')
+const MIPHAM_DIR = join(homedir(), '.mipham')
 const USER_CONFIG = join(MIPHAM_DIR, 'config.yml')
 
 export const configTool: ToolDefinition = {

package/src/ui/chat.tsx

@@ -2,6 +2,7 @@ import React, { useMemo } from 'react'
 import { Box, Text } from 'ink'
 import { useI18n } from '../i18n-context'
 import type { ChatMessage } from './app'
+import { homedir } from 'node:os'
 
 interface ChatPanelProps {
   messages: ChatMessage[]
@@ -11,7 +12,7 @@ interface ChatPanelProps {
 /** Format cwd for display: replace HOME with ~, truncate if too long */
 function displayCwd(): string {
   const cwd = process.cwd()
-  const home = process.env.HOME || ''
+  const home = homedir()
   if (home && cwd.startsWith(home)) {
     return '~' + cwd.slice(home.length)
   }

package/src/ui/commands.ts

@@ -18,6 +18,7 @@ import { InstructionsLoader } from '../core/instructions'
 import { findDerivableSections, DERIVABLE_HINTS } from '../core/claude-md-audit'
 import { fixDoctor, fixConfig, fixCache, selectRepoClaudeFiles } from '../core/fix'
 import { fixCodeTarget } from '../core/fix-code'
+import { homedir } from 'node:os'
 import { runCrsiModification, approvePending, rejectPending, hasPending } from '../core/crsi-modify'
 import {
   produceCrsiProposal,
@@ -2573,7 +2574,7 @@ const installPluginCmd: CommandHandler = async (ctx, args) => {
 
   if (isLocalPath) {
     const { resolve } = await import('node:path')
-    const resolved = resolve(target.replace(/^~/, process.env.HOME || '~'))
+    const resolved = resolve(target.replace(/^~/, homedir()))
     result = manager.install(resolved)
   } else {
     // Treat as npm package name
@@ -2882,7 +2883,7 @@ const loopCmd: CommandHandler = async (ctx, args) => {
     const { scaffoldLoopKit } = await import('../commands/loop-scaffold')
     const { created, skipped } = scaffoldLoopKit(targetPath)
     const { resolve } = await import('node:path')
-    const resolved = resolve(targetPath.replace(/^~/, process.env.HOME || '~'))
+    const resolved = resolve(targetPath.replace(/^~/, homedir()))
 
     const lines: string[] = ['── LoopKit Vault Created ──', '', `Location: ${resolved}`, '']
 
@@ -3721,7 +3722,7 @@ const cdCmd: CommandHandler = async (ctx, args) => {
 
   const { existsSync } = await import('node:fs')
   const { resolve } = await import('node:path')
-  const resolved = resolve(target.replace(/^~/, process.env.HOME || '~'))
+  const resolved = resolve(target.replace(/^~/, homedir()))
 
   if (!existsSync(resolved)) {
     const suggestions = suggestDirectories(resolved)
@@ -4118,7 +4119,7 @@ const memoryCmd: CommandHandler = async (ctx, args) => {
   const { existsSync, readdirSync, readFileSync, statSync } = await import('node:fs')
   const { join } = await import('node:path')
 
-  const home = process.env.HOME || '~'
+  const home = homedir()
   const memoryDir = join(home, '.mipham', 'memory')
 
   // /memory gc — 记忆卫生：归档「0 召回 + 过期」的 auto-* 记忆（手写只报告）
@@ -4320,7 +4321,7 @@ const workflowsCmd: CommandHandler = async () => {
 
   const locations = [
     join(process.cwd(), '.claude', 'workflows'),
-    join(process.env.HOME || '~', '.claude', 'workflows'),
+    join(homedir(), '.claude', 'workflows'),
   ]
 
   const lines: string[] = ['─ Workflows ─', '']
@@ -4418,7 +4419,7 @@ const workflowRunCmd = async (name: string): Promise<CommandResult> => {
 
   const locations = [
     join(process.cwd(), '.claude', 'workflows'),
-    join(process.env.HOME || '~', '.claude', 'workflows'),
+    join(homedir(), '.claude', 'workflows'),
   ]
 
   for (const loc of locations) {
@@ -4739,7 +4740,7 @@ const logoutCmd: CommandHandler = async () => {
   const { existsSync } = await import('node:fs')
   const { join } = await import('node:path')
 
-  const home = process.env.HOME || '~'
+  const home = homedir()
   const userConfig = join(home, '.mipham', 'config.yml')
   const hasUserConfig = existsSync(userConfig)
 

package/src/workflow/primitives/parallel.ts

@@ -23,7 +23,21 @@ function detectParallelism(): number {
   return os.cpus().length || 1
 }
 
-const MAX_CONCURRENT = Math.max(1, Math.min(16, detectParallelism()))
+/**
+ * Resolve the concurrency cap for parallel() fan-out. Defaults to CPU-derived
+ * parallelism capped at 16. An explicit `MIPHAM_WORKFLOW_MAX_CONCURRENT_AGENTS`
+ * (1–256) overrides it, for inference-bound fan-outs whose bottleneck is LLM
+ * latency rather than CPU. Invalid / out-of-range values fall back to the default.
+ */
+export function resolveMaxConcurrent(envValue: string | undefined): number {
+  if (envValue !== undefined && envValue !== '') {
+    const n = Number(envValue)
+    if (Number.isInteger(n) && n >= 1) return Math.min(n, 256)
+  }
+  return Math.max(1, Math.min(16, detectParallelism()))
+}
+
+const MAX_CONCURRENT = resolveMaxConcurrent(process.env.MIPHAM_WORKFLOW_MAX_CONCURRENT_AGENTS)
 
 /**
  * Simple async semaphore for concurrency limiting.